$ rpki-client -vvf rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft File: KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft (raw, json) Hash identifier: bs00IXOYo58v0ceh4P0tUsRc6XqZUj+FEDX5m7mCeS8= Subject key identifier: 1D:49:96:CA:76:55:3D:2E:E6:E6:55:85:28:BA:F5:4F:7E:0C:EB:D1 Authority key identifier: 29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD Certificate issuer: /CN=A9137140/serialNumber=291799FBA519D024024F30D92317E089445214AD Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft Manifest number: 0D Signing time: Fri 17 Apr 2026 08:50:48 +0000 Manifest this update: Fri 17 Apr 2026 08:50:47 +0000 Manifest next update: Fri 24 Apr 2026 08:50:47 +0000 Files and hashes: 1: KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl (hash: u4Qiuy4/GZybxooU6T/5bOYRL/b9WxPE9gEydAWo1GI=) 2: EE75754E326711F18845F4BEBB833773.roa (hash: HCeaq3kzIY8THNJaU+JbnLdHlRHU5qOObU/7pgQVxZ0=) 3: B59CFE982CC911F1B7420D8891833773.roa (hash: ChML6/BXm28G8I4gfbaCWvlG/hRxjVNn890GnCbb/s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137140, serialNumber=291799FBA519D024024F30D92317E089445214AD Validity Not Before: Apr 17 08:50:47 2026 GMT Not After : Apr 24 08:50:47 2026 GMT Subject: CN=69e1f468-2304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:67:30:10:f1:81:74:8e:96:70:c9:85:76: fd:1f:e6:d7:2e:5b:13:a8:d3:1e:d1:a9:12:a1:6d: 7d:26:6e:3c:99:1d:66:76:1b:65:bd:86:a2:c5:b7: 23:ef:09:30:c2:cb:50:6b:46:23:23:67:c2:02:48: 6f:6f:71:6f:2c:52:0d:db:32:54:6c:d6:b2:da:ca: e1:5e:18:c7:e7:e4:47:e0:5d:01:4b:f2:79:2b:c9: 12:d6:c7:1c:b4:00:09:37:9d:90:fd:7c:35:4d:c2: a1:6d:e0:4f:f8:0d:df:f8:c5:f3:7f:55:40:b6:c7: 11:01:8e:8e:52:9f:a9:95:84:2f:bd:e7:07:71:b3: 46:1e:4f:76:cf:45:61:f6:2b:e0:b2:23:8f:10:a9: 3c:00:26:c2:09:e8:86:9d:01:f7:a7:19:5e:c5:4e: d6:69:f4:7a:78:a9:75:88:98:be:0c:79:8b:f8:51: 98:b1:e8:6b:4c:0b:30:63:ec:e4:ec:2b:28:bf:b9: 36:4f:79:ae:2f:cb:8e:5d:f1:68:91:b9:11:ab:e2: 5c:20:32:22:6f:4e:e3:c2:fc:c6:be:63:9f:99:a8: 43:b0:f5:6c:9f:2f:99:09:f7:01:e9:10:3e:ae:a4: 9e:51:74:a1:e2:09:f8:70:b3:2f:cf:13:96:0a:da: f1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:49:96:CA:76:55:3D:2E:E6:E6:55:85:28:BA:F5:4F:7E:0C:EB:D1 X509v3 Authority Key Identifier: keyid:29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:08:dc:c3:40:85:07:9a:ec:37:cd:d4:86:20:a2:c3:49:19: ef:35:e6:cc:43:12:2e:58:21:28:1d:32:0b:8a:92:a3:30:c9: c3:4c:fa:2f:fe:52:8e:5e:41:40:ee:52:13:92:cd:8f:80:d7: ae:4a:0c:97:ad:bb:31:4c:12:a6:e4:cc:cf:47:39:f9:c0:2f: 37:5a:a2:5d:b3:a1:7e:c2:c4:57:00:76:0a:fa:48:25:ef:9a: 32:63:3d:72:e6:c6:c6:71:d9:5d:8a:4c:80:e5:43:53:54:bd: e0:fc:75:ba:37:a5:c3:ab:e3:31:50:9d:a1:99:2b:c3:b1:5a: b6:2d:9a:97:70:ee:b7:b4:9a:b6:fe:a4:ef:42:21:7e:8b:fe: fc:79:c6:f8:c2:19:c3:41:18:4f:f7:26:4e:93:ea:19:f1:28: da:74:11:7d:ae:4e:19:e7:1a:98:69:da:a8:34:a9:c2:af:e8: 86:ae:3d:3f:98:8e:c9:42:82:21:e7:d1:ba:8f:b4:e8:43:81: 82:0b:d7:0d:d1:31:f1:a0:71:b3:b4:7a:1c:e9:31:6e:ce:48: ea:9e:cf:3a:0f:de:2f:2b:3e:0e:e8:4a:2a:7a:96:59:c3:e4: 6f:e2:31:69:9b:62:64:41:0f:dc:b6:81:eb:e6:2f:56:bd:20: c2:25:1d:d2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE0MDExMC8GA1UEBRMoMjkxNzk5RkJBNTE5RDAyNDAyNEYzMEQ5MjMxN0UwODk0 NDUyMTRBRDAeFw0yNjA0MTcwODUwNDdaFw0yNjA0MjQwODUwNDdaMBgxFjAUBgNV BAMTDTY5ZTFmNDY4LTIzMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA9WcwEPGBdI6WcMmFdv0f5tcuWxOo0x7RqRKhbX0mbjyZHWZ2G2W9hqLFtyPv CTDCy1BrRiMjZ8ICSG9vcW8sUg3bMlRs1rLayuFeGMfn5EfgXQFL8nkryRLWxxy0 AAk3nZD9fDVNwqFt4E/4Dd/4xfN/VUC2xxEBjo5Sn6mVhC+95wdxs0YeT3bPRWH2 K+CyI48QqTwAJsIJ6IadAfenGV7FTtZp9Hp4qXWImL4MeYv4UZix6GtMCzBj7OTs Kyi/uTZPea4vy45d8WiRuRGr4lwgMiJvTuPC/Ma+Y5+ZqEOw9WyfL5kJ9wHpED6u pJ5RdKHiCfhwsy/PE5YK2vH7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHUmWynZV PS7m5lWFKLr1T34M69EwHwYDVR0jBBgwFoAUKReZ+6UZ0CQCTzDZIxfgiURSFK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTQwL0Y0QTc4RTYwMkND ODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENRQ1R6RFpJeGZnaVVSU0ZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1JlWi02VVowQ1FDVHpEWkl4ZmdpVVJTRkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTQwL0Y0QTc4RTYwMkNDODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENR Q1R6RFpJeGZnaVVSU0ZLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQALCNzDQIUHmuw3zdSGIKLDSRnvNebMQxIuWCEoHTILipKjMMnDTPov/lKOXkFA 7lITks2PgNeuSgyXrbsxTBKm5MzPRzn5wC83WqJds6F+wsRXAHYK+kgl75oyYz1y 5sbGcdldikyA5UNTVL3g/HW6N6XDq+MxUJ2hmSvDsVq2LZqXcO63tJq2/qTvQiF+ i/78ecb4whnDQRhP9yZOk+oZ8SjadBF9rk4Z5xqYadqoNKnCr+iGrj0/mI7JQoIh 59G6j7ToQ4GCC9cN0THxoHGztHoc6TFuzkjqns86D94vKz4O6EoqepZZw+Rv4jFp m2JkQQ/ctoHr5i9WvSDCJR3S -----END CERTIFICATE-----Generated at Fri Apr 17 14:39:07 2026 by rpki-client