$ rpki-client -vvf rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft File: TUTi91KilQtrVSjAaZsUkOdXd0Q.mft (raw, json) Hash identifier: 8V6Np7ecCta6dBHtqeY7+Eef7ROOpJQbPB7ighwGkQw= Subject key identifier: F0:FD:88:68:6E:D1:89:AC:DA:65:AD:F1:46:2E:A5:AD:E1:9F:79:63 Authority key identifier: 4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 Certificate issuer: /CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Certificate serial: 0F3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft Manifest number: 0F33 Signing time: Wed 14 May 2025 17:43:40 +0000 Manifest this update: Wed 14 May 2025 17:43:40 +0000 Manifest next update: Wed 21 May 2025 17:43:40 +0000 Files and hashes: 1: TUTi91KilQtrVSjAaZsUkOdXd0Q.crl (hash: 3f5GLc2FuiWNNQjnpIyg2mmHyR5IF7IBQJAbVtRV3H8=) 2: 3D371C5C708F11E9B105E92CC4F9AE02.roa (hash: YkmY4q4YSypbm13HUH++xACjilqSAUGjIIEq3zMyNH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3901 (0xf3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D15A4, serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Validity Not Before: May 14 17:43:40 2025 GMT Not After : May 21 17:43:40 2025 GMT Subject: CN=6824d64c-0dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d1:04:4e:b5:85:89:9d:cd:fb:1d:f0:fb:37: 41:2d:8c:57:3c:06:72:2c:d5:e5:4e:ae:87:5f:51: 55:10:df:b2:d9:b8:ed:25:0b:55:ca:55:ce:e5:bb: b6:bd:55:9c:b5:69:6c:19:16:3f:52:63:6a:12:11: b1:9c:3a:5a:2d:e4:63:f8:d6:95:ed:d2:0d:6f:b5: 80:d0:aa:7b:b5:dd:d3:48:27:8c:c8:d3:6f:fd:d7: 7f:31:a2:92:d4:6a:05:75:a5:76:fa:d9:f1:7f:16: bc:61:b3:60:ae:ac:5c:c3:ad:89:cc:96:fd:87:39: 3e:a4:a9:3e:56:83:e1:c4:04:49:f0:c5:b0:ae:49: 8a:aa:7d:52:b6:17:0c:6f:c7:31:96:33:8c:ed:5d: 73:c6:65:e7:38:79:8e:55:96:37:f4:2a:d0:17:01: 36:78:c6:49:d0:a5:c2:db:e2:ed:8f:6a:5d:e1:fb: 6c:81:4c:c4:c3:c5:1a:d2:f4:e3:0c:32:b6:5c:cb: 97:bf:0b:ee:e1:fa:e2:9a:64:4d:3b:c8:38:d6:41: 01:fa:f6:3f:c5:7a:77:7a:a6:29:3d:9a:9d:88:d3: a2:f2:8a:08:25:4e:5d:23:10:e0:2f:33:96:eb:fa: e0:58:10:d4:05:b6:c1:12:33:fc:7f:2c:96:47:f3: 26:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FD:88:68:6E:D1:89:AC:DA:65:AD:F1:46:2E:A5:AD:E1:9F:79:63 X509v3 Authority Key Identifier: keyid:4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:9f:db:43:e6:e4:d7:10:70:a1:0e:89:46:68:b5:85:71:53: 08:bd:61:8a:dc:06:f6:40:2b:15:83:b4:96:48:44:6e:ad:29: 0c:61:88:ad:0b:01:2f:ed:16:30:ac:52:44:04:2a:15:ac:76: 53:d8:c6:50:fb:af:a9:42:b4:76:ae:e6:bc:24:01:73:5c:c8: 2f:6f:12:52:ef:6a:79:9c:bf:aa:e1:5a:4d:38:9e:3d:35:88: b8:f3:05:7f:b6:6f:8d:5f:27:14:7e:c9:82:3d:92:3f:bb:88: 66:4f:b7:a2:62:e1:4d:03:c8:57:57:ff:07:b1:62:b7:5d:95: 07:a0:61:90:f5:65:5e:14:18:c6:9a:b8:12:41:3e:55:b2:3c: 7a:67:91:cf:57:98:dc:14:e2:31:b3:6d:81:d9:46:6e:26:d4: 1a:56:50:d2:4c:eb:41:74:fa:4d:71:27:70:7b:66:ad:df:3f: 1b:33:6a:0b:ea:0e:25:4f:e3:9e:a6:02:0b:72:56:7c:0e:c5: 11:2d:c4:f2:1b:21:99:b6:82:24:6d:0e:08:db:66:97:40:cb: 57:45:83:c9:66:b2:00:3d:d9:9c:dc:e1:41:ec:b3:8d:37:b1: 72:71:13:f1:67:90:5c:10:ec:07:58:02:49:ed:50:f7:fa:13: 4e:b1:b5:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE1QTQxMTAvBgNVBAUTKDRENDRFMkY3NTJBMjk1MEI2QjU1MjhDMDY5OUIxNDkw RTc1Nzc3NDQwHhcNMjUwNTE0MTc0MzQwWhcNMjUwNTIxMTc0MzQwWjAYMRYwFAYD VQQDEw02ODI0ZDY0Yy0wZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59EETrWFiZ3N+x3w+zdBLYxXPAZyLNXlTq6HX1FVEN+y2bjtJQtVylXO5bu2 vVWctWlsGRY/UmNqEhGxnDpaLeRj+NaV7dINb7WA0Kp7td3TSCeMyNNv/dd/MaKS 1GoFdaV2+tnxfxa8YbNgrqxcw62JzJb9hzk+pKk+VoPhxARJ8MWwrkmKqn1SthcM b8cxljOM7V1zxmXnOHmOVZY39CrQFwE2eMZJ0KXC2+Ltj2pd4ftsgUzEw8Ua0vTj DDK2XMuXvwvu4frimmRNO8g41kEB+vY/xXp3eqYpPZqdiNOi8ooIJU5dIxDgLzOW 6/rgWBDUBbbBEjP8fyyWR/MmZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPD9iGhu 0Yms2mWt8UYupa3hn3ljMB8GA1UdIwQYMBaAFE1E4vdSopULa1UowGmbFJDnV3dE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTVBNC9CMzRFNkQ1MDcw OEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxRdHJWU2pBYVpzVWtPZFhk MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVVGk5MUtpbFF0clZTakFhWnNVa09kWGQwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTVBNC9CMzRFNkQ1MDcwOEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxR dHJWU2pBYVpzVWtPZFhkMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATn9tD5uTXEHChDolGaLWFcVMIvWGK3Ab2QCsVg7SWSERurSkMYYit CwEv7RYwrFJEBCoVrHZT2MZQ+6+pQrR2rua8JAFzXMgvbxJS72p5nL+q4VpNOJ49 NYi48wV/tm+NXycUfsmCPZI/u4hmT7eiYuFNA8hXV/8HsWK3XZUHoGGQ9WVeFBjG mrgSQT5Vsjx6Z5HPV5jcFOIxs22B2UZuJtQaVlDSTOtBdPpNcSdwe2at3z8bM2oL 6g4lT+OepgILclZ8DsURLcTyGyGZtoIkbQ4I22aXQMtXRYPJZrIAPdmc3OFB7LON N7FycRPxZ5BcEOwHWAJJ7VD3+hNOsbXa -----END CERTIFICATE-----Generated at Thu May 15 13:26:37 2025 by rpki-client