$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft File: PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft (raw, json) Hash identifier: K/xxTVhgWYXIcUi2SN/UDkEF7PTmTo9dkcbS1hVGzjU= Subject key identifier: 5A:D9:FB:EE:20:6E:88:C6:AC:B4:74:B3:A8:DE:01:C4:88:A1:F4:D0 Authority key identifier: 3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33 Certificate issuer: /CN=A91CCEF4/serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft Manifest number: 0A Signing time: Mon 21 Sep 2026 09:10:09 +0000 Manifest this update: Mon 21 Sep 2026 09:10:08 +0000 Manifest next update: Mon 28 Sep 2026 09:10:08 +0000 Files and hashes: 1: PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl (hash: opxFRV93EMvIxWPVtAzXNbe5d9NCYHW+K1001dXEYyI=) 2: 3F22D06CA92411F1BA1076124011F970.roa (hash: z2qaROKDF1jNv1g6m7zR5yXj1DZVINyhxFSLmwMMrjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCEF4, serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033 Validity Not Before: Sep 21 09:10:08 2026 GMT Not After : Sep 28 09:10:08 2026 GMT Subject: CN=6ab0f470-1404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:1c:05:23:df:36:89:55:4c:66:c3:59:6a: 18:03:22:17:16:58:87:b7:47:0e:ad:07:fb:5e:4e: 13:eb:28:c2:1c:92:62:be:ba:1b:68:49:b5:76:c5: 19:a4:85:1c:80:c5:ea:9a:83:d1:23:83:9b:89:46: 6c:d9:8a:61:17:2d:b6:40:1b:bc:00:6a:c9:01:33: 8f:68:60:27:7d:68:f6:fc:cf:da:f6:d6:5e:41:2a: bc:9d:fb:3b:9a:39:00:62:f1:95:b0:5b:7b:03:cb: d6:76:7c:0c:d4:12:40:c4:50:80:c3:e5:a0:eb:5c: 24:e4:36:a1:bf:06:4b:79:d8:3c:7c:73:10:e8:3e: e6:9c:92:8b:85:ca:00:4d:b5:8c:bb:68:12:6e:54: 33:54:34:f8:7a:0c:b6:f7:4c:0f:24:62:46:a0:6b: 62:58:ef:57:c2:5b:93:4a:de:b7:53:85:bd:e8:67: 94:cb:1f:75:32:f2:b5:b2:ec:09:5b:b1:95:58:05: 82:a1:57:d5:72:ed:4f:78:1b:46:eb:ee:ca:d3:2e: be:53:7a:90:05:24:8a:c3:45:c3:a3:62:0f:82:63: f6:2b:03:d7:24:13:43:10:ca:17:0b:f6:72:e0:53: 63:e8:54:62:c7:f6:21:b0:05:d3:f1:f9:aa:15:01: 21:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D9:FB:EE:20:6E:88:C6:AC:B4:74:B3:A8:DE:01:C4:88:A1:F4:D0 X509v3 Authority Key Identifier: keyid:3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:7f:d1:42:a6:77:3b:83:7f:9e:76:f5:7b:f6:1f:2c:b4:49: 27:ef:61:e1:44:ee:8d:26:63:b9:a1:f8:11:47:51:e7:64:98: 25:95:90:4d:62:89:ca:6e:c1:99:e2:f4:78:2b:0d:66:9b:49: a8:4f:0c:70:f3:56:7f:0d:a4:5a:e5:9a:4e:d2:8f:b2:b8:b2: 3d:df:19:5a:7c:52:49:2f:ee:cd:cc:3b:d1:76:6c:78:f9:e5: db:98:3c:ce:47:a6:54:52:68:45:94:b4:5d:35:f3:51:27:b8: 9f:ab:43:bc:57:df:4e:05:5f:36:32:72:4f:d6:d8:f6:95:eb: 39:0a:2c:78:7a:23:e8:d3:fb:d2:36:b7:7e:00:08:c7:4e:dd: d4:b4:58:4f:8e:4d:8a:b7:06:84:a6:6c:f8:72:58:8c:66:7a: f1:18:52:b7:12:26:d1:f0:7c:bb:1e:01:d6:21:34:f7:c4:9e: 3c:b9:9d:c1:ca:73:a5:bf:f9:76:ca:54:df:c3:e3:30:91:55: 56:0e:12:a4:cd:62:4f:9a:6d:96:dc:4a:55:ce:58:97:63:c9: 74:82:70:c3:dd:e8:11:64:ce:47:c9:10:27:89:68:28:a4:8b: 57:da:ee:92:4c:f5:85:ad:a9:fb:fa:45:1a:23:f4:9c:38:96: 32:51:d2:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0VGNDExMC8GA1UEBRMoM0RCMkQ0MjNGNjNEMEU4MEFCNjg0RkIyNUY5NUIzMkI2 MUIyRDAzMzAeFw0yNjA5MjEwOTEwMDhaFw0yNjA5MjgwOTEwMDhaMBgxFjAUBgNV BAMTDTZhYjBmNDcwLTE0MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDZBwFI982iVVMZsNZahgDIhcWWIe3Rw6tB/teThPrKMIckmK+uhtoSbV2xRmk hRyAxeqag9Ejg5uJRmzZimEXLbZAG7wAaskBM49oYCd9aPb8z9r21l5BKryd+zua OQBi8ZWwW3sDy9Z2fAzUEkDEUIDD5aDrXCTkNqG/Bkt52Dx8cxDoPuackouFygBN tYy7aBJuVDNUNPh6DLb3TA8kYkaga2JY71fCW5NK3rdThb3oZ5TLH3Uy8rWy7Alb sZVYBYKhV9Vy7U94G0br7srTLr5TepAFJIrDRcOjYg+CY/YrA9ckE0MQyhcL9nLg U2PoVGLH9iGwBdPx+aoVASGrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWtn77iBu iMastHSzqN4BxIih9NAwHwYDVR0jBBgwFoAUPbLUI/Y9DoCraE+yX5WzK2Gy0DMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDRUY0LzAzQzc5NTdBQTky NDExRjE5MjYyQkI4OTNGMTFGOTcwL1BiTFVJX1k5RG9DcmFFLXlYNVd6SzJHeTBE TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGJMVUlfWTlEb0NyYUUteVg1V3pLMkd5MERNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND RUY0LzAzQzc5NTdBQTkyNDExRjE5MjYyQkI4OTNGMTFGOTcwL1BiTFVJX1k5RG9D cmFFLXlYNVd6SzJHeTBETS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAif9FCpnc7g3+edvV79h8stEkn72HhRO6NJmO5ofgRR1HnZJgllZBNYonKbsGZ 4vR4Kw1mm0moTwxw81Z/DaRa5ZpO0o+yuLI93xlafFJJL+7NzDvRdmx4+eXbmDzO R6ZUUmhFlLRdNfNRJ7ifq0O8V99OBV82MnJP1tj2les5Cix4eiPo0/vSNrd+AAjH Tt3UtFhPjk2KtwaEpmz4cliMZnrxGFK3EibR8Hy7HgHWITT3xJ48uZ3BynOlv/l2 ylTfw+MwkVVWDhKkzWJPmm2W3EpVzliXY8l0gnDD3egRZM5HyRAniWgopItX2u6S TPWFran7+kUaI/ScOJYyUdJ6 -----END CERTIFICATE-----Generated at Tue Sep 22 14:27:24 2026 by rpki-client