$ rpki-client -vvf rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft File: TUTi91KilQtrVSjAaZsUkOdXd0Q.mft (raw, json) Hash identifier: oU+EDSy5hfH7GTz+uACuGk4YG6tmX7OSJmCeDiXARw8= Subject key identifier: 7D:E2:15:C7:76:63:16:7B:9E:09:54:24:87:0E:69:34:2D:95:3B:58 Authority key identifier: 4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 Certificate issuer: /CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Certificate serial: 0FEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft Manifest number: 0FDE Signing time: Sat 04 Apr 2026 17:22:25 +0000 Manifest this update: Sat 04 Apr 2026 17:22:25 +0000 Manifest next update: Sat 11 Apr 2026 17:22:25 +0000 Files and hashes: 1: TUTi91KilQtrVSjAaZsUkOdXd0Q.crl (hash: +KKGKWzPvHla1hBoUsWZNXp7piZsimsmzUWeUOUE96k=) 2: 3D371C5C708F11E9B105E92CC4F9AE02.roa (hash: vIYlDs8E7x8tmtwgfqy6xQ1CQ25/qx1eb5H0P0MwlIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4075 (0xfeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D15A4, serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Validity Not Before: Apr 4 17:22:25 2026 GMT Not After : Apr 11 17:22:25 2026 GMT Subject: CN=69d148d1-f216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:60:a1:66:c8:01:be:23:ea:73:b8:a9:11:11: ca:02:57:69:e2:4c:0d:cf:ba:79:2b:ce:ab:b9:43: b1:59:8d:5b:a6:1d:cb:ac:e3:99:a6:94:84:e3:58: c8:20:7a:25:b3:69:b6:ed:18:df:c6:8e:7f:69:12: 32:0b:78:c4:4e:0f:24:a2:a0:c0:66:c4:88:2b:ec: 43:fd:c3:05:8b:6f:1d:51:af:a1:e5:7a:f9:6b:3d: 73:be:cf:07:8a:44:d5:de:5c:03:81:f4:d3:a9:04: fc:68:f0:72:32:6a:db:f9:61:f7:70:03:aa:d2:a8: 93:8f:f2:f4:2c:de:71:6a:32:1a:ea:2d:c2:4a:7b: 5e:ad:28:17:03:a6:cc:06:bc:24:96:f6:c0:ce:94: b1:8a:64:ad:9a:ee:56:b0:2f:76:14:a4:be:67:13: 95:2a:33:53:13:70:05:e5:48:93:a4:c2:1b:8d:84: a6:ae:44:b2:94:dc:cc:c9:56:e5:0a:56:a6:5c:fe: 82:15:3e:b5:82:96:61:d5:22:32:83:c8:42:43:6b: 26:f9:06:bd:f5:68:cc:96:ba:84:51:5b:6e:b9:09: 28:1c:de:49:f4:29:78:99:d4:f6:f4:4f:96:6b:b7: b0:b9:da:1e:88:f8:56:36:ff:b2:8f:b0:f3:be:4a: 85:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E2:15:C7:76:63:16:7B:9E:09:54:24:87:0E:69:34:2D:95:3B:58 X509v3 Authority Key Identifier: keyid:4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c3:3c:de:5b:71:a0:01:c0:60:5c:0b:04:fe:71:61:57:0e: 69:5f:6f:0f:f8:3f:f6:66:e1:4a:5d:bd:f7:5f:80:ad:10:fb: 61:f8:fb:9e:c2:cb:4f:67:a7:b0:ce:e0:bd:9e:0e:a9:89:c5: 2c:81:f7:c6:b2:d5:af:2f:6f:50:91:ce:99:95:23:37:95:d0: bf:f9:6e:66:73:85:8d:21:9d:9e:d5:7c:5d:b2:ec:eb:b3:e6: b8:b1:5c:8e:cf:90:f5:8b:33:fc:9d:b3:2e:53:46:c6:57:2a: b7:9e:7d:da:53:5c:c6:69:3d:6e:d8:ac:11:6d:c4:ba:89:53: b2:24:ef:76:6e:1e:90:82:50:58:99:05:a0:f9:4f:7d:b2:fa: 24:bc:5f:a2:d6:1f:9c:ca:b2:33:5a:3d:08:c7:18:13:cd:c0: 55:68:93:a7:a6:68:b6:d5:20:56:fe:28:e2:ef:14:9f:f5:b7: 6c:cc:e7:b9:78:32:f6:39:2a:ed:3a:9b:27:49:3d:e3:4b:10: 99:48:9d:1d:a4:6f:77:12:5e:0b:a0:e2:6e:19:53:ef:9c:d7: 3d:8f:10:cb:a7:d3:bd:72:e6:86:28:90:32:e9:e3:93:78:c0: 47:c7:71:fe:0d:b6:ee:85:6e:97:06:d6:9d:ba:48:be:a8:bc: e6:6e:84:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE1QTQxMTAvBgNVBAUTKDRENDRFMkY3NTJBMjk1MEI2QjU1MjhDMDY5OUIxNDkw RTc1Nzc3NDQwHhcNMjYwNDA0MTcyMjI1WhcNMjYwNDExMTcyMjI1WjAYMRYwFAYD VQQDEw02OWQxNDhkMS1mMjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62ChZsgBviPqc7ipERHKAldp4kwNz7p5K86ruUOxWY1bph3LrOOZppSE41jI IHols2m27Rjfxo5/aRIyC3jETg8koqDAZsSIK+xD/cMFi28dUa+h5Xr5az1zvs8H ikTV3lwDgfTTqQT8aPByMmrb+WH3cAOq0qiTj/L0LN5xajIa6i3CSnterSgXA6bM BrwklvbAzpSximStmu5WsC92FKS+ZxOVKjNTE3AF5UiTpMIbjYSmrkSylNzMyVbl ClamXP6CFT61gpZh1SIyg8hCQ2sm+Qa99WjMlrqEUVtuuQkoHN5J9Cl4mdT29E+W a7ewudoeiPhWNv+yj7DzvkqFUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3iFcd2 YxZ7nglUJIcOaTQtlTtYMB8GA1UdIwQYMBaAFE1E4vdSopULa1UowGmbFJDnV3dE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTVBNC9CMzRFNkQ1MDcw OEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxRdHJWU2pBYVpzVWtPZFhk MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVVGk5MUtpbFF0clZTakFhWnNVa09kWGQwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTVBNC9CMzRFNkQ1MDcwOEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxR dHJWU2pBYVpzVWtPZFhkMFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADsM83ltxoAHAYFwLBP5xYVcOaV9vD/g/9mbhSl2991+ArRD7Yfj7nsLLT2en sM7gvZ4OqYnFLIH3xrLVry9vUJHOmZUjN5XQv/luZnOFjSGdntV8XbLs67PmuLFc js+Q9Ysz/J2zLlNGxlcqt5592lNcxmk9btisEW3EuolTsiTvdm4ekIJQWJkFoPlP fbL6JLxfotYfnMqyM1o9CMcYE83AVWiTp6ZottUgVv4o4u8Un/W3bMznuXgy9jkq 7TqbJ0k940sQmUidHaRvdxJeC6DibhlT75zXPY8Qy6fTvXLmhiiQMunjk3jAR8dx /g227oVulwbWnbpIvqi85m6ESQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:26 2026 by rpki-client