$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft File: TUTi91KilQtrVSjAaZsUkOdXd0Q.mft (raw, json) Hash identifier: nGTcB10jZS19Kk/rx6NOA/WKCuYdv70+cU6h8eDgRQ4= Subject key identifier: 69:7C:64:AA:6D:A2:B0:A5:81:20:C0:22:7C:FD:F1:35:10:F9:75:46 Authority key identifier: 4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 Certificate issuer: /CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Certificate serial: 1041 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft Manifest number: 1034 Signing time: Sun 20 Sep 2026 17:23:54 +0000 Manifest this update: Sun 20 Sep 2026 17:23:54 +0000 Manifest next update: Sun 27 Sep 2026 17:23:54 +0000 Files and hashes: 1: TUTi91KilQtrVSjAaZsUkOdXd0Q.crl (hash: j8G4olBoufS+haSN1uH1i5z4bGxTCFjGlZeprNFhwvk=) 2: 3D371C5C708F11E9B105E92CC4F9AE02.roa (hash: vIYlDs8E7x8tmtwgfqy6xQ1CQ25/qx1eb5H0P0MwlIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4161 (0x1041) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D15A4, serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744 Validity Not Before: Sep 20 17:23:54 2026 GMT Not After : Sep 27 17:23:54 2026 GMT Subject: CN=6ab016aa-2164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:3d:87:6a:bc:65:83:35:1b:35:28:d2:7f: 66:4f:7b:6c:f8:c8:48:89:1c:e1:12:19:e5:e2:70: be:f7:23:3e:1b:48:d6:bb:ce:79:dc:e2:5f:cc:6e: 33:24:d3:57:16:28:49:40:fa:e5:76:9b:38:65:72: 41:4b:df:8e:fe:58:bc:f8:fd:3d:a0:65:f5:e8:49: d1:97:b1:1a:2c:84:57:86:26:eb:e2:72:46:d4:ed: 52:2b:61:a6:67:de:a5:9c:a0:79:05:67:19:ac:12: 1b:97:76:23:a2:24:ac:c3:b4:28:48:5c:e8:9b:31: 72:67:1e:45:a3:31:1b:1c:cc:30:c9:98:ea:5c:4e: 4e:65:89:21:ad:96:37:17:52:c6:79:c9:74:0e:3e: 21:94:33:6a:c9:14:55:70:1d:4c:96:34:9a:94:2f: cc:0d:8f:08:03:c9:a0:ef:0d:b1:d3:fc:75:e9:73: f7:b0:f9:b1:68:6e:fa:b1:28:2c:fc:ac:cf:99:38: 77:7d:da:99:46:7a:32:91:04:bf:3b:e9:df:ae:b8: fd:94:bb:34:3a:a0:36:54:f3:87:ff:eb:8d:13:d5: ff:03:b3:66:46:d5:7f:19:cc:4d:0f:4c:ac:65:cf: ba:2c:03:c1:b5:3f:ac:d6:8c:de:76:96:50:bb:da: 89:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7C:64:AA:6D:A2:B0:A5:81:20:C0:22:7C:FD:F1:35:10:F9:75:46 X509v3 Authority Key Identifier: keyid:4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:5b:87:80:e4:c4:48:2f:75:16:f7:8d:44:cf:58:67:5e:16: 38:b6:d3:6e:46:9c:dc:c3:25:7b:1d:dc:de:f9:27:99:97:7c: c2:2b:e9:5c:7a:83:27:92:70:77:f5:78:36:b5:4f:d4:2d:a4: 98:fd:01:34:d3:b3:f3:6f:ab:58:ff:35:6e:78:57:1f:06:0f: 3c:fc:a7:21:17:04:d8:8b:b7:50:bb:f4:46:74:a8:5b:13:e8: d7:47:ec:5f:18:9e:fb:be:f7:b5:91:d0:80:96:4a:c5:8d:e9: bc:ee:7c:b6:a2:d1:72:e7:c4:98:20:a6:a6:37:f5:4d:ae:65: 7a:08:24:99:75:20:d3:38:85:ff:8f:19:a1:97:34:4e:0c:bc: c5:03:ca:cb:b8:81:21:35:18:3b:ca:6f:df:10:ff:e4:fd:73: 10:a3:e5:26:c2:86:a5:a2:81:8d:01:6b:29:13:c1:e6:ee:b6: ab:2f:86:25:89:67:5b:cd:f1:b8:91:0f:58:90:c7:ef:16:75: db:aa:a6:4a:64:88:4e:eb:30:7a:b8:f8:3a:ea:96:54:5b:ba: 97:52:87:1b:20:f2:9d:3e:06:a8:79:56:af:e2:6d:58:78:94: 5c:3c:04:ed:dc:01:3b:13:ff:07:a9:c0:3d:38:be:ea:be:72: 15:00:1d:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE1QTQxMTAvBgNVBAUTKDRENDRFMkY3NTJBMjk1MEI2QjU1MjhDMDY5OUIxNDkw RTc1Nzc3NDQwHhcNMjYwOTIwMTcyMzU0WhcNMjYwOTI3MTcyMzU0WjAYMRYwFAYD VQQDEw02YWIwMTZhYS0yMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXo9h2q8ZYM1GzUo0n9mT3ts+MhIiRzhEhnl4nC+9yM+G0jWu8553OJfzG4z JNNXFihJQPrldps4ZXJBS9+O/li8+P09oGX16EnRl7EaLIRXhibr4nJG1O1SK2Gm Z96lnKB5BWcZrBIbl3YjoiSsw7QoSFzomzFyZx5FozEbHMwwyZjqXE5OZYkhrZY3 F1LGecl0Dj4hlDNqyRRVcB1MljSalC/MDY8IA8mg7w2x0/x16XP3sPmxaG76sSgs /KzPmTh3fdqZRnoykQS/O+nfrrj9lLs0OqA2VPOH/+uNE9X/A7NmRtV/GcxND0ys Zc+6LAPBtT+s1ozedpZQu9qJBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGl8ZKpt orClgSDAInz98TUQ+XVGMB8GA1UdIwQYMBaAFE1E4vdSopULa1UowGmbFJDnV3dE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTVBNC9CMzRFNkQ1MDcw OEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxRdHJWU2pBYVpzVWtPZFhk MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVVGk5MUtpbFF0clZTakFhWnNVa09kWGQwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTVBNC9CMzRFNkQ1MDcwOEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxR dHJWU2pBYVpzVWtPZFhkMFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ1uHgOTESC91FveNRM9YZ14WOLbTbkac3MMlex3c3vknmZd8wivpXHqDJ5Jw d/V4NrVP1C2kmP0BNNOz82+rWP81bnhXHwYPPPynIRcE2Iu3ULv0RnSoWxPo10fs Xxie+773tZHQgJZKxY3pvO58tqLRcufEmCCmpjf1Ta5leggkmXUg0ziF/48ZoZc0 Tgy8xQPKy7iBITUYO8pv3xD/5P1zEKPlJsKGpaKBjQFrKRPB5u62qy+GJYlnW83x uJEPWJDH7xZ126qmSmSITuswerj4OuqWVFu6l1KHGyDynT4GqHlWr+JtWHiUXDwE 7dwBOxP/B6nAPTi+6r5yFQAdpA== -----END CERTIFICATE-----Generated at Mon Sep 21 08:08:01 2026 by rpki-client