
$ rpki-client -vvf rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
File: bycituUTNGUloqmUZBtOJ_BNU1Y.mft (raw, json)
Hash identifier: ymzWFaHtDmBzrgDU86v9Duyt0I8a6mqNYaaklo1ZBUs=
Subject key identifier: 5D:41:EA:59:11:EB:AF:F5:AB:95:98:3B:C2:DE:AC:B6:4B:74:9D:40
Authority key identifier: 6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
Certificate issuer: /CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Certificate serial: 0320
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
Manifest number: 0316
Signing time: Mon 02 Mar 2026 01:49:46 +0000
Manifest this update: Mon 02 Mar 2026 01:49:45 +0000
Manifest next update: Mon 09 Mar 2026 01:49:45 +0000
Files and hashes: 1: bycituUTNGUloqmUZBtOJ_BNU1Y.crl (hash: xdXgtvMs3UWs3LpIb4N1IbjfD5/Yf/V+5IMfvG5u7wI=)
2: A48AD700072111ED91EABE39C4F9AE02.roa (hash: nNS4I6wnFDV0IY10DkD6nefkEApdL1HBIkLyD0uDd2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 800 (0x320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91870B9, serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Validity
Not Before: Mar 2 01:49:45 2026 GMT
Not After : Mar 9 01:49:45 2026 GMT
Subject: CN=69a4ecba-5ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:45:97:93:ac:c1:c0:32:ab:a3:ce:95:18:
57:d1:a5:38:7b:5b:3a:3d:aa:e1:ec:24:90:da:09:
d5:0c:c5:12:02:f9:0d:b0:2c:e3:e7:5e:4e:a7:1d:
b1:c1:46:2e:3d:7d:fc:5b:31:7f:69:5e:d0:94:cc:
34:35:f2:1e:0e:cb:08:db:03:18:94:67:34:f7:d5:
cc:ce:bd:fd:25:cd:ca:6f:be:33:fe:c0:99:51:6d:
a9:71:bb:b0:6b:ef:8d:54:14:f2:6a:a7:26:12:f7:
fe:c1:52:d0:4b:14:cf:b6:89:f7:86:bd:09:fe:e8:
85:ee:15:e4:af:07:da:87:d8:b2:e8:2f:ff:83:fc:
51:e3:59:b1:7a:7d:a3:3a:57:ef:76:86:dd:4c:24:
5e:b4:28:a6:56:78:74:4c:37:be:fd:01:4a:52:dc:
33:b0:df:42:0a:10:bf:fe:d1:69:d5:d8:b3:af:20:
94:33:ae:f8:d7:de:f1:90:e2:5c:bc:41:97:63:7d:
84:4e:da:5e:7a:0b:80:b0:d4:3c:0e:5b:65:84:ea:
0c:9e:21:cd:e5:9f:2e:cf:99:ef:b8:d6:a5:c3:53:
1a:78:92:bd:d3:22:42:d7:9b:5d:0c:54:75:1d:9e:
54:6e:81:32:8b:d0:ca:6d:8d:cc:19:61:a4:4a:9e:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:41:EA:59:11:EB:AF:F5:AB:95:98:3B:C2:DE:AC:B6:4B:74:9D:40
X509v3 Authority Key Identifier:
keyid:6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:cb:4b:26:ea:b8:e7:43:fd:44:a3:84:63:ba:57:c5:97:7c:
ab:50:b6:59:8c:a9:1c:d9:5d:a3:07:8f:3e:5c:de:2e:a3:f4:
31:02:88:04:02:09:62:b3:84:d3:33:71:fe:84:dd:11:a4:70:
ec:d6:9f:13:c0:37:9d:56:89:45:a7:12:15:ed:ab:9b:a4:9c:
7d:39:2b:ec:bb:6c:d0:cf:ef:d3:11:8f:8e:44:3a:73:6d:9b:
4e:db:df:35:a0:f3:a8:23:f0:64:37:e1:6e:de:f6:57:8d:11:
21:c7:b2:4c:8f:9a:23:98:b2:02:d9:e1:d4:1a:28:f8:a6:97:
3d:b7:b8:69:92:ad:82:44:5c:15:c8:e0:6d:10:00:43:27:5d:
db:55:36:da:5e:61:f9:65:32:dc:21:da:c2:2f:34:74:b6:ac:
9f:40:de:53:32:46:b2:91:b6:19:09:a3:e9:e4:88:6f:91:d4:
36:c8:5f:b7:4a:49:b3:1b:1d:77:8f:53:ec:8e:ce:9b:4f:2e:
c7:b1:0b:06:4b:12:fa:b8:2e:96:48:88:bb:9f:6e:56:53:a5:
02:33:c8:ce:d4:27:63:4e:41:6f:3d:05:06:d5:98:6c:13:11:
0d:06:b9:13:35:5f:50:42:f6:fb:a8:a3:ab:5c:22:e6:db:94:
84:66:69:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODcwQjkxMTAvBgNVBAUTKDZGMjcyMkI2RTUxMzM0NjUyNUEyQTk5NDY0MUI0RTI3
RjA0RDUzNTYwHhcNMjYwMzAyMDE0OTQ1WhcNMjYwMzA5MDE0OTQ1WjAYMRYwFAYD
VQQDEw02OWE0ZWNiYS01ZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm9FFl5OswcAyq6POlRhX0aU4e1s6Parh7CSQ2gnVDMUSAvkNsCzj515Opx2x
wUYuPX38WzF/aV7QlMw0NfIeDssI2wMYlGc099XMzr39Jc3Kb74z/sCZUW2pcbuw
a++NVBTyaqcmEvf+wVLQSxTPton3hr0J/uiF7hXkrwfah9iy6C//g/xR41mxen2j
OlfvdobdTCRetCimVnh0TDe+/QFKUtwzsN9CChC//tFp1dizryCUM674197xkOJc
vEGXY32ETtpeeguAsNQ8DltlhOoMniHN5Z8uz5nvuNalw1MaeJK90yJC15tdDFR1
HZ5UboEyi9DKbY3MGWGkSp4SIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1B6lkR
66/1q5WYO8LerLZLdJ1AMB8GA1UdIwQYMBaAFG8nIrblEzRlJaKplGQbTifwTVNW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBCOS83QzhDODkwRTA3
MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5HVWxvcW1VWkJ0T0pfQk5V
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J5Y2l0dVVUTkdVbG9xbVVaQnRPSl9CTlUxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzBCOS83QzhDODkwRTA3MUUxMUVEQTJFM0YxMzJDNEY5QUUwMi9ieWNpdHVVVE5H
VWxvcW1VWkJ0T0pfQk5VMVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASctLJuq450P9RKOEY7pXxZd8q1C2WYypHNldowePPlzeLqP0MQKIBAIJYrOE
0zNx/oTdEaRw7NafE8A3nVaJRacSFe2rm6ScfTkr7Lts0M/v0xGPjkQ6c22bTtvf
NaDzqCPwZDfhbt72V40RIceyTI+aI5iyAtnh1Boo+KaXPbe4aZKtgkRcFcjgbRAA
Qydd21U22l5h+WUy3CHawi80dLasn0DeUzJGspG2GQmj6eSIb5HUNshft0pJsxsd
d49T7I7Om08ux7ELBksS+rgulkiIu59uVlOlAjPIztQnY05Bbz0FBtWYbBMRDQa5
EzVfUEL2+6ijq1wi5tuUhGZpCg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:46 2026 by rpki-client