$ rpki-client -vvvf rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft File: bycituUTNGUloqmUZBtOJ_BNU1Y.mft (raw, json) Hash identifier: X2+Iwbye3f+ikbCh2TwTCvVTMnNuuhHRdqTE59+w0HM= Subject key identifier: F4:41:10:34:4E:4F:C3:0B:4B:69:89:53:C8:23:13:DD:8E:33:D4:4B Authority key identifier: 6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56 Certificate issuer: /CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356 Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft Manifest number: 038D Signing time: Sat 17 Oct 2026 00:56:53 +0000 Manifest this update: Sat 17 Oct 2026 00:56:52 +0000 Manifest next update: Sat 24 Oct 2026 00:56:52 +0000 Files and hashes: 1: bycituUTNGUloqmUZBtOJ_BNU1Y.crl (hash: W9lvrnB7/CHtzSQPCk1QZ3ny8JqPpz76SBEynmVe1iI=) 2: A48AD700072111ED91EABE39C4F9AE02.roa (hash: 16vfINnMlLgQPjc1lt88goz4k97qrqyEzTmeNOCNH48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 00:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870B9, serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356 Validity Not Before: Oct 17 00:56:52 2026 GMT Not After : Oct 24 00:56:52 2026 GMT Subject: CN=6ad2c7d5-0cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:dc:83:d3:89:fb:3e:c0:1b:99:20:36:63: ef:44:c2:03:8c:2b:91:0a:5d:22:16:64:54:ae:64: 22:1c:80:cd:f9:27:e8:ae:46:46:a1:c7:af:b7:3f: e5:7a:ae:1d:92:1c:84:1c:9a:81:23:bc:93:1e:9e: 32:e6:db:f7:4a:76:16:88:83:cc:19:29:db:ce:36: 12:89:20:87:78:18:56:7e:e1:06:ac:4a:1c:48:cd: 5b:0f:b3:96:e7:42:94:01:ab:fc:e9:14:e5:02:51: 85:4c:fa:c7:68:6f:42:b3:ca:01:e9:ed:1d:7c:5d: 70:0f:85:b6:17:9c:2f:86:f4:62:83:0d:13:6b:52: 8f:cd:cf:dc:fb:f5:dd:e2:d2:f8:1e:f0:d1:09:30: 35:81:80:23:42:cd:6a:00:43:13:77:20:a7:4d:32: 3a:2a:9b:ce:cd:58:32:25:07:1a:68:c3:17:38:95: dc:67:d6:d3:92:e1:76:ba:5b:b3:a8:ca:63:fd:38: a2:87:57:09:ca:5a:e6:01:74:94:8d:b5:eb:e2:9a: 57:88:87:82:43:e5:7c:dc:96:1c:1f:2e:e0:8f:d2: 40:8a:1a:f4:07:78:00:8c:c0:ac:26:b4:dc:8d:0b: 12:a7:2e:a7:6b:f0:ae:f0:3c:2d:dc:f7:77:be:6b: 21:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:41:10:34:4E:4F:C3:0B:4B:69:89:53:C8:23:13:DD:8E:33:D4:4B X509v3 Authority Key Identifier: keyid:6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3f:a2:9c:8e:f2:31:4d:7a:7d:d5:59:4c:ff:94:bb:24:90: 76:de:29:d3:a7:ca:9d:3b:59:e7:91:04:4e:ea:e5:07:cd:48: 23:da:42:d8:e5:3b:6a:e9:f4:c3:8c:9b:54:fe:76:49:a0:cd: e9:0e:c0:20:ae:a4:ee:20:ec:a9:22:15:18:6f:6a:fe:4e:2f: 6a:95:2a:92:23:2d:7b:3d:4d:2c:6b:79:49:5a:a9:fb:a1:99: 10:43:8b:d2:fd:d4:0d:c1:95:08:22:a6:ab:3e:6a:1d:ed:b6: 5f:81:31:37:e1:94:84:ca:b4:2b:64:58:44:20:b8:16:58:cc: 9f:7a:05:4e:87:86:48:be:4d:fe:e6:ea:58:33:28:ef:b3:b5: d4:fc:b1:9a:55:54:68:38:58:99:fd:08:fd:e2:79:81:5f:23: 61:99:81:77:c9:94:dd:8b:0f:25:20:9a:f7:14:16:10:33:36: 61:2f:2c:e2:f4:36:36:73:13:1f:61:8a:be:d9:d8:95:82:c2: 13:24:54:80:29:48:c8:58:98:26:96:de:d8:50:17:75:e3:0a: f3:27:8d:3e:63:45:9f:21:73:9c:01:50:b3:14:f5:05:bf:71: af:ef:26:67:d6:a8:e5:30:c6:0a:42:9c:61:41:3e:14:4e:63: 87:96:3f:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQjkxMTAvBgNVBAUTKDZGMjcyMkI2RTUxMzM0NjUyNUEyQTk5NDY0MUI0RTI3 RjA0RDUzNTYwHhcNMjYxMDE3MDA1NjUyWhcNMjYxMDI0MDA1NjUyWjAYMRYwFAYD VQQDEw02YWQyYzdkNS0wY2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNvcg9OJ+z7AG5kgNmPvRMIDjCuRCl0iFmRUrmQiHIDN+SforkZGocevtz/l eq4dkhyEHJqBI7yTHp4y5tv3SnYWiIPMGSnbzjYSiSCHeBhWfuEGrEocSM1bD7OW 50KUAav86RTlAlGFTPrHaG9Cs8oB6e0dfF1wD4W2F5wvhvRigw0Ta1KPzc/c+/Xd 4tL4HvDRCTA1gYAjQs1qAEMTdyCnTTI6KpvOzVgyJQcaaMMXOJXcZ9bTkuF2uluz qMpj/Tiih1cJylrmAXSUjbXr4ppXiIeCQ+V83JYcHy7gj9JAihr0B3gAjMCsJrTc jQsSpy6na/Cu8Dwt3Pd3vmshuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRBEDRO T8MLS2mJU8gjE92OM9RLMB8GA1UdIwQYMBaAFG8nIrblEzRlJaKplGQbTifwTVNW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBCOS83QzhDODkwRTA3 MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5HVWxvcW1VWkJ0T0pfQk5V MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5Y2l0dVVUTkdVbG9xbVVaQnRPSl9CTlUxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBCOS83QzhDODkwRTA3MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5H VWxvcW1VWkJ0T0pfQk5VMVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXT+inI7yMU16fdVZTP+UuySQdt4p06fKnTtZ55EETurlB81II9pC2OU7aun0 w4ybVP52SaDN6Q7AIK6k7iDsqSIVGG9q/k4vapUqkiMtez1NLGt5SVqp+6GZEEOL 0v3UDcGVCCKmqz5qHe22X4ExN+GUhMq0K2RYRCC4FljMn3oFToeGSL5N/ubqWDMo 77O11PyxmlVUaDhYmf0I/eJ5gV8jYZmBd8mU3YsPJSCa9xQWEDM2YS8s4vQ2NnMT H2GKvtnYlYLCEyRUgClIyFiYJpbe2FAXdeMK8yeNPmNFnyFznAFQsxT1Bb9xr+8m Z9ao5TDGCkKcYUE+FE5jh5Y/ew== -----END CERTIFICATE-----Generated at Sun Oct 18 09:22:52 2026 by rpki-client