$ rpki-client -vvf rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft File: KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft (raw, json) Hash identifier: 2xeSfHaAuUW+uy7simq97ArWmWKlC4wX5Zr/dhxgWPQ= Subject key identifier: B3:F7:D4:F3:25:72:69:82:8C:95:DE:EB:74:E2:70:33:55:9B:E2:FD Authority key identifier: 29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD Certificate issuer: /CN=A9137140/serialNumber=291799FBA519D024024F30D92317E089445214AD Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft Manifest number: 28 Signing time: Thu 11 Jun 2026 11:08:44 +0000 Manifest this update: Thu 11 Jun 2026 11:08:44 +0000 Manifest next update: Thu 18 Jun 2026 11:08:44 +0000 Files and hashes: 1: KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl (hash: +Qnhkj11m3E+ydTHWYjcTUuGp0UKSHhBx7SYYClq5aU=) 2: EE75754E326711F18845F4BEBB833773.roa (hash: HCeaq3kzIY8THNJaU+JbnLdHlRHU5qOObU/7pgQVxZ0=) 3: B59CFE982CC911F1B7420D8891833773.roa (hash: ChML6/BXm28G8I4gfbaCWvlG/hRxjVNn890GnCbb/s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137140, serialNumber=291799FBA519D024024F30D92317E089445214AD Validity Not Before: Jun 11 11:08:44 2026 GMT Not After : Jun 18 11:08:44 2026 GMT Subject: CN=6a2a973c-60ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ef:77:2e:5a:ea:50:d3:43:8f:3a:4a:0d:16: f8:09:ed:40:31:b7:41:c8:25:d0:ac:2c:12:d8:2c: 3f:be:9c:6a:f3:5d:00:ce:09:69:5f:60:56:3f:95: c7:ed:ec:0b:4e:96:c2:27:49:c1:66:f7:9e:46:61: cd:7d:84:1c:94:ff:21:d2:fd:86:83:d7:4a:b8:25: d8:c0:d1:cb:bc:79:96:64:12:d2:6a:1b:02:7b:e6: b5:8f:43:5f:ab:0c:4e:46:b7:3c:64:00:3e:f1:10: 9a:ec:ea:43:ca:5c:0f:50:83:46:9e:e9:07:3b:99: 15:60:12:f9:a9:df:a6:58:f3:cd:f3:b1:1e:8b:10: c5:77:a1:ed:c7:1f:ca:02:a8:e4:68:a1:7c:f7:7b: c7:22:6e:82:5a:d7:9f:e7:3a:af:57:f0:4c:84:ad: c7:ab:7c:63:79:d4:72:a2:a4:bf:f2:73:d4:b5:5a: 24:34:5c:0f:42:f9:da:30:bb:46:7c:63:83:c5:90: d9:e2:28:44:c7:0e:55:f7:91:92:a6:60:bd:3a:ad: 5b:3f:3a:0f:ce:82:49:93:df:98:11:8f:98:12:f4: 1f:f8:6c:20:ae:84:1d:b7:1e:36:95:c5:54:96:bd: 53:e1:26:d2:62:44:64:73:96:4d:5f:68:df:7c:0b: 9d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F7:D4:F3:25:72:69:82:8C:95:DE:EB:74:E2:70:33:55:9B:E2:FD X509v3 Authority Key Identifier: keyid:29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:b7:f1:b2:51:90:c7:1e:49:08:32:0a:95:16:d3:9f:a6:b4: 24:83:f5:68:90:f1:32:9f:94:b0:16:b0:8b:0a:25:0a:07:2c: 23:fd:c6:29:5e:a8:c4:e4:29:1a:54:3c:5e:d0:1f:04:5a:9d: 6f:7c:0e:28:86:84:e4:ab:77:03:36:13:ce:43:bc:5d:db:dc: 9a:3a:10:a4:6f:f6:a4:b6:27:35:c3:ce:12:af:04:0f:4f:ed: 5b:26:4b:8e:3b:a0:93:49:77:96:38:48:c4:cc:d0:18:9a:65: c3:9c:ec:c1:25:36:2e:b0:74:c0:36:23:e7:68:22:e3:d0:0e: b9:80:c6:29:bf:a5:87:95:3d:89:2e:aa:66:f7:f6:fc:f7:b5: c0:12:2b:ac:93:be:a4:62:6b:8e:00:b1:11:4a:c6:a3:e1:e6: fc:0c:b5:3d:3b:77:a2:c1:2d:34:af:71:ff:40:d8:64:9a:46: 1b:de:c7:2b:b1:e7:03:f7:a2:19:15:04:41:8f:80:01:1e:07: 18:41:79:05:9d:ba:c6:a8:61:5a:82:53:15:a8:b0:7e:2b:45: 68:97:10:a6:f4:e1:f1:e4:88:1c:d2:79:e2:5b:af:67:6a:4c: 5c:da:8c:23:d2:b5:f5:c7:7c:9e:6e:36:b9:28:da:85:e2:d3: b7:5a:8e:09 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE0MDExMC8GA1UEBRMoMjkxNzk5RkJBNTE5RDAyNDAyNEYzMEQ5MjMxN0UwODk0 NDUyMTRBRDAeFw0yNjA2MTExMTA4NDRaFw0yNjA2MTgxMTA4NDRaMBgxFjAUBgNV BAMTDTZhMmE5NzNjLTYwZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQ73cuWupQ00OPOkoNFvgJ7UAxt0HIJdCsLBLYLD++nGrzXQDOCWlfYFY/lcft 7AtOlsInScFm955GYc19hByU/yHS/YaD10q4JdjA0cu8eZZkEtJqGwJ75rWPQ1+r DE5GtzxkAD7xEJrs6kPKXA9Qg0ae6Qc7mRVgEvmp36ZY883zsR6LEMV3oe3HH8oC qORooXz3e8ciboJa15/nOq9X8EyErcerfGN51HKipL/yc9S1WiQ0XA9C+dowu0Z8 Y4PFkNniKETHDlX3kZKmYL06rVs/Og/OgkmT35gRj5gS9B/4bCCuhB23HjaVxVSW vVPhJtJiRGRzlk1faN98C51rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUs/fU8yVy aYKMld7rdOJwM1Wb4v0wHwYDVR0jBBgwFoAUKReZ+6UZ0CQCTzDZIxfgiURSFK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTQwL0Y0QTc4RTYwMkND ODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENRQ1R6RFpJeGZnaVVSU0ZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1JlWi02VVowQ1FDVHpEWkl4ZmdpVVJTRkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTQwL0Y0QTc4RTYwMkNDODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENR Q1R6RFpJeGZnaVVSU0ZLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQATt/GyUZDHHkkIMgqVFtOfprQkg/VokPEyn5SwFrCLCiUKBywj/cYpXqjE5Cka VDxe0B8EWp1vfA4ohoTkq3cDNhPOQ7xd29yaOhCkb/aktic1w84SrwQPT+1bJkuO O6CTSXeWOEjEzNAYmmXDnOzBJTYusHTANiPnaCLj0A65gMYpv6WHlT2JLqpm9/b8 97XAEiusk76kYmuOALERSsaj4eb8DLU9O3eiwS00r3H/QNhkmkYb3scrsecD96IZ FQRBj4ABHgcYQXkFnbrGqGFaglMVqLB+K0VolxCm9OHx5Igc0nniW69nakxc2owj 0rX1x3yebja5KNqF4tO3Wo4J -----END CERTIFICATE-----Generated at Sat Jun 13 07:30:50 2026 by rpki-client