$ rpki-client -vvf rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft File: TUTi91KilQtrVSjAaZsUkOdXd0Q.mft (raw, json) Hash identifier: a31g3Y8mLOTxbgNnM2NP9KWpm4YUvU6x55PNXO/oLJA= Subject key identifier: 07:19:2E:64:94:5A:21:4B:98:90:E7:DD:80:B5:5C:41:92:08:6A:A1 Authority key identifier: 4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 Certificate issuer: /CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Certificate serial: 0FF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft Manifest number: 0FE4 Signing time: Thu 16 Apr 2026 17:24:47 +0000 Manifest this update: Thu 16 Apr 2026 17:24:46 +0000 Manifest next update: Thu 23 Apr 2026 17:24:46 +0000 Files and hashes: 1: TUTi91KilQtrVSjAaZsUkOdXd0Q.crl (hash: xjXA9nLFYQm/kTATvw5e9KGVcM/reY4Rq2PZpbgTV1Q=) 2: 3D371C5C708F11E9B105E92CC4F9AE02.roa (hash: vIYlDs8E7x8tmtwgfqy6xQ1CQ25/qx1eb5H0P0MwlIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4081 (0xff1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D15A4, serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Validity Not Before: Apr 16 17:24:46 2026 GMT Not After : Apr 23 17:24:46 2026 GMT Subject: CN=69e11b5e-bc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:5e:a3:7e:74:4e:7e:d8:d2:44:33:d8:a0: 9f:0d:a9:e9:26:c6:36:1b:d2:c3:1c:b2:d3:32:4d: 68:9f:d6:06:7a:21:c3:a8:ca:db:a2:6f:8d:be:6e: b0:57:3d:63:15:54:00:0d:5e:3c:17:f2:f9:9c:5f: 0c:5d:1a:08:76:e7:49:c3:73:af:3c:62:f3:8b:bb: ca:53:6d:18:4b:fe:d6:ce:c3:29:0e:d3:37:dd:cf: 07:ef:2f:58:db:45:dd:05:f6:9c:c6:84:1d:a9:d2: 01:55:b2:61:06:15:c3:88:5f:7a:aa:3a:8c:da:4e: 55:c9:12:ea:a3:0f:b4:53:95:33:2f:b2:db:30:5a: 9b:56:6e:71:0b:38:b0:81:c2:02:d4:73:c7:c9:3f: 9d:4c:13:85:a9:90:6f:c4:8d:12:c0:3e:44:6a:ac: 1d:3a:0a:0c:34:77:35:29:60:fe:e7:4e:ea:aa:9c: 2a:1c:a4:f0:10:f7:71:02:a1:0f:bd:32:00:b8:b5: ab:94:c2:4a:eb:bd:d6:17:9b:c5:7f:ee:44:88:23: ef:30:79:c2:bc:eb:48:97:ec:92:71:d6:74:61:a8: d8:42:a8:10:a2:4c:8c:e1:4a:2d:8d:16:2a:a0:a2: 8e:7a:bb:63:8a:8d:5c:07:41:17:1f:fd:8a:0c:e1: d1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:19:2E:64:94:5A:21:4B:98:90:E7:DD:80:B5:5C:41:92:08:6A:A1 X509v3 Authority Key Identifier: keyid:4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:cf:dd:29:f1:40:70:bd:1c:8f:92:70:38:0c:87:42:8d:ee: 50:e9:a4:e4:78:cf:a2:30:e3:0e:34:ab:73:34:81:12:55:ea: f9:ae:ec:0f:84:26:bd:c5:2b:5b:98:78:10:3f:8a:c2:5c:e9: 09:e1:14:71:21:8c:10:a5:91:63:a6:82:57:47:b1:7a:be:32: 81:94:df:ca:28:fd:a2:de:46:af:02:38:69:16:ad:18:ac:fb: d7:12:22:2d:c2:39:48:f0:f4:82:c7:58:1f:fe:a2:74:ed:df: e7:a2:33:30:c7:ac:f0:8d:6e:d7:9a:f7:e7:93:a3:1a:72:e3: 4f:22:85:42:98:de:9a:38:d4:c1:00:cd:23:35:f8:69:32:75: 93:5f:c1:d8:00:b5:6f:8d:b6:73:8c:ad:ed:18:be:9d:f5:60: 9d:24:6e:cf:d7:d7:a2:6f:cb:63:23:3d:b9:aa:a7:f3:8a:d0: f6:97:84:e3:04:8a:45:94:b1:1f:7b:8c:0d:7e:e7:b6:9c:c2: 7b:05:14:61:5a:93:f0:fc:ff:f7:ab:b9:4f:15:6b:16:2b:e7: b3:7a:31:8a:01:37:a3:de:16:02:56:d0:a0:ac:7d:15:c1:ac: b4:d3:95:84:b6:1e:06:0c:28:f5:f2:af:d6:7f:64:79:96:19: 2a:40:fd:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE1QTQxMTAvBgNVBAUTKDRENDRFMkY3NTJBMjk1MEI2QjU1MjhDMDY5OUIxNDkw RTc1Nzc3NDQwHhcNMjYwNDE2MTcyNDQ2WhcNMjYwNDIzMTcyNDQ2WjAYMRYwFAYD VQQDEw02OWUxMWI1ZS1iYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7heo350Tn7Y0kQz2KCfDanpJsY2G9LDHLLTMk1on9YGeiHDqMrbom+Nvm6w Vz1jFVQADV48F/L5nF8MXRoIdudJw3OvPGLzi7vKU20YS/7WzsMpDtM33c8H7y9Y 20XdBfacxoQdqdIBVbJhBhXDiF96qjqM2k5VyRLqow+0U5UzL7LbMFqbVm5xCziw gcIC1HPHyT+dTBOFqZBvxI0SwD5EaqwdOgoMNHc1KWD+507qqpwqHKTwEPdxAqEP vTIAuLWrlMJK673WF5vFf+5EiCPvMHnCvOtIl+yScdZ0YajYQqgQokyM4UotjRYq oKKOertjio1cB0EXH/2KDOHRnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAcZLmSU WiFLmJDn3YC1XEGSCGqhMB8GA1UdIwQYMBaAFE1E4vdSopULa1UowGmbFJDnV3dE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTVBNC9CMzRFNkQ1MDcw OEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxRdHJWU2pBYVpzVWtPZFhk MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVVGk5MUtpbFF0clZTakFhWnNVa09kWGQwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTVBNC9CMzRFNkQ1MDcwOEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxR dHJWU2pBYVpzVWtPZFhkMFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvc/dKfFAcL0cj5JwOAyHQo3uUOmk5HjPojDjDjSrczSBElXq+a7sD4QmvcUr W5h4ED+KwlzpCeEUcSGMEKWRY6aCV0exer4ygZTfyij9ot5GrwI4aRatGKz71xIi LcI5SPD0gsdYH/6idO3f56IzMMes8I1u15r355OjGnLjTyKFQpjemjjUwQDNIzX4 aTJ1k1/B2AC1b422c4yt7Ri+nfVgnSRuz9fXom/LYyM9uaqn84rQ9peE4wSKRZSx H3uMDX7ntpzCewUUYVqT8Pz/96u5TxVrFivns3oxigE3o94WAlbQoKx9FcGstNOV hLYeBgwo9fKv1n9keZYZKkD9Kw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:09:13 2026 by rpki-client