
$ rpki-client -vvf rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
File: bycituUTNGUloqmUZBtOJ_BNU1Y.mft (raw, json)
Hash identifier: 7dnBcyInC6FIm3oi5wo5o+hLZPUsugc0VRXViglaVA0=
Subject key identifier: 3C:E7:4E:88:30:EA:9A:50:56:61:33:A9:5A:22:39:01:D4:6B:C6:C0
Authority key identifier: 6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
Certificate issuer: /CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Certificate serial: 0349
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
Manifest number: 033F
Signing time: Thu 21 May 2026 01:05:46 +0000
Manifest this update: Thu 21 May 2026 01:05:45 +0000
Manifest next update: Thu 28 May 2026 01:05:45 +0000
Files and hashes: 1: bycituUTNGUloqmUZBtOJ_BNU1Y.crl (hash: isslQ3PrwWm5HNR6oILLBeAu7ekNdIC9n9iB2eWndYg=)
2: A48AD700072111ED91EABE39C4F9AE02.roa (hash: nNS4I6wnFDV0IY10DkD6nefkEApdL1HBIkLyD0uDd2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841 (0x349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91870B9, serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Validity
Not Before: May 21 01:05:45 2026 GMT
Not After : May 28 01:05:45 2026 GMT
Subject: CN=6a0e5a6a-5b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:18:62:d3:26:cf:61:8c:88:91:fc:28:9e:
d3:6e:76:01:3f:60:46:62:8a:04:05:bd:22:08:3a:
55:ab:58:a8:d2:e3:a9:5c:f6:4e:db:e8:b3:6b:f8:
26:d5:20:f9:14:06:80:fd:c1:e4:1d:f9:c1:32:74:
ee:61:5e:1f:4b:36:55:e5:6d:31:f3:48:ab:07:66:
82:e7:2d:b8:96:2e:dd:e9:84:38:31:85:11:cb:6f:
e2:04:4e:5a:67:40:ce:65:8f:71:58:47:fc:86:a2:
fc:b5:b8:e9:88:4f:40:63:55:24:ff:00:98:ce:d6:
cd:d7:5e:d6:ca:cb:af:d4:75:9c:ba:b1:a3:b1:71:
5a:70:89:6f:45:7e:b6:f5:0d:16:01:3a:eb:58:48:
e6:8b:7e:35:7d:80:6b:9a:57:41:62:82:62:69:bb:
66:fc:7b:62:2c:b1:28:66:be:b0:d4:d6:cb:97:6f:
21:17:c9:5f:d5:b2:ad:7c:a0:1f:0a:ce:6c:99:ac:
ee:73:dd:79:45:3f:e3:d7:82:85:be:0f:c9:83:11:
9e:e8:9b:32:54:3a:96:2b:34:cf:34:1c:56:d5:7f:
e6:07:b1:59:ba:55:0c:39:e3:b6:c2:20:43:e3:f7:
df:fb:d7:88:b7:b0:46:4d:e9:e6:f6:a3:27:c3:07:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E7:4E:88:30:EA:9A:50:56:61:33:A9:5A:22:39:01:D4:6B:C6:C0
X509v3 Authority Key Identifier:
keyid:6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:70:ba:8b:eb:fb:ac:af:97:16:73:6c:ac:12:3e:93:fc:43:
29:78:cf:59:4d:26:5c:a4:a4:78:5d:3a:73:66:b9:7d:5b:43:
32:68:d0:c7:c8:90:69:c0:18:0e:a3:04:da:b8:38:ed:6a:8c:
3c:b0:9e:58:1b:1d:10:5a:44:f3:10:25:3b:d7:d9:bd:b2:28:
da:30:65:3c:3a:81:3e:e7:61:10:93:52:3a:e1:0d:f4:d2:5b:
9c:e6:80:f9:1c:ab:7c:92:9a:4e:22:26:a7:f0:e8:88:05:79:
77:a1:3e:f5:f5:7f:51:9e:0a:7c:46:81:38:6a:c6:dd:4f:94:
9b:65:5b:eb:af:99:99:61:21:83:74:26:5f:ba:99:3b:5c:20:
78:26:cd:58:9e:d3:d0:3b:54:e1:cd:fc:60:15:5b:e6:b8:c1:
f6:bf:5f:4a:a4:bd:21:93:2c:d5:16:4f:26:7f:5c:4e:91:0c:
45:b3:27:0b:2b:2d:b2:ea:10:9e:61:1b:a5:ad:d4:ad:25:40:
8d:25:27:0c:5f:21:ae:61:d0:b6:77:2f:88:cd:81:d9:06:c1:
3d:d5:2a:36:e5:87:61:41:0e:9d:87:b3:6d:96:fc:9f:43:8b:
a0:05:a4:b1:53:af:32:14:5e:3e:cf:bc:fe:d4:66:94:ef:bd:
6c:6b:ff:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:50 2026 by rpki-client