
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
File: bycituUTNGUloqmUZBtOJ_BNU1Y.mft (raw, json)
Hash identifier: zXEmW7zthiHfSq7zR6HiayzgE1sBLt1mYF55HE3Wfd0=
Subject key identifier: 45:4C:CF:11:CB:C8:5B:F3:3F:72:AA:2D:42:2A:F4:12:1A:85:B7:4B
Authority key identifier: 6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
Certificate issuer: /CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Certificate serial: 0391
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
Manifest number: 0386
Signing time: Sat 03 Oct 2026 01:03:02 +0000
Manifest this update: Sat 03 Oct 2026 01:03:01 +0000
Manifest next update: Sat 10 Oct 2026 01:03:01 +0000
Files and hashes: 1: bycituUTNGUloqmUZBtOJ_BNU1Y.crl (hash: vyHDfeg1oK4mAxTK+on5X+ICLY7R8oQoI/jegpQlW4g=)
2: A48AD700072111ED91EABE39C4F9AE02.roa (hash: 16vfINnMlLgQPjc1lt88goz4k97qrqyEzTmeNOCNH48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913 (0x391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91870B9, serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Validity
Not Before: Oct 3 01:03:01 2026 GMT
Not After : Oct 10 01:03:01 2026 GMT
Subject: CN=6ac05445-125e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:17:3a:c0:ae:d6:68:71:ce:58:b6:36:a3:
f9:75:7a:3e:af:09:8e:86:7f:f6:6a:b6:37:74:5c:
5d:32:80:27:8f:ec:39:b4:f9:47:26:98:b5:3a:2a:
5e:71:97:bc:81:5a:2e:92:dd:49:b3:0a:8e:04:a7:
03:0b:2f:67:12:5a:03:e7:1f:d2:fb:cd:1c:40:c0:
69:8c:74:7e:8c:2e:5f:79:0d:c3:07:27:d9:0d:2e:
56:48:c6:51:76:ae:b0:02:b9:8e:e0:43:30:e7:43:
13:35:1e:df:d2:31:d3:48:87:28:e6:77:4b:10:b4:
b8:41:88:0d:ac:65:e6:33:71:6e:ff:85:ec:fe:f7:
3d:a7:49:81:c4:15:b9:ec:5f:8c:57:ac:cf:26:71:
ac:08:b3:c5:8b:ae:89:60:9a:49:90:12:56:0f:7c:
ca:a4:f8:d1:be:b6:20:11:a0:92:f7:e7:a5:7f:24:
67:80:a2:f7:45:c2:11:08:39:ca:92:6f:72:99:95:
ed:09:06:c9:a4:55:be:a4:c7:bf:be:b3:e3:32:dc:
c6:4f:0a:1a:3f:9c:18:9a:13:30:5a:fc:14:6a:e8:
ec:bf:e2:9b:53:64:1e:14:a1:bd:9a:30:80:25:1d:
c9:c3:f1:6c:ba:c4:c4:e4:8e:2a:9a:ad:47:e1:fb:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4C:CF:11:CB:C8:5B:F3:3F:72:AA:2D:42:2A:F4:12:1A:85:B7:4B
X509v3 Authority Key Identifier:
keyid:6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5a:b1:04:80:68:37:9f:0c:ed:8a:5d:24:e8:e1:50:ff:31:
ae:ad:b9:4a:ad:88:64:f0:1a:9d:ab:d2:e3:9f:3e:8b:fb:21:
e1:38:fa:99:80:6c:9e:a8:2f:f9:73:af:07:31:a2:4a:13:70:
55:2a:f4:27:fa:8e:f5:a0:8c:61:e5:84:a4:b7:60:d4:73:f7:
c2:c8:f7:06:7f:26:06:f1:df:af:f9:c4:47:da:5b:02:a2:26:
96:df:66:f9:2e:72:df:50:96:fe:4e:c8:11:e8:86:9d:32:a5:
8f:ae:f5:be:6c:ae:c6:fd:31:70:53:4b:04:13:ad:61:43:5c:
c1:b5:6c:05:f0:46:6f:e9:ba:ac:57:40:17:46:60:58:0b:9b:
47:8f:62:c9:e9:7b:49:61:dd:83:b8:b2:c8:6d:5c:83:32:fc:
2b:cc:aa:41:62:ad:7a:01:b1:33:41:a6:1a:9b:2e:19:da:b3:
a2:9a:e0:5e:20:de:d5:73:c3:4b:5f:94:8d:78:c3:06:bb:bd:
8e:a6:6f:5f:8a:8f:a9:c4:63:fc:04:fe:ab:4c:78:88:72:e1:
cd:5e:ce:16:ea:89:39:a1:e9:47:83:c8:62:7e:87:16:bf:bd:
f5:20:bf:ad:b3:df:20:74:4b:d8:ff:e7:05:48:43:7b:f2:74:
bb:af:87:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODcwQjkxMTAvBgNVBAUTKDZGMjcyMkI2RTUxMzM0NjUyNUEyQTk5NDY0MUI0RTI3
RjA0RDUzNTYwHhcNMjYxMDAzMDEwMzAxWhcNMjYxMDEwMDEwMzAxWjAYMRYwFAYD
VQQDEw02YWMwNTQ0NS0xMjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZAXOsCu1mhxzli2NqP5dXo+rwmOhn/2arY3dFxdMoAnj+w5tPlHJpi1Oipe
cZe8gVoukt1JswqOBKcDCy9nEloD5x/S+80cQMBpjHR+jC5feQ3DByfZDS5WSMZR
dq6wArmO4EMw50MTNR7f0jHTSIco5ndLELS4QYgNrGXmM3Fu/4Xs/vc9p0mBxBW5
7F+MV6zPJnGsCLPFi66JYJpJkBJWD3zKpPjRvrYgEaCS9+elfyRngKL3RcIRCDnK
km9ymZXtCQbJpFW+pMe/vrPjMtzGTwoaP5wYmhMwWvwUaujsv+KbU2QeFKG9mjCA
JR3Jw/FsusTE5I4qmq1H4fszHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVMzxHL
yFvzP3KqLUIq9BIahbdLMB8GA1UdIwQYMBaAFG8nIrblEzRlJaKplGQbTifwTVNW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBCOS83QzhDODkwRTA3
MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5HVWxvcW1VWkJ0T0pfQk5V
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J5Y2l0dVVUTkdVbG9xbVVaQnRPSl9CTlUxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzBCOS83QzhDODkwRTA3MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5H
VWxvcW1VWkJ0T0pfQk5VMVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtFqxBIBoN58M7YpdJOjhUP8xrq25Sq2IZPAanavS458+i/sh4Tj6mYBsnqgv
+XOvBzGiShNwVSr0J/qO9aCMYeWEpLdg1HP3wsj3Bn8mBvHfr/nER9pbAqImlt9m
+S5y31CW/k7IEeiGnTKlj671vmyuxv0xcFNLBBOtYUNcwbVsBfBGb+m6rFdAF0Zg
WAubR49iyel7SWHdg7iyyG1cgzL8K8yqQWKtegGxM0GmGpsuGdqzoprgXiDe1XPD
S1+UjXjDBru9jqZvX4qPqcRj/AT+q0x4iHLhzV7OFuqJOaHpR4PIYn6HFr+99SC/
rbPfIHRL2P/nBUhDe/J0u6+HBQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:37:49 2026 by rpki-client