$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft File: KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft (raw, json) Hash identifier: SjTgz4wQ8Yfn607u90rfGtXCU2Ov9ZaSI5mVwhVzwpI= Subject key identifier: B6:9A:60:14:C1:B4:BA:60:B9:B1:99:7A:1E:81:96:79:EB:79:FD:A4 Authority key identifier: 29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD Certificate issuer: /CN=A9137140/serialNumber=291799FBA519D024024F30D92317E089445214AD Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft Manifest number: 5C Signing time: Mon 21 Sep 2026 08:10:23 +0000 Manifest this update: Mon 21 Sep 2026 08:10:22 +0000 Manifest next update: Mon 28 Sep 2026 08:10:22 +0000 Files and hashes: 1: KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl (hash: l+M+vJhVYb6mzQcKiNJgpE8rh76ajx7Z2nuNRfcJ+yw=) 2: B59CFE982CC911F1B7420D8891833773.roa (hash: ChML6/BXm28G8I4gfbaCWvlG/hRxjVNn890GnCbb/s0=) 3: EE75754E326711F18845F4BEBB833773.roa (hash: HCeaq3kzIY8THNJaU+JbnLdHlRHU5qOObU/7pgQVxZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137140, serialNumber=291799FBA519D024024F30D92317E089445214AD Validity Not Before: Sep 21 08:10:22 2026 GMT Not After : Sep 28 08:10:22 2026 GMT Subject: CN=6ab0e66f-89b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:38:16:95:03:c3:56:43:66:21:b2:53:d5: 25:4d:61:2d:bb:08:5f:4a:2b:ab:f5:66:bc:37:36: 45:e6:45:cd:74:8b:50:75:0a:42:ba:e9:d8:30:4b: 11:7f:e6:38:54:40:ec:d5:ce:40:0e:ea:ce:76:11: 0d:68:b2:19:75:6e:37:f5:96:cd:90:46:8e:b9:de: 6d:fb:9a:8e:f4:74:ad:f6:5b:25:f6:d2:be:0b:42: 01:a4:85:3b:96:97:c2:71:94:48:59:19:66:dc:a9: 61:f5:a3:d9:45:bb:00:61:0d:65:38:15:53:c4:ae: 20:dc:fa:9f:51:5d:73:29:e3:41:98:31:09:71:2d: 34:f6:b0:9b:33:12:1a:ef:3d:d3:af:b2:41:81:b6: 9b:3e:76:19:13:82:bc:ef:1c:0a:24:4a:83:d8:78: 8a:ce:86:02:5d:dc:53:87:ae:4c:fa:a1:f3:02:50: 8d:0c:a5:17:1d:28:ae:bc:a3:c5:2d:aa:d7:87:bd: 9d:ea:e7:a2:25:26:70:ba:92:28:18:b3:bd:00:db: 88:ed:1f:4a:f7:39:65:2b:2e:8d:48:fd:95:de:16: 31:96:00:03:4a:65:17:93:9f:3a:87:d4:85:41:3d: 21:be:79:af:15:97:25:6f:4e:03:fc:23:d8:0f:e5: f0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9A:60:14:C1:B4:BA:60:B9:B1:99:7A:1E:81:96:79:EB:79:FD:A4 X509v3 Authority Key Identifier: keyid:29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fd:d6:ec:c5:d3:5b:e5:8e:46:1d:a6:e7:26:0f:bd:1d:b8: 73:3b:66:e6:ce:43:ce:f7:90:13:ed:ec:af:e7:40:03:cf:22: 01:6e:a3:95:97:07:6a:a6:f5:b7:db:d0:20:67:c7:5e:e5:06: 35:18:e6:0d:90:d3:ff:ba:6b:41:91:04:17:86:c7:7e:3d:86: da:0e:a3:0f:66:b5:48:3e:a6:6c:fd:99:6e:9c:05:91:bd:2f: 07:52:1d:c0:7f:19:43:84:e2:b9:63:26:0e:06:64:f9:19:20: 5f:70:1d:50:d7:17:fe:ee:40:f0:4d:ff:4b:54:8a:86:88:03: c5:c2:41:69:59:6a:04:11:e7:64:4e:5e:ae:38:37:7d:b8:a2: c3:e7:2c:51:ac:b9:3a:39:76:0e:5f:89:f4:c7:4a:ab:58:4c: a0:26:e7:9a:a4:dd:88:44:f6:87:db:18:4f:4d:d1:ac:ce:c6: ec:1f:8d:5d:39:0c:f1:c3:04:7b:08:8d:ed:ce:d5:bd:6f:a5: ab:90:e8:4c:95:c0:e6:bb:28:8c:d9:ac:e3:3e:85:8b:b7:f3: 85:03:19:a2:24:ce:64:62:b0:95:f5:12:5b:0b:66:75:be:50: 87:f6:cd:95:1e:bc:19:a0:54:10:e5:8c:16:92:c7:39:89:fe: 97:21:14:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE0MDExMC8GA1UEBRMoMjkxNzk5RkJBNTE5RDAyNDAyNEYzMEQ5MjMxN0UwODk0 NDUyMTRBRDAeFw0yNjA5MjEwODEwMjJaFw0yNjA5MjgwODEwMjJaMBgxFjAUBgNV BAMTDTZhYjBlNjZmLTg5YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChwjgWlQPDVkNmIbJT1SVNYS27CF9KK6v1Zrw3NkXmRc10i1B1CkK66dgwSxF/ 5jhUQOzVzkAO6s52EQ1oshl1bjf1ls2QRo653m37mo70dK32WyX20r4LQgGkhTuW l8JxlEhZGWbcqWH1o9lFuwBhDWU4FVPEriDc+p9RXXMp40GYMQlxLTT2sJszEhrv PdOvskGBtps+dhkTgrzvHAokSoPYeIrOhgJd3FOHrkz6ofMCUI0MpRcdKK68o8Ut qteHvZ3q56IlJnC6kigYs70A24jtH0r3OWUrLo1I/ZXeFjGWAANKZReTnzqH1IVB PSG+ea8VlyVvTgP8I9gP5fBlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtppgFMG0 umC5sZl6HoGWeet5/aQwHwYDVR0jBBgwFoAUKReZ+6UZ0CQCTzDZIxfgiURSFK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTQwL0Y0QTc4RTYwMkND ODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENRQ1R6RFpJeGZnaVVSU0ZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1JlWi02VVowQ1FDVHpEWkl4ZmdpVVJTRkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTQwL0Y0QTc4RTYwMkNDODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENR Q1R6RFpJeGZnaVVSU0ZLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA7/dbsxdNb5Y5GHabnJg+9HbhzO2bmzkPO95AT7eyv50ADzyIBbqOVlwdqpvW3 29AgZ8de5QY1GOYNkNP/umtBkQQXhsd+PYbaDqMPZrVIPqZs/ZlunAWRvS8HUh3A fxlDhOK5YyYOBmT5GSBfcB1Q1xf+7kDwTf9LVIqGiAPFwkFpWWoEEedkTl6uODd9 uKLD5yxRrLk6OXYOX4n0x0qrWEygJueapN2IRPaH2xhPTdGszsbsH41dOQzxwwR7 CI3tztW9b6WrkOhMlcDmuyiM2azjPoWLt/OFAxmiJM5kYrCV9RJbC2Z1vlCH9s2V HrwZoFQQ5YwWksc5if6XIRRK -----END CERTIFICATE-----Generated at Tue Sep 22 18:00:50 2026 by rpki-client