$ rpki-client -vvf rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft File: TUTi91KilQtrVSjAaZsUkOdXd0Q.mft (raw, json) Hash identifier: bM55/EGIYHqqFDM6VmbLSg6G2HDkqFa0E/5ltRoc2dI= Subject key identifier: 47:05:05:1D:E0:AC:54:B1:09:7E:FB:12:9D:30:1A:D6:74:B8:9B:7A Authority key identifier: 4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 Certificate issuer: /CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Certificate serial: 0FE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft Manifest number: 0FD8 Signing time: Tue 24 Mar 2026 17:22:25 +0000 Manifest this update: Tue 24 Mar 2026 17:22:25 +0000 Manifest next update: Tue 31 Mar 2026 17:22:25 +0000 Files and hashes: 1: TUTi91KilQtrVSjAaZsUkOdXd0Q.crl (hash: 8w81aIjrD62HTsp6K+UbCsfohepxXCq3GJYq3UKjfj0=) 2: 3D371C5C708F11E9B105E92CC4F9AE02.roa (hash: vIYlDs8E7x8tmtwgfqy6xQ1CQ25/qx1eb5H0P0MwlIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4069 (0xfe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D15A4, serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Validity Not Before: Mar 24 17:22:25 2026 GMT Not After : Mar 31 17:22:25 2026 GMT Subject: CN=69c2c851-c98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:6e:01:6d:28:a9:2a:5f:b3:f8:51:18:36: 47:37:b4:01:03:16:80:ba:05:32:a6:19:8b:e2:87: b6:c8:61:8c:ba:03:1d:44:60:5b:13:fb:fa:b3:6d: 33:eb:2b:09:8b:ef:1f:85:0e:20:ff:56:ff:b5:36: 62:d1:13:a3:84:24:41:fa:61:41:65:d7:40:27:1f: 3b:02:b6:ce:c2:db:c8:af:57:be:fd:26:de:40:bb: 99:4d:8f:ad:fe:4b:d3:ca:38:f1:ef:f4:8e:81:18: e5:b2:82:2f:28:8a:86:4d:5e:b2:55:71:f7:d8:b8: d2:63:fd:6f:73:80:0a:14:2e:06:46:0f:28:ff:59: a1:91:e0:2b:4a:f0:fa:d3:b5:a7:bf:a9:30:98:68: b3:7d:7c:91:06:61:82:7c:ef:c4:a5:40:72:0b:d8: 53:ec:d3:46:a8:4c:52:b2:c7:83:66:5e:3f:f7:2b: 9c:bc:ee:5c:8f:61:6e:87:db:03:c0:3c:60:b3:59: 9b:09:1e:be:67:5f:a3:af:10:54:c4:b6:99:a0:a4: e1:ad:72:47:7b:d7:b3:3b:7e:18:5d:e7:b0:b7:c5: 20:e6:60:cd:63:42:24:94:95:70:7d:5e:9a:b7:ab: ee:23:ac:8c:cf:1b:17:ad:5f:60:67:e9:ce:7d:4e: 65:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:05:05:1D:E0:AC:54:B1:09:7E:FB:12:9D:30:1A:D6:74:B8:9B:7A X509v3 Authority Key Identifier: keyid:4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:b9:a8:b7:f8:a4:af:c8:28:39:e8:49:a5:8f:a7:c0:84:e9: 83:03:c7:b1:9f:0b:89:5e:04:67:72:fb:b2:f7:fd:c5:43:c9: e6:4f:f3:df:37:08:5e:3f:14:64:07:25:51:49:d6:0f:77:d5: 2e:13:75:15:cf:10:55:08:47:a8:54:a7:0b:12:e8:38:d7:97: f6:86:e4:7d:e3:83:75:10:68:91:49:a9:99:52:de:37:bf:f7: 7d:2f:15:75:55:7f:2d:21:f0:5f:87:8f:32:69:02:2b:d6:1c: 2c:68:c8:c7:75:a5:51:b0:f7:f8:ca:2b:38:d2:e2:81:8c:88: 92:db:49:84:2b:81:dd:d7:ea:4c:87:8b:c3:25:9c:2e:24:ac: 97:26:f9:79:1b:a5:20:49:07:a5:c7:3e:46:21:7f:4e:3a:e5: 6e:3c:76:7b:61:91:ce:44:1d:bf:ac:91:9c:20:2e:3c:7d:a5: ac:46:74:bb:81:64:38:aa:96:62:59:37:08:e1:b0:01:70:f9: 57:c1:b0:8c:77:f3:86:48:38:62:5e:53:51:67:0c:4f:94:8e: 2c:49:38:ba:47:83:fd:56:5b:10:b2:1b:2a:60:a7:22:02:4d: 05:d4:0e:e5:d5:c6:de:46:42:d1:74:be:77:17:33:47:a0:06: c5:ad:6e:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE1QTQxMTAvBgNVBAUTKDRENDRFMkY3NTJBMjk1MEI2QjU1MjhDMDY5OUIxNDkw RTc1Nzc3NDQwHhcNMjYwMzI0MTcyMjI1WhcNMjYwMzMxMTcyMjI1WjAYMRYwFAYD VQQDEw02OWMyYzg1MS1jOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0g1uAW0oqSpfs/hRGDZHN7QBAxaAugUyphmL4oe2yGGMugMdRGBbE/v6s20z 6ysJi+8fhQ4g/1b/tTZi0ROjhCRB+mFBZddAJx87ArbOwtvIr1e+/SbeQLuZTY+t /kvTyjjx7/SOgRjlsoIvKIqGTV6yVXH32LjSY/1vc4AKFC4GRg8o/1mhkeArSvD6 07Wnv6kwmGizfXyRBmGCfO/EpUByC9hT7NNGqExSsseDZl4/9yucvO5cj2Fuh9sD wDxgs1mbCR6+Z1+jrxBUxLaZoKThrXJHe9ezO34YXeewt8Ug5mDNY0IklJVwfV6a t6vuI6yMzxsXrV9gZ+nOfU5lnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcFBR3g rFSxCX77Ep0wGtZ0uJt6MB8GA1UdIwQYMBaAFE1E4vdSopULa1UowGmbFJDnV3dE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTVBNC9CMzRFNkQ1MDcw OEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxRdHJWU2pBYVpzVWtPZFhk MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVVGk5MUtpbFF0clZTakFhWnNVa09kWGQwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTVBNC9CMzRFNkQ1MDcwOEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxR dHJWU2pBYVpzVWtPZFhkMFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtbmot/ikr8goOehJpY+nwITpgwPHsZ8LiV4EZ3L7svf9xUPJ5k/z3zcIXj8U ZAclUUnWD3fVLhN1Fc8QVQhHqFSnCxLoONeX9obkfeODdRBokUmpmVLeN7/3fS8V dVV/LSHwX4ePMmkCK9YcLGjIx3WlUbD3+MorONLigYyIkttJhCuB3dfqTIeLwyWc LiSslyb5eRulIEkHpcc+RiF/Tjrlbjx2e2GRzkQdv6yRnCAuPH2lrEZ0u4FkOKqW Ylk3COGwAXD5V8GwjHfzhkg4Yl5TUWcMT5SOLEk4ukeD/VZbELIbKmCnIgJNBdQO 5dXG3kZC0XS+dxczR6AGxa1utQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:52 2026 by rpki-client