$ rpki-client -vvf rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft File: TUTi91KilQtrVSjAaZsUkOdXd0Q.mft (raw, json) Hash identifier: UO7g5XshzjNvz7YtVqhq35uNCXBPFpnB8dFEP9RbeR0= Subject key identifier: 73:A7:3C:86:89:8A:C9:9B:99:DC:EA:AE:D1:6A:47:95:30:44:5D:A1 Authority key identifier: 4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 Certificate issuer: /CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Certificate serial: 0F55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft Manifest number: 0F4B Signing time: Wed 02 Jul 2025 17:48:08 +0000 Manifest this update: Wed 02 Jul 2025 17:48:08 +0000 Manifest next update: Wed 09 Jul 2025 17:48:08 +0000 Files and hashes: 1: TUTi91KilQtrVSjAaZsUkOdXd0Q.crl (hash: VJ3OwbeH24nFXb3QR0zPn0VgO9X7J0tlVxHoI/aWTss=) 2: 3D371C5C708F11E9B105E92CC4F9AE02.roa (hash: YkmY4q4YSypbm13HUH++xACjilqSAUGjIIEq3zMyNH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3925 (0xf55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D15A4, serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Validity Not Before: Jul 2 17:48:08 2025 GMT Not After : Jul 9 17:48:08 2025 GMT Subject: CN=686570d8-7148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2c:f8:04:c2:e5:cd:e0:c3:8a:66:07:3a:8b: c0:8f:6f:b5:0e:46:bf:21:3f:c4:1e:ad:ab:40:d3: 59:3c:30:ff:a4:b2:02:92:d1:c2:8b:d8:58:3f:c1: 11:10:90:98:6d:68:63:58:4f:27:df:5c:55:be:b9: 21:b9:a1:f4:10:40:f7:f1:3d:fd:e1:45:8b:dc:8c: 85:df:94:21:5a:d3:37:90:9a:7d:33:b1:66:22:0e: 3b:3a:f1:34:db:bd:9d:96:c3:3f:0c:af:50:8f:4b: a6:3b:86:c8:a8:99:1d:ca:22:49:79:2c:74:0e:59: 33:1c:50:86:d8:56:1b:6f:74:b7:ea:39:47:c0:72: 43:fc:46:d7:2e:a0:60:09:12:20:d6:8b:e3:93:38: e2:b3:82:68:15:d3:d2:ad:70:23:45:b6:51:e0:03: 9b:6d:ef:98:28:e4:2f:76:18:4f:15:77:76:29:e6: e1:f7:70:7e:2b:b0:90:50:46:0b:6d:bb:94:68:ff: 21:8a:cb:98:8d:03:cb:80:87:2c:a1:d9:ec:a0:8a: fb:32:20:c5:09:f0:69:91:31:0e:7e:80:ee:26:cf: 42:68:26:5f:f4:84:b3:e4:bc:59:e1:41:ee:fb:17: 5a:1a:03:f9:7f:79:89:8d:76:ec:88:4e:b1:56:da: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A7:3C:86:89:8A:C9:9B:99:DC:EA:AE:D1:6A:47:95:30:44:5D:A1 X509v3 Authority Key Identifier: keyid:4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d9:01:93:70:d8:af:d2:5c:7b:10:bd:c9:0e:cc:96:20:27: 18:44:7a:8f:48:2d:d7:8b:4a:15:61:be:7f:c0:c8:33:67:b7: 54:aa:a3:68:54:a6:73:9f:9f:64:ab:1b:e8:7d:b0:bf:85:f6: b2:74:84:51:a6:90:a2:ac:ba:68:9e:aa:84:21:2c:63:5f:02: 5f:39:d9:1d:5c:4b:54:83:f7:8b:03:e2:8a:c7:09:55:b8:32: 1f:ac:bb:7e:4d:a4:07:e7:ac:84:a7:f8:80:e8:5d:bb:70:85: 05:91:5b:5a:11:f4:3b:bd:90:5f:2d:96:1a:60:95:37:f2:44: 86:2a:e0:e3:c7:66:37:a3:2e:b1:da:05:e9:c1:1a:49:c4:c3: e6:2f:9b:e6:0b:81:d4:03:80:d5:cc:25:1f:b3:42:4c:3f:b9: 74:e9:2d:30:24:f1:3b:b9:e2:62:9b:91:f7:fe:c2:fc:a6:e0: 66:f6:e6:14:90:b5:3f:1e:7e:11:7d:3f:ae:bc:ef:12:6e:1e: 47:2f:f1:cc:7b:1f:65:8d:f4:0f:88:56:d9:b9:68:e5:c7:c8: 9a:29:6b:f0:c0:ff:5c:77:11:94:57:b1:f8:25:52:2c:fd:b3: f6:64:53:02:f1:52:bb:bd:2b:d4:1a:2d:70:9a:9a:42:8d:90: 56:7e:eb:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE1QTQxMTAvBgNVBAUTKDRENDRFMkY3NTJBMjk1MEI2QjU1MjhDMDY5OUIxNDkw RTc1Nzc3NDQwHhcNMjUwNzAyMTc0ODA4WhcNMjUwNzA5MTc0ODA4WjAYMRYwFAYD VQQDEw02ODY1NzBkOC03MTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iz4BMLlzeDDimYHOovAj2+1Dka/IT/EHq2rQNNZPDD/pLICktHCi9hYP8ER EJCYbWhjWE8n31xVvrkhuaH0EED38T394UWL3IyF35QhWtM3kJp9M7FmIg47OvE0 272dlsM/DK9Qj0umO4bIqJkdyiJJeSx0DlkzHFCG2FYbb3S36jlHwHJD/EbXLqBg CRIg1ovjkzjis4JoFdPSrXAjRbZR4AObbe+YKOQvdhhPFXd2Kebh93B+K7CQUEYL bbuUaP8hisuYjQPLgIcsodnsoIr7MiDFCfBpkTEOfoDuJs9CaCZf9ISz5LxZ4UHu +xdaGgP5f3mJjXbsiE6xVtpIiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOnPIaJ ismbmdzqrtFqR5UwRF2hMB8GA1UdIwQYMBaAFE1E4vdSopULa1UowGmbFJDnV3dE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTVBNC9CMzRFNkQ1MDcw OEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxRdHJWU2pBYVpzVWtPZFhk MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVVGk5MUtpbFF0clZTakFhWnNVa09kWGQwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTVBNC9CMzRFNkQ1MDcwOEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxR dHJWU2pBYVpzVWtPZFhkMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN2QGTcNiv0lx7EL3JDsyWICcYRHqPSC3Xi0oVYb5/wMgzZ7dUqqNo VKZzn59kqxvofbC/hfaydIRRppCirLponqqEISxjXwJfOdkdXEtUg/eLA+KKxwlV uDIfrLt+TaQH56yEp/iA6F27cIUFkVtaEfQ7vZBfLZYaYJU38kSGKuDjx2Y3oy6x 2gXpwRpJxMPmL5vmC4HUA4DVzCUfs0JMP7l06S0wJPE7ueJim5H3/sL8puBm9uYU kLU/Hn4RfT+uvO8Sbh5HL/HMex9ljfQPiFbZuWjlx8iaKWvwwP9cdxGUV7H4JVIs /bP2ZFMC8VK7vSvUGi1wmppCjZBWfuuM -----END CERTIFICATE-----Generated at Thu Jul 3 06:10:21 2025 by rpki-client