Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft
File:                     PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft (raw, json)
Hash identifier:          zyDY2UCqTLm6b1osjnj0mTvzPeQwxdBg93UtBuFizmM=
Subject key identifier:   47:30:8F:3E:C5:7F:9A:C2:FD:92:B4:CD:94:60:BC:E9:FB:46:FC:63
Authority key identifier: 3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33
Certificate issuer:       /CN=A91CCEF4/serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft
Manifest number:          05
Signing time:             Fri 11 Sep 2026 09:20:23 +0000
Manifest this update:     Fri 11 Sep 2026 09:20:23 +0000
Manifest next update:     Fri 18 Sep 2026 09:20:23 +0000
Files and hashes:         1: PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl (hash: 5WTnBy10hILUbCsoxCtLIFvntO9zmC8uSfT/4DpTulY=)
                          2: 3F22D06CA92411F1BA1076124011F970.roa (hash: z2qaROKDF1jNv1g6m7zR5yXj1DZVINyhxFSLmwMMrjA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl
                          rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCEF4, serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033
        Validity
            Not Before: Sep 11 09:20:23 2026 GMT
            Not After : Sep 18 09:20:23 2026 GMT
        Subject: CN=6aa3c7d7-079a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:fa:d5:0e:64:a1:93:f9:35:f4:7e:0c:8f:
                    dd:00:15:22:73:4e:26:b0:1d:b8:81:2c:29:16:34:
                    e9:dd:4c:7e:95:87:99:dc:92:fb:c3:54:be:8d:21:
                    09:1f:7d:02:e2:47:78:b4:4e:ba:0e:29:9c:89:16:
                    1c:e2:d1:7f:73:7d:f9:7b:18:97:c3:2b:96:07:57:
                    fa:a0:c4:c1:d0:ad:48:e4:12:05:b9:4a:e9:27:8c:
                    0c:33:68:f0:69:d7:b5:79:57:4a:92:96:3e:f6:78:
                    8a:43:6a:08:39:5a:77:86:35:31:ae:bc:68:7b:ad:
                    fd:8a:0a:f7:0d:b9:0a:c6:2d:19:28:4a:96:bd:d7:
                    a4:58:1f:6a:12:a4:6f:41:ea:2e:5b:69:b7:ef:d7:
                    0a:b1:3a:19:5b:a4:24:0a:7e:c3:da:69:46:4a:53:
                    9e:75:65:9f:72:dd:33:38:1e:17:7d:ad:2c:0a:0a:
                    1d:87:3f:9e:bc:f4:8f:70:55:44:f5:86:5c:15:3f:
                    fd:b4:bc:37:32:7c:a2:d0:e2:39:cb:29:51:5d:bf:
                    9d:13:cc:cf:3c:72:04:f7:64:65:89:96:f0:7d:2c:
                    ee:b4:8b:3c:41:01:f8:74:fe:26:4d:26:40:a1:07:
                    f3:de:66:b2:c7:51:66:76:a9:ba:3a:6d:28:42:3a:
                    e4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:30:8F:3E:C5:7F:9A:C2:FD:92:B4:CD:94:60:BC:E9:FB:46:FC:63
            X509v3 Authority Key Identifier:
                keyid:3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5a:c3:f7:b3:8d:fc:eb:77:0a:20:c1:4e:d0:fe:d1:af:49:
         71:1d:95:42:c0:5d:5a:3f:c8:ef:77:2c:bf:88:d8:38:a4:e4:
         56:94:a1:57:a3:08:53:58:f9:41:82:0c:45:79:f8:a6:c0:1d:
         9d:62:52:5f:0b:1a:e9:14:be:71:e9:31:4f:2e:ad:ca:61:3e:
         27:8c:0c:74:66:3e:d0:f2:87:d0:54:6b:8f:56:5f:bb:71:86:
         16:1f:ef:8d:13:1f:66:92:e8:3d:50:e5:b3:70:f4:4c:32:10:
         ef:4a:bd:da:e1:b6:1f:ae:10:13:73:46:85:eb:e5:1d:55:eb:
         db:24:05:11:c2:87:34:5c:65:ea:55:c6:da:19:de:dc:0b:a3:
         a1:06:74:37:0b:c3:28:61:66:15:a9:cc:9b:15:2c:20:b3:58:
         08:d2:60:c8:e2:40:15:af:7f:e2:ba:6a:2b:08:e4:09:27:3e:
         d1:be:fa:3a:49:71:af:40:87:b5:01:b2:8f:f2:58:83:6f:77:
         fe:fb:2d:87:fb:28:1a:71:51:a2:b7:b6:99:83:84:83:35:2a:
         88:32:27:5e:3a:e5:df:0d:ca:e0:c9:9f:a4:6f:aa:24:49:fa:
         e7:0b:8e:09:c8:03:d9:b5:d3:b7:e8:e1:34:c6:99:38:9a:61:
         30:62:4d:80
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
Q0VGNDExMC8GA1UEBRMoM0RCMkQ0MjNGNjNEMEU4MEFCNjg0RkIyNUY5NUIzMkI2
MUIyRDAzMzAeFw0yNjA5MTEwOTIwMjNaFw0yNjA5MTgwOTIwMjNaMBgxFjAUBgNV
BAMTDTZhYTNjN2Q3LTA3OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCw5PrVDmShk/k19H4Mj90AFSJzTiawHbiBLCkWNOndTH6Vh5nckvvDVL6NIQkf
fQLiR3i0TroOKZyJFhzi0X9zffl7GJfDK5YHV/qgxMHQrUjkEgW5SuknjAwzaPBp
17V5V0qSlj72eIpDagg5WneGNTGuvGh7rf2KCvcNuQrGLRkoSpa916RYH2oSpG9B
6i5babfv1wqxOhlbpCQKfsPaaUZKU551ZZ9y3TM4Hhd9rSwKCh2HP5689I9wVUT1
hlwVP/20vDcyfKLQ4jnLKVFdv50TzM88cgT3ZGWJlvB9LO60izxBAfh0/iZNJkCh
B/PeZrLHUWZ2qbo6bShCOuRLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURzCPPsV/
msL9krTNlGC86ftG/GMwHwYDVR0jBBgwFoAUPbLUI/Y9DoCraE+yX5WzK2Gy0DMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDRUY0LzAzQzc5NTdBQTky
NDExRjE5MjYyQkI4OTNGMTFGOTcwL1BiTFVJX1k5RG9DcmFFLXlYNVd6SzJHeTBE
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUGJMVUlfWTlEb0NyYUUteVg1V3pLMkd5MERNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
RUY0LzAzQzc5NTdBQTkyNDExRjE5MjYyQkI4OTNGMTFGOTcwL1BiTFVJX1k5RG9D
cmFFLXlYNVd6SzJHeTBETS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBtWsP3s43863cKIMFO0P7Rr0lxHZVCwF1aP8jvdyy/iNg4pORWlKFXowhTWPlB
ggxFefimwB2dYlJfCxrpFL5x6TFPLq3KYT4njAx0Zj7Q8ofQVGuPVl+7cYYWH++N
Ex9mkug9UOWzcPRMMhDvSr3a4bYfrhATc0aF6+UdVevbJAURwoc0XGXqVcbaGd7c
C6OhBnQ3C8MoYWYVqcybFSwgs1gI0mDI4kAVr3/iumorCOQJJz7Rvvo6SXGvQIe1
AbKP8liDb3f++y2H+ygacVGit7aZg4SDNSqIMideOuXfDcrgyZ+kb6okSfrnC44J
yAPZtdO36OE0xpk4mmEwYk2A
-----END CERTIFICATE-----
Generated at Fri Sep 11 17:10:31 2026 by rpki-client