Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft
File:                     PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft (raw, json)
Hash identifier:          8liSPBptsXN+sPV+aO2iZESHHvEdyNa/k0UMcia/45I=
Subject key identifier:   7F:5B:A3:B0:C4:DF:EE:C3:40:5E:FC:9F:08:6C:A1:64:5C:08:80:F7
Authority key identifier: 3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33
Certificate issuer:       /CN=A91CCEF4/serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft
Manifest number:          0B
Signing time:             Wed 23 Sep 2026 08:55:29 +0000
Manifest this update:     Wed 23 Sep 2026 08:55:28 +0000
Manifest next update:     Wed 30 Sep 2026 08:55:28 +0000
Files and hashes:         1: PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl (hash: 3taPhwZbZrSyV/kRnqMOyPwq0vcBIgu+uZK5IPZfJsM=)
                          2: 3F22D06CA92411F1BA1076124011F970.roa (hash: z2qaROKDF1jNv1g6m7zR5yXj1DZVINyhxFSLmwMMrjA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl
                          rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCEF4, serialNumber=3DB2D423F63D0E80AB684FB25F95B32B61B2D033
        Validity
            Not Before: Sep 23 08:55:28 2026 GMT
            Not After : Sep 30 08:55:28 2026 GMT
        Subject: CN=6ab39401-c571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:59:29:06:ce:b4:6f:ad:31:de:cf:24:b4:
                    ee:58:79:6f:2d:19:5e:ea:7c:d5:ff:57:8a:1a:e5:
                    de:a1:cc:1f:63:34:93:dd:98:5f:21:78:25:f1:52:
                    d2:80:2e:b8:fb:49:9c:ee:6a:f5:dc:de:77:f3:05:
                    76:68:95:f1:4b:6e:a6:c5:c8:3c:1b:c0:29:77:75:
                    95:41:d2:84:fd:6c:6c:07:fd:b0:49:0b:ef:51:ac:
                    71:e4:44:ca:00:f6:a5:ad:c9:e3:33:25:3b:f5:87:
                    e1:57:6a:a0:3b:64:e6:fb:10:28:a2:d7:86:08:25:
                    99:5a:72:fc:fd:1e:77:07:5a:3b:af:c5:85:a3:68:
                    fe:e6:34:a4:77:ff:a3:7e:3d:1d:51:94:75:2a:e9:
                    4b:cd:c2:5e:3c:cf:df:66:38:43:8b:af:2e:b0:6b:
                    a8:02:13:35:bc:07:8e:3b:a1:65:91:63:bc:c6:70:
                    00:7a:e2:e0:c8:3f:e5:98:92:08:d4:d3:0a:bd:8b:
                    4d:75:60:b3:d6:94:a7:28:d0:af:63:d5:6e:08:9d:
                    b4:71:6b:bb:a1:80:b6:ed:cb:08:06:94:23:0b:01:
                    3a:19:d4:97:56:cd:fd:24:ec:63:3d:84:98:2c:53:
                    2c:d1:e3:80:3f:54:b6:cb:08:c3:29:e3:dd:1a:40:
                    63:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5B:A3:B0:C4:DF:EE:C3:40:5E:FC:9F:08:6C:A1:64:5C:08:80:F7
            X509v3 Authority Key Identifier:
                keyid:3D:B2:D4:23:F6:3D:0E:80:AB:68:4F:B2:5F:95:B3:2B:61:B2:D0:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCEF4/03C7957AA92411F19262BB893F11F970/PbLUI_Y9DoCraE-yX5WzK2Gy0DM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0d:c9:12:67:5b:6e:9b:36:f1:99:bb:c8:8a:c7:b9:c5:2e:
         9c:e9:9a:70:0c:6f:91:9c:97:98:db:77:65:8e:95:48:81:4b:
         89:8d:e4:22:af:63:7a:bc:3e:08:27:a9:fd:28:de:1f:a9:b0:
         cc:22:5d:2e:bc:69:28:93:f1:27:d3:a8:f4:d0:cd:c5:ab:ef:
         6d:1d:cd:3e:76:95:8b:19:1f:08:60:0e:f3:c9:38:8f:37:39:
         1e:ec:c2:c4:31:57:bb:83:19:6e:fd:b2:2d:c4:87:7d:32:23:
         e8:2e:bf:cb:05:7e:44:57:9b:58:95:98:7d:02:d0:37:86:94:
         0d:de:26:36:bc:de:98:4b:47:40:9d:7f:aa:ec:bf:91:2b:52:
         fc:9f:10:30:63:a9:84:16:22:25:6f:f0:cc:0f:d8:57:82:c0:
         e2:6c:dc:50:e9:99:d7:ea:27:c7:94:bc:a9:a7:1b:f9:d8:f5:
         ec:e6:4a:68:57:bc:97:66:1d:94:9c:e0:83:3d:b3:fb:20:a6:
         9f:fc:71:ad:d9:6b:39:1b:36:07:3b:99:c5:f7:1a:b8:99:de:
         51:2f:8d:f6:73:ba:01:25:78:00:a9:34:39:47:e4:ff:6a:fe:
         6c:16:f3:78:f4:2f:7d:bf:ac:12:3e:e1:44:7d:6f:7e:7e:27:
         a3:d0:1a:af
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
Q0VGNDExMC8GA1UEBRMoM0RCMkQ0MjNGNjNEMEU4MEFCNjg0RkIyNUY5NUIzMkI2
MUIyRDAzMzAeFw0yNjA5MjMwODU1MjhaFw0yNjA5MzAwODU1MjhaMBgxFjAUBgNV
BAMTDTZhYjM5NDAxLWM1NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJY1kpBs60b60x3s8ktO5YeW8tGV7qfNX/V4oa5d6hzB9jNJPdmF8heCXxUtKA
Lrj7SZzuavXc3nfzBXZolfFLbqbFyDwbwCl3dZVB0oT9bGwH/bBJC+9RrHHkRMoA
9qWtyeMzJTv1h+FXaqA7ZOb7ECii14YIJZlacvz9HncHWjuvxYWjaP7mNKR3/6N+
PR1RlHUq6UvNwl48z99mOEOLry6wa6gCEzW8B447oWWRY7zGcAB64uDIP+WYkgjU
0wq9i011YLPWlKco0K9j1W4InbRxa7uhgLbtywgGlCMLAToZ1JdWzf0k7GM9hJgs
UyzR44A/VLbLCMMp490aQGM/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUf1ujsMTf
7sNAXvyfCGyhZFwIgPcwHwYDVR0jBBgwFoAUPbLUI/Y9DoCraE+yX5WzK2Gy0DMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDRUY0LzAzQzc5NTdBQTky
NDExRjE5MjYyQkI4OTNGMTFGOTcwL1BiTFVJX1k5RG9DcmFFLXlYNVd6SzJHeTBE
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUGJMVUlfWTlEb0NyYUUteVg1V3pLMkd5MERNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
RUY0LzAzQzc5NTdBQTkyNDExRjE5MjYyQkI4OTNGMTFGOTcwL1BiTFVJX1k5RG9D
cmFFLXlYNVd6SzJHeTBETS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQArDckSZ1tumzbxmbvIise5xS6c6ZpwDG+RnJeY23dljpVIgUuJjeQir2N6vD4I
J6n9KN4fqbDMIl0uvGkok/En06j00M3Fq+9tHc0+dpWLGR8IYA7zyTiPNzke7MLE
MVe7gxlu/bItxId9MiPoLr/LBX5EV5tYlZh9AtA3hpQN3iY2vN6YS0dAnX+q7L+R
K1L8nxAwY6mEFiIlb/DMD9hXgsDibNxQ6ZnX6ifHlLyppxv52PXs5kpoV7yXZh2U
nOCDPbP7IKaf/HGt2Ws5GzYHO5nF9xq4md5RL432c7oBJXgAqTQ5R+T/av5sFvN4
9C99v6wSPuFEfW9+fiej0Bqv
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:48:25 2026 by rpki-client