$ rpki-client -vvf rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft File: TUTi91KilQtrVSjAaZsUkOdXd0Q.mft (raw, json) Hash identifier: TNy7EDyzWPl/7tLdDJGQouwomgYvNAn11bPBHLcaQsg= Subject key identifier: B2:8E:7D:AD:2D:E6:1C:73:C8:31:95:BA:BC:CA:23:25:1B:07:B5:DB Authority key identifier: 4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 Certificate issuer: /CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Certificate serial: 0F6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft Manifest number: 0F65 Signing time: Fri 22 Aug 2025 17:41:51 +0000 Manifest this update: Fri 22 Aug 2025 17:41:51 +0000 Manifest next update: Fri 29 Aug 2025 17:41:51 +0000 Files and hashes: 1: TUTi91KilQtrVSjAaZsUkOdXd0Q.crl (hash: lgzs59kPALcEbap9tgAn832BImQyckivMm5evKgrnV0=) 2: 3D371C5C708F11E9B105E92CC4F9AE02.roa (hash: YkmY4q4YSypbm13HUH++xACjilqSAUGjIIEq3zMyNH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3951 (0xf6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D15A4, serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Validity Not Before: Aug 22 17:41:51 2025 GMT Not After : Aug 29 17:41:51 2025 GMT Subject: CN=68a8abdf-0776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:24:38:8b:63:56:1d:54:ef:1f:3e:96:15: 11:97:f2:7e:5e:9c:e1:19:22:ef:b8:11:11:12:e4: ad:c4:34:b9:64:20:e3:db:f0:26:a5:0a:86:4d:cb: 6a:16:1e:9a:20:91:73:70:fc:c3:1c:02:cf:f7:e5: 07:0b:83:f6:c7:d7:f5:ef:fb:41:58:e9:d1:9f:d8: 43:1f:4c:8e:21:97:82:e1:49:dd:64:82:cc:b0:63: 93:a5:ff:b6:c1:d5:b2:e2:da:ab:ff:90:3d:44:00: 41:e7:aa:06:9f:6b:20:f9:af:65:cb:27:f4:27:af: 6f:ff:05:5d:20:ae:b4:6f:07:ad:31:b3:e3:1c:68: e1:c6:26:d0:ad:98:59:67:0e:65:a0:63:07:d7:25: a4:2b:4c:58:71:fc:49:c8:be:a0:30:aa:26:e7:12: 21:1b:d9:bd:a9:60:00:35:1e:78:b1:51:4c:73:b0: 8d:52:09:7f:d1:9f:e9:06:b7:3c:f6:21:81:ef:a7: 4f:9f:96:f6:9f:a6:44:d0:d4:56:eb:7b:34:03:08: f8:60:76:4a:8c:11:44:ba:9c:4e:2d:5b:5a:a1:d4: 94:db:1e:21:38:41:89:b7:b6:dd:a0:1c:66:1c:3f: 83:93:f6:97:b7:b8:16:78:87:cc:07:77:8f:d7:87: ad:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8E:7D:AD:2D:E6:1C:73:C8:31:95:BA:BC:CA:23:25:1B:07:B5:DB X509v3 Authority Key Identifier: keyid:4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:a2:ce:4b:72:fa:ab:f0:17:0c:c8:44:34:27:22:03:0f:43: ca:c4:86:98:d3:93:2b:7b:99:a1:a1:1f:20:5e:d9:bd:56:91: 76:dc:b7:26:cf:48:fe:c5:a7:35:6e:13:f5:e0:1f:2a:bc:00: 0c:77:6c:d7:fe:68:cb:e5:dd:84:b0:2c:f1:b1:bd:8b:bc:17: fb:36:fe:48:11:0c:8b:d4:45:05:4e:ae:b2:38:8f:c0:99:29: df:ea:b5:0f:30:f2:1c:64:fb:e0:5b:af:5f:26:dd:0f:7e:4a: 06:ef:31:bd:e8:32:c7:fe:8a:ba:be:4d:8c:da:e4:fb:38:b6: 7c:a7:2b:d1:88:6e:e9:cd:c6:75:de:66:95:91:32:bc:14:65: bc:c3:0f:08:63:bb:8f:8c:53:fd:e9:a0:0f:10:5f:cf:e7:3d: 5a:38:4c:f8:bd:35:19:89:c9:70:3f:64:82:1e:e8:64:c2:c8: c1:b3:18:41:c5:fd:6d:af:bb:40:fc:bb:25:02:56:87:3c:03: 5d:05:64:c1:98:98:34:87:91:5d:77:10:2a:66:28:5f:97:71: e6:cf:bf:45:c7:6b:c4:80:cd:f4:43:d1:aa:fd:cc:03:17:22: 5c:21:ab:eb:54:d7:ec:d9:f5:14:8d:7a:bb:0d:e9:92:73:ce: 4a:67:a6:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE1QTQxMTAvBgNVBAUTKDRENDRFMkY3NTJBMjk1MEI2QjU1MjhDMDY5OUIxNDkw RTc1Nzc3NDQwHhcNMjUwODIyMTc0MTUxWhcNMjUwODI5MTc0MTUxWjAYMRYwFAYD VQQDEw02OGE4YWJkZi0wNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQgkOItjVh1U7x8+lhURl/J+XpzhGSLvuBEREuStxDS5ZCDj2/AmpQqGTctq Fh6aIJFzcPzDHALP9+UHC4P2x9f17/tBWOnRn9hDH0yOIZeC4UndZILMsGOTpf+2 wdWy4tqr/5A9RABB56oGn2sg+a9lyyf0J69v/wVdIK60bwetMbPjHGjhxibQrZhZ Zw5loGMH1yWkK0xYcfxJyL6gMKom5xIhG9m9qWAANR54sVFMc7CNUgl/0Z/pBrc8 9iGB76dPn5b2n6ZE0NRW63s0Awj4YHZKjBFEupxOLVtaodSU2x4hOEGJt7bdoBxm HD+Dk/aXt7gWeIfMB3eP14etPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKOfa0t 5hxzyDGVurzKIyUbB7XbMB8GA1UdIwQYMBaAFE1E4vdSopULa1UowGmbFJDnV3dE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTVBNC9CMzRFNkQ1MDcw OEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxRdHJWU2pBYVpzVWtPZFhk MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVVGk5MUtpbFF0clZTakFhWnNVa09kWGQwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTVBNC9CMzRFNkQ1MDcwOEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxR dHJWU2pBYVpzVWtPZFhkMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZos5Lcvqr8BcMyEQ0JyIDD0PKxIaY05Mre5mhoR8gXtm9VpF23Lcm z0j+xac1bhP14B8qvAAMd2zX/mjL5d2EsCzxsb2LvBf7Nv5IEQyL1EUFTq6yOI/A mSnf6rUPMPIcZPvgW69fJt0PfkoG7zG96DLH/oq6vk2M2uT7OLZ8pyvRiG7pzcZ1 3maVkTK8FGW8ww8IY7uPjFP96aAPEF/P5z1aOEz4vTUZiclwP2SCHuhkwsjBsxhB xf1tr7tA/LslAlaHPANdBWTBmJg0h5FddxAqZihfl3Hmz79Fx2vEgM30Q9Gq/cwD FyJcIavrVNfs2fUUjXq7DemSc85KZ6bj -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:52 2025 by rpki-client