
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
File: TUTi91KilQtrVSjAaZsUkOdXd0Q.mft (raw, json)
Hash identifier: b9f7SjGsbI5shbWM43WHA/JuwgnnRpaUxaNAb0TOYXU=
Subject key identifier: 00:E6:19:1F:CC:55:32:D6:17:B9:EE:42:4C:06:AA:B9:56:34:F1:D2
Authority key identifier: 4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44
Certificate issuer: /CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744
Certificate serial: 104A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
Manifest number: 103D
Signing time: Thu 08 Oct 2026 17:30:04 +0000
Manifest this update: Thu 08 Oct 2026 17:30:03 +0000
Manifest next update: Thu 15 Oct 2026 17:30:03 +0000
Files and hashes: 1: TUTi91KilQtrVSjAaZsUkOdXd0Q.crl (hash: hR7gQ5HlkoCiEV/xoDMJMLR+iFYWd6MAFA8Y1fbMG/k=)
2: 3D371C5C708F11E9B105E92CC4F9AE02.roa (hash: vIYlDs8E7x8tmtwgfqy6xQ1CQ25/qx1eb5H0P0MwlIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl
rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4170 (0x104a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D15A4, serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744
Validity
Not Before: Oct 8 17:30:03 2026 GMT
Not After : Oct 15 17:30:03 2026 GMT
Subject: CN=6ac7d31c-6758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:1a:82:40:41:ee:a4:70:23:c8:32:f8:7d:
4d:b0:d2:91:48:0e:1d:fc:26:55:98:9f:70:d5:f4:
6d:2d:57:78:76:e3:54:de:52:76:a5:3d:37:41:89:
4a:f6:c8:12:fa:43:2c:c2:64:2e:30:7d:61:c7:86:
b2:a1:a2:f8:16:29:df:93:ce:4a:20:a5:b5:65:95:
7b:48:1e:f2:9a:e1:08:45:d8:46:11:47:e0:b1:b4:
4d:6e:7e:f7:33:9f:46:c7:27:df:e7:47:07:ea:95:
81:05:86:51:b1:01:07:d1:46:83:6d:79:e2:1f:ed:
73:93:a2:8b:5f:c3:31:bf:cd:98:70:d8:2a:c3:5b:
34:17:e5:e7:aa:e9:e5:86:c7:cf:b2:88:f7:0a:26:
8f:e3:4b:b0:99:5a:c9:91:a6:0f:f4:2a:40:be:f1:
e0:8a:aa:a8:05:e9:a5:9e:71:82:ab:58:bc:62:fb:
90:12:55:9a:bf:cc:d2:6c:37:17:0b:28:c5:0a:85:
5b:09:46:12:b6:d1:64:50:28:5b:b0:95:78:84:bc:
26:87:21:fa:33:f5:d2:41:ed:14:f1:80:78:ea:44:
86:04:a9:58:2b:cb:3c:be:90:50:f8:03:2f:23:fc:
8c:da:4e:64:5d:d7:70:a9:64:22:00:ea:2d:37:2f:
29:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E6:19:1F:CC:55:32:D6:17:B9:EE:42:4C:06:AA:B9:56:34:F1:D2
X509v3 Authority Key Identifier:
keyid:4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:17:8b:4b:99:e5:0e:07:63:4e:48:9e:c6:34:60:b5:b1:e9:
bf:10:85:6d:8c:74:9b:50:fe:6a:2a:b7:e0:4b:0c:33:ae:ed:
6f:c8:79:df:7b:db:a7:c4:93:a9:4e:d3:30:87:d4:49:bc:d7:
79:c3:ef:c1:88:4a:c4:ec:46:79:10:9f:31:17:a1:73:42:e9:
f3:c5:30:ab:a6:0b:00:50:c4:16:de:e4:4c:3e:5f:a3:5c:b3:
45:e1:96:45:85:64:ec:12:b5:e6:0c:79:c8:d4:84:f2:ba:e2:
26:9d:8a:f3:d4:24:d2:e0:89:8e:e2:1b:fb:51:a9:65:b8:af:
ea:eb:60:7a:8d:97:83:d8:c8:01:15:dc:8d:43:17:f1:0e:18:
5a:91:bf:b9:5f:60:e7:40:fd:cd:15:48:cb:30:20:d1:0b:03:
fc:d8:1e:01:25:df:90:39:72:9f:13:c1:e0:b4:33:79:40:1b:
7b:97:a9:6f:47:c2:c1:f7:48:b8:df:cd:cd:97:51:4a:b4:99:
74:e8:91:51:2b:52:49:0b:2c:54:93:e8:1d:d9:ee:41:ac:fe:
96:53:17:e3:3e:11:1b:b3:04:6e:cb:08:a7:16:fe:cd:a8:62:
fd:36:a3:84:bd:2a:79:0b:8d:5b:95:29:01:b9:8d:88:5b:fa:
78:d1:90:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:07:14 2026 by rpki-client