
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft
File: PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft (raw, json)
Hash identifier: zyDY2UCqTLm6b1osjnj0mTvzPeQwxdBg93UtBuFizmM=
Subject key identifier: 47:30:8F:3E:C5:7F:9A:C2:FD:92:B4:CD:94:60:BC:E9:FB:46:FC:63
Authority key identifier: 3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33
Certificate issuer: /CN=A91CCEF4/serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft
Manifest number: 05
Signing time: Fri 11 Sep 2026 09:20:23 +0000
Manifest this update: Fri 11 Sep 2026 09:20:23 +0000
Manifest next update: Fri 18 Sep 2026 09:20:23 +0000
Files and hashes: 1: PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl (hash: 5WTnBy10hILUbCsoxCtLIFvntO9zmC8uSfT/4DpTulY=)
2: 3F22D06CA92411F1BA1076124011F970.roa (hash: z2qaROKDF1jNv1g6m7zR5yXj1DZVINyhxFSLmwMMrjA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl
rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCEF4, serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033
Validity
Not Before: Sep 11 09:20:23 2026 GMT
Not After : Sep 18 09:20:23 2026 GMT
Subject: CN=6aa3c7d7-079a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:fa:d5:0e:64:a1:93:f9:35:f4:7e:0c:8f:
dd:00:15:22:73:4e:26:b0:1d:b8:81:2c:29:16:34:
e9:dd:4c:7e:95:87:99:dc:92:fb:c3:54:be:8d:21:
09:1f:7d:02:e2:47:78:b4:4e:ba:0e:29:9c:89:16:
1c:e2:d1:7f:73:7d:f9:7b:18:97:c3:2b:96:07:57:
fa:a0:c4:c1:d0:ad:48:e4:12:05:b9:4a:e9:27:8c:
0c:33:68:f0:69:d7:b5:79:57:4a:92:96:3e:f6:78:
8a:43:6a:08:39:5a:77:86:35:31:ae:bc:68:7b:ad:
fd:8a:0a:f7:0d:b9:0a:c6:2d:19:28:4a:96:bd:d7:
a4:58:1f:6a:12:a4:6f:41:ea:2e:5b:69:b7:ef:d7:
0a:b1:3a:19:5b:a4:24:0a:7e:c3:da:69:46:4a:53:
9e:75:65:9f:72:dd:33:38:1e:17:7d:ad:2c:0a:0a:
1d:87:3f:9e:bc:f4:8f:70:55:44:f5:86:5c:15:3f:
fd:b4:bc:37:32:7c:a2:d0:e2:39:cb:29:51:5d:bf:
9d:13:cc:cf:3c:72:04:f7:64:65:89:96:f0:7d:2c:
ee:b4:8b:3c:41:01:f8:74:fe:26:4d:26:40:a1:07:
f3:de:66:b2:c7:51:66:76:a9:ba:3a:6d:28:42:3a:
e4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:8F:3E:C5:7F:9A:C2:FD:92:B4:CD:94:60:BC:E9:FB:46:FC:63
X509v3 Authority Key Identifier:
keyid:3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5a:c3:f7:b3:8d:fc:eb:77:0a:20:c1:4e:d0:fe:d1:af:49:
71:1d:95:42:c0:5d:5a:3f:c8:ef:77:2c:bf:88:d8:38:a4:e4:
56:94:a1:57:a3:08:53:58:f9:41:82:0c:45:79:f8:a6:c0:1d:
9d:62:52:5f:0b:1a:e9:14:be:71:e9:31:4f:2e:ad:ca:61:3e:
27:8c:0c:74:66:3e:d0:f2:87:d0:54:6b:8f:56:5f:bb:71:86:
16:1f:ef:8d:13:1f:66:92:e8:3d:50:e5:b3:70:f4:4c:32:10:
ef:4a:bd:da:e1:b6:1f:ae:10:13:73:46:85:eb:e5:1d:55:eb:
db:24:05:11:c2:87:34:5c:65:ea:55:c6:da:19:de:dc:0b:a3:
a1:06:74:37:0b:c3:28:61:66:15:a9:cc:9b:15:2c:20:b3:58:
08:d2:60:c8:e2:40:15:af:7f:e2:ba:6a:2b:08:e4:09:27:3e:
d1:be:fa:3a:49:71:af:40:87:b5:01:b2:8f:f2:58:83:6f:77:
fe:fb:2d:87:fb:28:1a:71:51:a2:b7:b6:99:83:84:83:35:2a:
88:32:27:5e:3a:e5:df:0d:ca:e0:c9:9f:a4:6f:aa:24:49:fa:
e7:0b:8e:09:c8:03:d9:b5:d3:b7:e8:e1:34:c6:99:38:9a:61:
30:62:4d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:10:31 2026 by rpki-client