
$ rpki-client -vvf rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
File: bycituUTNGUloqmUZBtOJ_BNU1Y.mft (raw, json)
Hash identifier: ktPVVGypfPVskguvF9y1xQUNpDjnMVbio9fdZrwK4Jc=
Subject key identifier: CA:4A:33:17:14:D8:2C:8F:4A:E8:AB:91:59:6F:63:7A:A8:E1:D5:FB
Authority key identifier: 6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
Certificate issuer: /CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Certificate serial: 0312
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
Manifest number: 030E
Signing time: Thu 19 Feb 2026 00:20:25 +0000
Manifest this update: Thu 19 Feb 2026 00:20:25 +0000
Manifest next update: Thu 26 Feb 2026 00:20:25 +0000
Files and hashes: 1: bycituUTNGUloqmUZBtOJ_BNU1Y.crl (hash: hLZRnvjLhwcWIw7dFSHE1CR5wdD5H13oITArAYoTEu8=)
2: A48AD700072111ED91EABE39C4F9AE02.roa (hash: tggayaLto8CAWEhkFDTMAXvd1HSZb+GtdD7dZmQyKpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91870B9, serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Validity
Not Before: Feb 19 00:20:25 2026 GMT
Not After : Feb 26 00:20:25 2026 GMT
Subject: CN=69965749-a412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:ac:17:8b:1f:e6:6e:e1:36:3b:7e:1c:95:
a4:3b:7b:1c:70:25:4a:6e:c0:e1:99:66:a0:13:1c:
0b:46:c1:3a:69:15:92:9b:80:07:8e:6f:78:25:11:
60:9b:9a:98:67:ae:c2:61:c4:19:e0:9d:59:06:80:
db:c6:a7:7b:8c:39:41:2d:78:92:67:b4:89:73:68:
a7:a7:6a:97:26:f8:8e:11:79:dd:b7:e8:6d:91:0d:
9a:e7:2a:7a:58:81:ef:5a:c1:54:8e:87:30:08:e6:
83:68:ae:65:b4:d3:ea:ee:91:d3:f8:84:e1:f2:cf:
3c:63:75:16:b9:02:59:9a:07:fd:59:fe:3c:12:df:
fd:01:f8:30:4f:65:e1:21:ef:02:bc:ea:8f:15:79:
21:55:78:48:6f:1b:d4:f2:10:b8:8b:27:50:25:e1:
4f:35:ce:26:b5:17:0e:51:ab:c5:5d:9d:8e:b5:69:
1c:2f:67:71:a4:8c:12:f3:a0:67:b7:b8:06:dd:dd:
f6:ef:77:bb:ff:04:2e:6d:8d:04:e0:52:47:94:6e:
2c:9a:5d:27:0c:af:da:4e:5a:5f:93:9b:a6:48:cc:
30:04:f9:4f:4a:d6:10:96:ca:1f:f5:9d:88:ac:4f:
19:8e:3b:ee:92:4b:ff:33:8f:ae:f1:9d:03:18:49:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4A:33:17:14:D8:2C:8F:4A:E8:AB:91:59:6F:63:7A:A8:E1:D5:FB
X509v3 Authority Key Identifier:
keyid:6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:37:7f:2b:99:f6:40:8d:f2:7f:4d:ca:34:e9:6a:0d:82:70:
b7:34:66:c7:e7:f5:4a:b3:9a:15:f8:fa:36:8e:a7:23:d2:ef:
57:79:90:13:e1:15:ea:b7:21:74:e5:78:ef:2f:c3:13:09:89:
45:81:d3:d4:b1:34:2c:34:31:f9:7f:36:ad:08:15:3a:2f:d1:
97:e5:e1:24:3b:0e:b2:37:3c:de:fc:c9:3a:3a:fb:d0:61:a9:
eb:6d:4d:56:89:f8:b9:8f:3b:5a:ab:8e:9b:0d:28:1c:52:36:
53:a7:22:77:7d:73:5e:f2:1a:90:79:76:0a:a4:95:fd:f0:a8:
57:87:1e:4f:03:d1:d3:95:7e:e3:c9:41:35:67:28:bf:ed:c4:
7f:00:f8:67:c7:76:70:96:42:65:6c:2c:af:fa:2c:82:e9:4f:
62:23:b8:fb:a8:d5:4d:98:1c:4e:86:0d:28:12:23:98:fc:77:
26:df:46:c4:8f:ff:86:33:93:f6:ab:8e:e3:14:b3:ed:7b:13:
d0:b8:7b:43:4d:6b:ce:69:59:94:bd:89:05:bb:d6:cb:aa:ee:
b9:f3:b4:b2:fa:1b:79:5e:ba:9c:56:0f:bb:7b:24:53:fc:f5:
87:a8:c3:e8:dd:be:51:d5:05:ac:11:f4:ed:41:ff:d0:ef:39:
38:5e:fb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:58:59 2026 by rpki-client