$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft File: PFRw6B-koZCHAh0K130zbOvipo0.mft (raw, json) Hash identifier: h78/OXMo4bQzNZFsIhmAilFBRmHVuodMvzgvR8A5SZI= Subject key identifier: DC:A2:8D:0D:7C:E6:74:F4:25:C9:D0:12:6E:89:16:46:37:60:CC:2E Authority key identifier: 3C:54:70:E8:1F:A4:A1:90:87:02:1D:0A:D7:7D:33:6C:EB:E2:A6:8D Certificate issuer: /CN=A9143CB3/serialNumber=3C5470E81FA4A19087021D0AD77D336CEBE2A68D Certificate serial: 1BEA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft Manifest number: 1BE7 Signing time: Sun 18 Oct 2026 16:16:02 +0000 Manifest this update: Sun 18 Oct 2026 16:16:01 +0000 Manifest next update: Sun 25 Oct 2026 16:16:01 +0000 Files and hashes: 1: PFRw6B-koZCHAh0K130zbOvipo0.crl (hash: 0Jt4t6PE/7aiiHujnyEoIvc2WpxSdTJ5B3AWAS1+4Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.crl rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 16:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7146 (0x1bea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB3, serialNumber=3C5470E81FA4A19087021D0AD77D336CEBE2A68D Validity Not Before: Oct 18 16:16:01 2026 GMT Not After : Oct 25 16:16:01 2026 GMT Subject: CN=6ad4f0c2-262c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:30:16:cd:3e:f1:cb:63:77:cd:5e:31:ac: e4:df:63:7b:66:8b:e0:bd:a2:f7:d8:eb:98:6e:9a: 0e:3a:96:cb:8f:43:f3:66:b6:db:3b:29:0b:dc:bc: 27:04:47:b9:57:08:33:c3:f2:7d:29:51:1a:04:65: 22:0c:f4:ca:6d:47:65:93:09:5e:78:c8:0f:31:14: be:34:e0:e5:d9:1b:0d:47:e3:64:35:7a:4b:65:05: 81:6a:87:fb:8c:99:e1:ad:bd:f4:c2:28:12:fc:95: 52:e4:b6:8a:d4:e3:92:ed:6d:5f:a6:77:5c:1d:aa: d4:e2:da:a1:9c:be:13:94:f9:50:b9:ed:0c:eb:0b: 2d:3a:39:8b:3c:cf:2c:4c:58:ba:ef:1a:1a:2d:e5: b2:2c:c6:db:a6:25:b5:d7:94:d5:46:45:30:82:db: 5c:c1:55:0b:e0:ab:b3:7f:d7:3f:ad:79:7c:66:81: ae:48:4c:a9:de:ab:f0:7f:69:22:20:49:45:cb:d1: db:54:88:9b:03:d5:1a:9c:fd:3e:e4:2a:c1:f3:cf: e4:70:ff:57:2c:d7:67:25:80:22:8d:69:ed:04:e7: 0a:a8:58:13:b4:a6:69:45:4b:35:3f:24:48:02:28: cc:3a:ef:f4:44:fc:10:66:ea:a1:b6:1c:05:6c:4e: 21:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A2:8D:0D:7C:E6:74:F4:25:C9:D0:12:6E:89:16:46:37:60:CC:2E X509v3 Authority Key Identifier: keyid:3C:54:70:E8:1F:A4:A1:90:87:02:1D:0A:D7:7D:33:6C:EB:E2:A6:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:18:1d:27:23:a7:97:eb:b3:6c:3f:20:95:1f:dc:fa:8f:2a: 36:68:d7:44:bf:6a:23:1b:40:3e:6a:b8:d5:8c:e9:3d:99:dc: f8:5c:3e:8a:95:ef:fc:c3:de:0b:18:6f:34:8a:c8:30:8f:ca: 65:eb:e6:9c:e8:b7:56:57:08:27:7f:bf:d8:b5:9d:74:ae:45: 93:bc:1e:12:c6:a0:1e:ae:f9:cc:5b:fa:91:f5:40:af:f0:aa: ca:cb:eb:69:56:e8:a5:b1:6b:c1:81:01:5a:35:ba:c7:42:23: 30:2d:30:bc:7c:0f:48:72:c4:cc:aa:53:c0:c9:69:e4:26:fe: d4:07:5a:15:61:36:ee:2a:db:25:46:5c:5b:29:79:a9:0a:30: 5a:49:1a:cc:06:c9:64:fc:18:9a:c4:33:9e:0d:be:60:68:0b: 9c:f2:9a:6e:1b:ec:04:32:10:53:24:76:91:66:b4:00:f8:cc: bb:3f:65:7d:a4:51:0c:9d:45:a8:76:b2:f1:97:05:95:21:66: 40:9b:be:f0:05:4a:3e:9b:54:f7:9c:77:92:f4:7d:1e:9e:eb: 2a:3a:13:8f:e0:3a:12:e9:77:d5:7c:29:80:19:e2:78:81:82: 48:a3:16:ff:4a:1a:dc:41:bd:8b:50:67:30:53:d9:a1:3b:1f: 3a:3c:61:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDQjMxMTAvBgNVBAUTKDNDNTQ3MEU4MUZBNEExOTA4NzAyMUQwQUQ3N0QzMzZD RUJFMkE2OEQwHhcNMjYxMDE4MTYxNjAxWhcNMjYxMDI1MTYxNjAxWjAYMRYwFAYD VQQDEw02YWQ0ZjBjMi0yNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzH8wFs0+8ctjd81eMazk32N7ZovgvaL32OuYbpoOOpbLj0PzZrbbOykL3Lwn BEe5Vwgzw/J9KVEaBGUiDPTKbUdlkwleeMgPMRS+NODl2RsNR+NkNXpLZQWBaof7 jJnhrb30wigS/JVS5LaK1OOS7W1fpndcHarU4tqhnL4TlPlQue0M6wstOjmLPM8s TFi67xoaLeWyLMbbpiW115TVRkUwgttcwVUL4Kuzf9c/rXl8ZoGuSEyp3qvwf2ki IElFy9HbVIibA9UanP0+5CrB88/kcP9XLNdnJYAijWntBOcKqFgTtKZpRUs1PyRI AijMOu/0RPwQZuqhthwFbE4hpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNyijQ18 5nT0JcnQEm6JFkY3YMwuMB8GA1UdIwQYMBaAFDxUcOgfpKGQhwIdCtd9M2zr4qaN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0NCMy8xNTE2Njc5RTI1 OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi9QRlJ3NkIta29aQ0hBaDBLMTMwemJPdmlw bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BGUnc2Qi1rb1pDSEFoMEsxMzB6Yk92aXBvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0NCMy8xNTE2Njc5RTI1OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi9QRlJ3NkIta29a Q0hBaDBLMTMwemJPdmlwbzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAphgdJyOnl+uzbD8glR/c+o8qNmjXRL9qIxtAPmq41YzpPZnc+Fw+ipXv/MPe CxhvNIrIMI/KZevmnOi3VlcIJ3+/2LWddK5Fk7weEsagHq75zFv6kfVAr/Cqysvr aVbopbFrwYEBWjW6x0IjMC0wvHwPSHLEzKpTwMlp5Cb+1AdaFWE27irbJUZcWyl5 qQowWkkazAbJZPwYmsQzng2+YGgLnPKabhvsBDIQUyR2kWa0APjMuz9lfaRRDJ1F qHay8ZcFlSFmQJu+8AVKPptU95x3kvR9Hp7rKjoTj+A6Eul31XwpgBnieIGCSKMW /0oa3EG9i1BnMFPZoTsfOjxhQw== -----END CERTIFICATE-----Generated at Tue Oct 20 00:38:24 2026 by rpki-client