
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
File: TUTi91KilQtrVSjAaZsUkOdXd0Q.mft (raw, json)
Hash identifier: 61+pzEbCBS3hiUtTOlkblXmHTb5/yZU35Asd+C9W4NQ=
Subject key identifier: 2F:9E:21:0A:C7:73:34:B4:7D:78:BE:E9:20:D8:01:04:97:B2:9C:2E
Authority key identifier: 4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44
Certificate issuer: /CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744
Certificate serial: 1025
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
Manifest number: 1018
Signing time: Tue 28 Jul 2026 17:33:40 +0000
Manifest this update: Tue 28 Jul 2026 17:33:39 +0000
Manifest next update: Tue 04 Aug 2026 17:33:39 +0000
Files and hashes: 1: TUTi91KilQtrVSjAaZsUkOdXd0Q.crl (hash: y8hbCVhZCzGkwahgCSQheo/HhXxzsDuCrNV3kJBsavs=)
2: 3D371C5C708F11E9B105E92CC4F9AE02.roa (hash: vIYlDs8E7x8tmtwgfqy6xQ1CQ25/qx1eb5H0P0MwlIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl
rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4133 (0x1025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D15A4, serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744
Validity
Not Before: Jul 28 17:33:39 2026 GMT
Not After : Aug 4 17:33:39 2026 GMT
Subject: CN=6a68e7f4-db16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:99:37:46:45:af:c3:0e:be:cf:0f:c6:b1:
5e:6a:06:ac:5e:e1:29:a6:ff:91:b0:25:7e:76:c5:
79:a7:f3:4e:b9:a7:9b:69:59:5f:9f:b8:2b:19:1b:
e9:95:57:08:d4:e2:80:d1:9b:ae:60:d4:04:5e:4b:
cb:35:eb:08:79:a2:04:8e:84:05:c5:2d:6f:f1:79:
0b:46:de:0d:81:01:2b:10:34:9b:7f:11:ae:17:ed:
06:2e:1b:8b:f3:07:f9:c8:65:f2:c1:dc:16:51:c9:
27:0f:3f:22:f7:08:21:f5:77:34:37:e5:31:8e:41:
9d:c2:0f:fb:f3:dd:79:f7:82:71:2c:cb:81:1c:75:
c6:e7:c1:35:4b:a6:9e:40:ea:2b:33:e2:4a:bb:51:
15:8f:77:eb:3f:5b:88:0c:45:7c:ad:59:78:65:24:
07:08:d6:dd:74:a0:5d:cc:0f:d4:ae:e3:61:c3:d1:
21:bd:e4:82:a7:d3:9e:68:d1:47:7d:9f:20:eb:7f:
cb:98:40:9c:17:a7:a2:3a:17:e2:4a:46:1d:07:9f:
95:00:82:12:8b:67:3b:10:d7:24:9e:ed:6d:d6:bf:
03:21:92:ae:6a:d6:20:12:a6:f6:c1:c8:22:fc:2f:
4a:01:33:26:7e:19:51:3e:52:71:32:8d:dc:8f:6f:
2d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9E:21:0A:C7:73:34:B4:7D:78:BE:E9:20:D8:01:04:97:B2:9C:2E
X509v3 Authority Key Identifier:
keyid:4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c5:c5:f5:67:71:c3:b3:6a:a5:65:63:25:78:b4:68:c4:f5:
ae:88:8d:c2:80:4b:41:81:13:3d:b7:0a:55:26:de:4f:96:91:
50:31:92:c9:fc:b3:af:2b:fe:b6:2d:d4:85:01:fa:63:71:84:
3b:b6:50:b7:a3:e0:27:57:87:1c:6b:05:af:9d:be:f4:c2:c9:
93:40:d0:5f:54:96:79:b0:03:3b:b3:bf:81:da:d5:f1:da:aa:
cb:18:63:7a:77:33:d6:24:a9:22:e7:8d:ff:0b:38:8a:7b:cf:
5b:c6:cf:b7:d5:61:80:1d:41:0d:60:d9:45:01:25:fe:b2:a0:
af:ea:43:3b:8b:f8:75:56:31:e9:34:6e:5b:bb:87:be:ea:79:
25:a1:3c:61:91:85:d3:de:81:4b:79:c6:0e:85:d2:39:63:b9:
15:fa:dd:da:18:5c:0e:da:d1:d6:b1:b4:27:99:8d:f5:d6:e5:
ab:45:89:cb:02:63:3a:68:15:75:12:ce:33:c7:d7:dc:3c:0e:
73:ec:6a:91:78:b9:3d:79:ef:8a:fa:0e:82:1c:88:fd:d9:90:
79:42:9a:a6:02:43:3d:cb:0f:33:1e:c5:00:4e:ba:63:9a:55:
62:7b:20:01:fb:61:f7:e3:ff:79:30:2e:85:78:c2:41:00:24:
41:a9:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:43 2026 by rpki-client