$ rpki-client -vvf rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft File: KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft (raw, json) Hash identifier: eMK0upqkUver13QwaW28VXSluJ32bqgL0atiJ+2rMGs= Subject key identifier: B4:8B:87:DD:A0:60:CB:84:CA:65:D3:81:E1:BF:2C:B0:3D:C6:BE:66 Authority key identifier: 29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD Certificate issuer: /CN=A9137140/serialNumber=291799FBA519D024024F30D92317E089445214AD Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft Manifest number: 3F Signing time: Mon 27 Jul 2026 10:52:06 +0000 Manifest this update: Mon 27 Jul 2026 10:52:05 +0000 Manifest next update: Mon 03 Aug 2026 10:52:05 +0000 Files and hashes: 1: KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl (hash: AgkF044sUsg6vAmm3eV7ILfrkKpVfq/H+6iFC7an7e8=) 2: B59CFE982CC911F1B7420D8891833773.roa (hash: ChML6/BXm28G8I4gfbaCWvlG/hRxjVNn890GnCbb/s0=) 3: EE75754E326711F18845F4BEBB833773.roa (hash: HCeaq3kzIY8THNJaU+JbnLdHlRHU5qOObU/7pgQVxZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137140, serialNumber=291799FBA519D024024F30D92317E089445214AD Validity Not Before: Jul 27 10:52:05 2026 GMT Not After : Aug 3 10:52:05 2026 GMT Subject: CN=6a673856-a96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:98:88:aa:5f:93:2f:8b:14:b2:df:0a:f6: 4f:49:4e:ab:ba:60:33:88:dd:ed:8d:f2:f3:7c:b5: 04:b9:e0:da:e9:e1:06:4e:53:3b:4e:f7:87:bf:67: 5d:82:68:11:f6:cb:6c:23:f7:a6:b0:e6:cf:32:c6: 7b:fa:af:a5:25:1f:ca:15:7b:5c:aa:77:6d:84:1a: c4:75:ff:34:ef:fc:a4:8e:30:45:70:c6:16:7f:37: 03:eb:a3:26:1b:50:8b:a6:ed:92:62:90:71:3e:11: 67:d4:46:74:73:28:7e:ce:e1:1a:8a:3c:ce:01:8f: 83:85:9f:54:b8:0b:d0:bd:8c:fd:0d:f4:b5:e2:ff: 59:a7:06:1a:c8:50:2f:1b:c3:c4:64:bd:01:a8:c5: 4b:c9:b3:36:b7:a0:7d:14:7b:3b:d6:3c:75:03:b0: 6b:11:62:ef:25:d5:6e:fa:d3:27:b4:ce:b2:e7:32: db:49:39:f6:b6:7f:b1:fd:d9:35:46:c9:da:9b:ef: 8e:5a:1a:b6:73:d2:09:b0:96:fb:38:4d:e5:57:3a: 48:ef:26:2d:dc:17:b9:b1:00:fc:0c:49:c9:3f:e1: 89:3f:af:e8:af:74:70:c4:a5:6d:ac:a9:dd:74:63: 55:63:d5:f4:d3:62:8e:e0:6d:fd:6d:f1:7f:8e:63: a0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8B:87:DD:A0:60:CB:84:CA:65:D3:81:E1:BF:2C:B0:3D:C6:BE:66 X509v3 Authority Key Identifier: keyid:29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:8c:2a:bb:aa:6c:24:33:aa:3e:d9:58:c9:b3:23:46:73:51: b4:bd:08:49:8a:8c:21:e3:43:d8:11:f8:f1:17:fe:34:dc:05: 24:2f:d5:c1:3c:b7:b2:1c:48:e0:80:94:63:14:37:c6:5d:6f: 34:83:de:57:09:a7:3d:0a:4f:4a:9d:50:7e:82:9e:c2:58:2d: cc:6d:bb:ed:d1:f6:6a:ee:e8:e5:17:77:4f:3a:91:2f:68:06: 29:da:97:2b:df:61:d6:62:c1:79:08:d2:74:3f:b7:99:f4:61: a0:e8:57:11:7e:7f:fd:8b:54:27:10:c9:b5:c6:b8:96:9e:aa: 56:60:ce:a6:53:f7:37:68:e0:72:62:c7:4f:7d:98:37:e4:8e: 8b:eb:a4:5c:7f:0c:c4:c9:16:b3:e5:8b:ed:b2:07:08:4f:f8: 92:7b:9f:64:ab:94:73:61:5a:13:59:36:90:f4:86:4e:05:87: 33:e8:1e:8e:af:eb:03:80:ae:e4:fa:5c:1a:a9:e8:fc:af:88: c4:0b:62:a8:98:a7:94:d0:77:47:8e:e4:cb:3b:4b:98:80:b2: 75:67:81:98:13:ea:70:21:47:0d:bd:87:a3:51:7f:cb:10:28: c2:30:5c:ae:45:e5:a3:aa:5b:39:b1:5a:22:73:9b:43:ca:e0: 0f:55:e9:c4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE0MDExMC8GA1UEBRMoMjkxNzk5RkJBNTE5RDAyNDAyNEYzMEQ5MjMxN0UwODk0 NDUyMTRBRDAeFw0yNjA3MjcxMDUyMDVaFw0yNjA4MDMxMDUyMDVaMBgxFjAUBgNV BAMTDTZhNjczODU2LWE5NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC64piIql+TL4sUst8K9k9JTqu6YDOI3e2N8vN8tQS54Nrp4QZOUztO94e/Z12C aBH2y2wj96aw5s8yxnv6r6UlH8oVe1yqd22EGsR1/zTv/KSOMEVwxhZ/NwProyYb UIum7ZJikHE+EWfURnRzKH7O4RqKPM4Bj4OFn1S4C9C9jP0N9LXi/1mnBhrIUC8b w8RkvQGoxUvJsza3oH0UezvWPHUDsGsRYu8l1W760ye0zrLnMttJOfa2f7H92TVG ydqb745aGrZz0gmwlvs4TeVXOkjvJi3cF7mxAPwMSck/4Yk/r+ivdHDEpW2sqd10 Y1Vj1fTTYo7gbf1t8X+OY6C5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtIuH3aBg y4TKZdOB4b8ssD3GvmYwHwYDVR0jBBgwFoAUKReZ+6UZ0CQCTzDZIxfgiURSFK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTQwL0Y0QTc4RTYwMkND ODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENRQ1R6RFpJeGZnaVVSU0ZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1JlWi02VVowQ1FDVHpEWkl4ZmdpVVJTRkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTQwL0Y0QTc4RTYwMkNDODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENR Q1R6RFpJeGZnaVVSU0ZLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwjCq7qmwkM6o+2VjJsyNGc1G0vQhJiowh40PYEfjxF/403AUkL9XBPLeyHEjg gJRjFDfGXW80g95XCac9Ck9KnVB+gp7CWC3Mbbvt0fZq7ujlF3dPOpEvaAYp2pcr 32HWYsF5CNJ0P7eZ9GGg6FcRfn/9i1QnEMm1xriWnqpWYM6mU/c3aOByYsdPfZg3 5I6L66RcfwzEyRaz5YvtsgcIT/iSe59kq5RzYVoTWTaQ9IZOBYcz6B6Or+sDgK7k +lwaqej8r4jEC2KomKeU0HdHjuTLO0uYgLJ1Z4GYE+pwIUcNvYejUX/LECjCMFyu ReWjqls5sVoic5tDyuAPVenE -----END CERTIFICATE-----Generated at Tue Jul 28 22:29:45 2026 by rpki-client