$ rpki-client -vvf rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft File: bycituUTNGUloqmUZBtOJ_BNU1Y.mft (raw, json) Hash identifier: GePOt+Z1jSqFjNMVrXlBq2JfznG/XSHqgpXfjPNZ9ZQ= Subject key identifier: CA:1B:3F:46:59:AA:70:85:B4:08:0A:74:C4:69:21:A0:AE:56:BE:F9 Authority key identifier: 6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56 Certificate issuer: /CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356 Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft Manifest number: 02AD Signing time: Mon 11 Aug 2025 01:43:21 +0000 Manifest this update: Mon 11 Aug 2025 01:43:20 +0000 Manifest next update: Mon 18 Aug 2025 01:43:20 +0000 Files and hashes: 1: bycituUTNGUloqmUZBtOJ_BNU1Y.crl (hash: JirhZC2UnKog1IJPvwSvUTKAF8qDUsl+1vxDSedg96o=) 2: A48AD700072111ED91EABE39C4F9AE02.roa (hash: tggayaLto8CAWEhkFDTMAXvd1HSZb+GtdD7dZmQyKpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870B9, serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356 Validity Not Before: Aug 11 01:43:20 2025 GMT Not After : Aug 18 01:43:20 2025 GMT Subject: CN=68994ab8-a6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2c:20:a1:1e:d4:70:b6:67:a9:2a:ed:f3:b3: 2b:4b:9b:b5:ae:27:7c:43:75:30:eb:3f:5e:6f:ed: a8:f7:29:08:09:71:7e:48:5e:fc:62:d0:46:bb:af: f3:43:e6:da:00:c0:14:18:b4:6d:ba:c3:61:fa:1f: 20:8c:46:b7:38:72:21:8b:f2:e9:ea:2b:6f:cf:70: 06:53:30:81:bb:02:41:d1:49:c2:1a:c5:a3:95:f1: 27:50:a4:5f:cb:55:8a:58:5f:4b:28:6e:4d:53:1f: e4:89:8e:12:70:6b:f7:cb:a9:a1:90:99:78:59:ed: f7:72:87:a5:80:6d:a9:f1:1a:93:81:de:4b:e4:4f: 7b:56:3c:cb:db:ea:ae:72:da:a7:39:e3:71:8e:b0: f8:e2:fa:6f:b0:b9:66:9b:3b:02:b5:9c:60:1f:b8: 5c:95:37:14:d3:69:9c:3c:ac:71:65:5e:fd:b0:24: 62:5f:bc:d7:3c:87:0c:f3:8f:8b:13:20:f5:d9:90: fb:8a:fd:6a:58:c7:d8:c1:ae:31:0c:80:35:94:44: 12:d3:8a:b3:03:56:b2:e1:e1:f0:36:97:a5:97:32: 1c:8b:2d:23:54:4e:7a:31:25:bf:a3:e5:59:3d:66: 25:5e:40:1f:2e:d3:8b:5a:54:c0:f4:a4:f8:50:11: f2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1B:3F:46:59:AA:70:85:B4:08:0A:74:C4:69:21:A0:AE:56:BE:F9 X509v3 Authority Key Identifier: keyid:6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f1:ea:06:2b:92:a3:25:36:aa:29:0a:47:bb:eb:78:c0:35: 76:e7:69:95:ad:92:41:e7:f8:d4:02:f6:71:e2:c1:9f:fd:62: 34:a0:14:c3:d5:2a:58:94:7b:aa:fa:15:67:24:46:fb:5a:ae: b1:89:07:9b:8b:a7:44:90:e2:5e:88:c2:8c:d8:39:51:d4:cf: 63:1e:88:91:46:96:c1:46:6f:e5:e2:80:a0:1e:f2:02:72:a4: d4:03:b3:5a:ff:5e:2d:e0:32:c3:ce:28:5e:ad:72:8f:c2:84: 87:01:fa:c5:8b:84:aa:64:7a:c3:0a:41:f1:ee:58:8f:aa:d7: 9b:fb:b3:70:cd:ea:63:15:b3:f2:06:63:44:3b:95:c0:3b:c6: df:a9:f2:74:c0:6b:76:b0:a5:e9:04:c2:95:31:f2:2e:a4:59: 91:0d:84:e4:f0:32:3e:ae:08:e3:ca:17:8a:24:33:56:e5:b5: 32:a7:06:60:53:fe:38:ca:93:c7:6e:bb:da:00:d7:db:44:56: 48:cf:aa:5c:76:f5:e8:8d:50:7a:04:71:46:4b:6b:32:12:29: 62:8f:0a:39:36:3d:f6:4f:02:9f:d7:4e:de:4b:85:ac:24:37: e5:93:09:28:56:6e:db:8b:0a:c6:e0:5e:e8:83:1f:fe:a7:0b: 53:c2:81:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQjkxMTAvBgNVBAUTKDZGMjcyMkI2RTUxMzM0NjUyNUEyQTk5NDY0MUI0RTI3 RjA0RDUzNTYwHhcNMjUwODExMDE0MzIwWhcNMjUwODE4MDE0MzIwWjAYMRYwFAYD VQQDEw02ODk5NGFiOC1hNmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziwgoR7UcLZnqSrt87MrS5u1rid8Q3Uw6z9eb+2o9ykICXF+SF78YtBGu6/z Q+baAMAUGLRtusNh+h8gjEa3OHIhi/Lp6itvz3AGUzCBuwJB0UnCGsWjlfEnUKRf y1WKWF9LKG5NUx/kiY4ScGv3y6mhkJl4We33coelgG2p8RqTgd5L5E97VjzL2+qu ctqnOeNxjrD44vpvsLlmmzsCtZxgH7hclTcU02mcPKxxZV79sCRiX7zXPIcM84+L EyD12ZD7iv1qWMfYwa4xDIA1lEQS04qzA1ay4eHwNpellzIciy0jVE56MSW/o+VZ PWYlXkAfLtOLWlTA9KT4UBHydwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMobP0ZZ qnCFtAgKdMRpIaCuVr75MB8GA1UdIwQYMBaAFG8nIrblEzRlJaKplGQbTifwTVNW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBCOS83QzhDODkwRTA3 MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5HVWxvcW1VWkJ0T0pfQk5V MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5Y2l0dVVUTkdVbG9xbVVaQnRPSl9CTlUxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBCOS83QzhDODkwRTA3MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5H VWxvcW1VWkJ0T0pfQk5VMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV8eoGK5KjJTaqKQpHu+t4wDV252mVrZJB5/jUAvZx4sGf/WI0oBTD 1SpYlHuq+hVnJEb7Wq6xiQebi6dEkOJeiMKM2DlR1M9jHoiRRpbBRm/l4oCgHvIC cqTUA7Na/14t4DLDziherXKPwoSHAfrFi4SqZHrDCkHx7liPqteb+7NwzepjFbPy BmNEO5XAO8bfqfJ0wGt2sKXpBMKVMfIupFmRDYTk8DI+rgjjyheKJDNW5bUypwZg U/44ypPHbrvaANfbRFZIz6pcdvXojVB6BHFGS2syEilijwo5Nj32TwKf107eS4Ws JDflkwkoVm7biwrG4F7ogx/+pwtTwoG8 -----END CERTIFICATE-----Generated at Mon Aug 11 10:44:59 2025 by rpki-client