$ rpki-client -vvf rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft File: bycituUTNGUloqmUZBtOJ_BNU1Y.mft (raw, json) Hash identifier: So95J8caJE7g9VvRN7dAzL0FE8jLmoApMOcrF9QGg4A= Subject key identifier: 96:F2:FC:F8:63:DF:F8:E4:35:E9:88:9D:D0:F2:7A:2B:70:2F:38:23 Authority key identifier: 6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56 Certificate issuer: /CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356 Certificate serial: 0278 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft Manifest number: 0275 Signing time: Fri 25 Apr 2025 01:26:10 +0000 Manifest this update: Fri 25 Apr 2025 01:26:09 +0000 Manifest next update: Fri 02 May 2025 01:26:09 +0000 Files and hashes: 1: bycituUTNGUloqmUZBtOJ_BNU1Y.crl (hash: 1WoEcnN6iCpXTQEhCb5DhSN6IJv5ujg9eCCiycteFZw=) 2: A48AD700072111ED91EABE39C4F9AE02.roa (hash: LYlnmY38WC+/5pBo6/8yuliMtbU1c9X35OeWacBJJcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870B9, serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356 Validity Not Before: Apr 25 01:26:09 2025 GMT Not After : May 2 01:26:09 2025 GMT Subject: CN=680ae4b2-af10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:24:66:5a:c5:df:1f:90:e7:df:23:b2:92: 59:bf:6a:79:56:bd:b2:bb:1b:21:9d:e1:dc:7b:6b: bd:90:b0:9b:84:6a:55:2b:26:b6:23:57:49:bb:9a: e1:6e:63:58:c9:45:5d:69:d5:2e:a6:f8:ae:cb:0b: 87:5d:0e:35:a4:99:1b:f8:e1:2a:f1:db:c5:73:36: fe:0a:00:45:28:29:71:64:86:53:8b:ed:49:cd:e3: 6f:8c:60:72:08:31:6b:1f:4f:51:3d:48:c3:e6:be: 48:a2:55:b2:e0:2d:1b:13:fe:9d:10:ef:29:96:36: 6d:ff:5c:50:ee:bb:85:b5:5e:47:dc:a3:67:c2:51: 85:58:24:a5:62:2a:b1:13:c7:4b:e7:cf:60:e1:c2: 8d:d5:bc:9d:a6:17:c0:fe:8f:75:ae:ec:5d:1a:13: b3:94:55:78:4d:5e:48:6b:d5:d3:5f:11:3c:dc:c5: 84:84:8d:f3:e1:e7:ad:78:41:6a:6f:e0:f5:8a:d3: 1d:25:3e:38:01:28:3e:e3:94:d5:cc:10:80:d5:7e: ae:5b:9a:f8:44:77:f5:17:1d:75:c5:6d:37:2e:7a: 28:8a:81:53:fb:fe:0e:b2:97:e9:0f:8b:fe:24:e4: 6a:e4:79:40:04:d6:16:ee:34:92:12:da:b8:7d:af: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F2:FC:F8:63:DF:F8:E4:35:E9:88:9D:D0:F2:7A:2B:70:2F:38:23 X509v3 Authority Key Identifier: keyid:6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ee:49:a3:06:62:e6:f4:1d:03:ea:b4:5a:0b:53:e1:60:1c: 7c:69:77:c1:d1:78:fb:af:3d:b5:38:80:2d:f5:db:a7:b7:61: 77:29:43:f0:60:00:a9:47:43:8e:52:22:8a:94:4e:a5:1b:0a: 40:72:6c:30:8c:06:9f:2f:1d:7c:ab:b8:a8:d4:c7:5a:56:ae: 3b:b1:ee:53:b4:4e:e8:40:52:13:cd:26:35:df:88:5d:4c:18: 75:1c:3a:ee:31:e0:3c:33:42:de:d8:cc:87:ba:8d:f2:6e:90: 8a:de:aa:49:03:dc:82:09:c0:fa:e8:16:53:71:9b:4c:b6:16: a3:9a:ef:93:1d:1c:6f:36:9e:ff:ee:8f:0b:f8:ef:77:47:a2: 92:f1:c3:37:42:f9:7c:8b:8e:36:7c:66:c8:25:d3:45:d2:11: cd:5b:46:f0:87:53:8a:4c:58:f8:a7:d1:e7:d3:c0:b2:26:f7: 00:32:08:9b:99:15:b6:35:85:23:11:e3:70:1d:4e:00:6e:10: 6b:bd:13:e0:90:7f:41:59:6e:d2:11:3f:da:53:59:8c:83:60: d4:4e:6b:9f:ac:64:dd:3f:f0:97:80:cc:f2:f8:88:4e:da:29: f5:eb:a0:79:be:25:4e:33:b8:d6:ab:ea:e8:b9:c2:b1:4e:04: 71:38:d1:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQjkxMTAvBgNVBAUTKDZGMjcyMkI2RTUxMzM0NjUyNUEyQTk5NDY0MUI0RTI3 RjA0RDUzNTYwHhcNMjUwNDI1MDEyNjA5WhcNMjUwNTAyMDEyNjA5WjAYMRYwFAYD VQQDEw02ODBhZTRiMi1hZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgQkZlrF3x+Q598jspJZv2p5Vr2yuxshneHce2u9kLCbhGpVKya2I1dJu5rh bmNYyUVdadUupviuywuHXQ41pJkb+OEq8dvFczb+CgBFKClxZIZTi+1JzeNvjGBy CDFrH09RPUjD5r5IolWy4C0bE/6dEO8pljZt/1xQ7ruFtV5H3KNnwlGFWCSlYiqx E8dL589g4cKN1bydphfA/o91ruxdGhOzlFV4TV5Ia9XTXxE83MWEhI3z4eeteEFq b+D1itMdJT44ASg+45TVzBCA1X6uW5r4RHf1Fx11xW03LnooioFT+/4OspfpD4v+ JORq5HlABNYW7jSSEtq4fa9KuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJby/Phj 3/jkNemIndDyeitwLzgjMB8GA1UdIwQYMBaAFG8nIrblEzRlJaKplGQbTifwTVNW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBCOS83QzhDODkwRTA3 MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5HVWxvcW1VWkJ0T0pfQk5V MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5Y2l0dVVUTkdVbG9xbVVaQnRPSl9CTlUxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBCOS83QzhDODkwRTA3MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5H VWxvcW1VWkJ0T0pfQk5VMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX7kmjBmLm9B0D6rRaC1PhYBx8aXfB0Xj7rz21OIAt9dunt2F3KUPw YACpR0OOUiKKlE6lGwpAcmwwjAafLx18q7io1MdaVq47se5TtE7oQFITzSY134hd TBh1HDruMeA8M0Le2MyHuo3ybpCK3qpJA9yCCcD66BZTcZtMthajmu+THRxvNp7/ 7o8L+O93R6KS8cM3Qvl8i442fGbIJdNF0hHNW0bwh1OKTFj4p9Hn08CyJvcAMgib mRW2NYUjEeNwHU4AbhBrvRPgkH9BWW7SET/aU1mMg2DUTmufrGTdP/CXgMzy+IhO 2in166B5viVOM7jWq+roucKxTgRxONFC -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:27 2025 by rpki-client