$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft File: PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft (raw, json) Hash identifier: fUHkQegfh01fpph13FTLMLm4jlhrRYNMkZLm/rLObHY= Subject key identifier: A4:36:68:85:C6:0D:34:7F:1D:43:C7:3B:9E:0B:72:D7:00:25:44:38 Authority key identifier: 3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33 Certificate issuer: /CN=A91CCEF4/serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft Manifest number: 1E Signing time: Tue 27 Oct 2026 09:15:42 +0000 Manifest this update: Tue 27 Oct 2026 09:15:41 +0000 Manifest next update: Tue 03 Nov 2026 09:15:41 +0000 Files and hashes: 1: PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl (hash: ZJ71VGHCKhxl7xcqN84uWKIhAmyCSrkvMkhIKFjBFj0=) 2: 3F22D06CA92411F1BA1076124011F970.roa (hash: GQfjzIvcAUK1+4IHBPkRoXiotlvv+cZ/gXcObRmGjU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCEF4, serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033 Validity Not Before: Oct 27 09:15:41 2026 GMT Not After : Nov 3 09:15:41 2026 GMT Subject: CN=6ae06bbe-0df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:78:ce:ba:2c:c6:4b:4b:03:4b:ac:6d:bb: cd:8a:1d:99:b9:08:f7:f7:6b:b2:53:c0:d9:e1:e8: 57:c2:05:cf:7a:49:41:71:01:f7:ba:76:fb:64:32: a2:68:3d:63:cb:45:36:3e:d3:97:ed:2a:2a:47:b0: 75:f6:23:3e:3e:9d:98:29:fc:dc:a5:a3:3b:0b:b5: ba:79:b7:a5:f7:d4:5d:bc:6a:08:e4:e2:32:53:d9: e6:51:43:aa:de:21:fe:ef:34:89:07:03:01:3a:37: 58:45:97:b4:c0:a3:85:99:54:49:6e:c2:15:7c:06: 70:0b:7d:22:5c:ca:93:bf:24:9f:ff:ec:b7:3c:0e: 17:aa:17:18:0a:9f:5f:47:5d:fa:8c:7c:c9:e7:f7: 6b:9d:b6:83:98:7a:5a:0d:29:63:22:82:4d:62:fd: bb:f6:a3:e1:db:55:e2:46:c2:47:77:2b:60:44:09: 45:33:c7:0d:6a:0a:b8:49:b0:98:c9:41:f4:0c:52: c4:af:f8:bf:3c:62:c7:f5:e9:39:1c:7f:ff:39:0e: 34:a2:1e:6e:4f:0d:24:80:b1:8d:68:a6:0d:35:17: 0a:fb:1d:14:79:e4:61:f5:4e:3b:c9:05:f7:a5:96: ec:29:1f:ae:22:53:2f:8a:ce:14:9c:63:c6:1d:44: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:36:68:85:C6:0D:34:7F:1D:43:C7:3B:9E:0B:72:D7:00:25:44:38 X509v3 Authority Key Identifier: keyid:3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0d:40:c4:cc:17:55:1f:6a:af:65:29:57:62:46:14:7f:e8: bb:b5:6e:69:62:8c:3d:dd:05:15:2e:e4:95:a5:19:f9:5e:04: bb:9f:2f:28:8f:00:ad:77:76:18:94:16:4d:c5:3e:af:2a:74: 28:ef:13:ce:d5:ac:f7:cb:8d:f4:67:96:e8:fc:79:ab:bb:f9: 59:43:3c:16:d7:fb:fa:8b:81:c2:32:54:3b:36:27:e2:98:bd: 45:81:3a:1b:b7:96:22:31:9f:5f:19:e6:1d:c5:cf:d8:98:e7: 52:9d:13:9d:12:b0:cd:f5:5c:6a:d4:1e:2d:b6:0a:62:06:2c: 39:05:c4:8f:64:a5:a4:d2:8c:31:f9:b1:54:35:ce:9d:15:43: 62:87:74:28:3c:57:21:34:96:e8:cb:c4:55:9d:30:88:b6:6c: 43:77:21:4d:27:73:1c:4c:3e:b8:47:f3:73:fb:de:12:8b:c6: 3b:33:7d:c3:39:e4:04:1d:d4:11:b2:6d:91:74:e1:5d:38:52: 0d:cb:dd:7b:c9:95:29:72:64:19:7f:2d:07:32:3c:e1:1b:52: 16:88:bc:cb:67:c6:66:7e:b1:f6:71:0f:26:fe:a3:ea:e2:a8: eb:d0:b2:a1:3d:24:17:94:0e:8e:38:9f:5c:96:c7:b8:78:4a: 67:bc:03:c2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0VGNDExMC8GA1UEBRMoM0RCMkQ0MjNGNjNEMEU4MEFCNjg0RkIyNUY5NUIzMkI2 MUIyRDAzMzAeFw0yNjEwMjcwOTE1NDFaFw0yNjExMDMwOTE1NDFaMBgxFjAUBgNV BAMTDTZhZTA2YmJlLTBkZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA/njOuizGS0sDS6xtu82KHZm5CPf3a7JTwNnh6FfCBc96SUFxAfe6dvtkMqJo PWPLRTY+05ftKipHsHX2Iz4+nZgp/NylozsLtbp5t6X31F28agjk4jJT2eZRQ6re If7vNIkHAwE6N1hFl7TAo4WZVEluwhV8BnALfSJcypO/JJ//7Lc8DheqFxgKn19H XfqMfMnn92udtoOYeloNKWMigk1i/bv2o+HbVeJGwkd3K2BECUUzxw1qCrhJsJjJ QfQMUsSv+L88Ysf16Tkcf/85DjSiHm5PDSSAsY1opg01Fwr7HRR55GH1TjvJBfel luwpH64iUy+KzhScY8YdRCilAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpDZohcYN NH8dQ8c7ngty1wAlRDgwHwYDVR0jBBgwFoAUPbLUI/Y9DoCraE+yX5WzK2Gy0DMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDRUY0LzAzQzc5NTdBQTky NDExRjE5MjYyQkI4OTNGMTFGOTcwL1BiTFVJX1k5RG9DcmFFLXlYNVd6SzJHeTBE TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGJMVUlfWTlEb0NyYUUteVg1V3pLMkd5MERNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND RUY0LzAzQzc5NTdBQTkyNDExRjE5MjYyQkI4OTNGMTFGOTcwL1BiTFVJX1k5RG9D cmFFLXlYNVd6SzJHeTBETS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB9DUDEzBdVH2qvZSlXYkYUf+i7tW5pYow93QUVLuSVpRn5XgS7ny8ojwCtd3YY lBZNxT6vKnQo7xPO1az3y430Z5bo/Hmru/lZQzwW1/v6i4HCMlQ7NifimL1FgTob t5YiMZ9fGeYdxc/YmOdSnROdErDN9Vxq1B4ttgpiBiw5BcSPZKWk0owx+bFUNc6d FUNih3QoPFchNJboy8RVnTCItmxDdyFNJ3McTD64R/Nz+94Si8Y7M33DOeQEHdQR sm2RdOFdOFINy917yZUpcmQZfy0HMjzhG1IWiLzLZ8ZmfrH2cQ8m/qPq4qjr0LKh PSQXlA6OOJ9clse4eEpnvAPC -----END CERTIFICATE-----Generated at Tue Oct 27 22:26:36 2026 by rpki-client