$ rpki-client -vvf rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft File: KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft (raw, json) Hash identifier: eYY086KLW+ORCeWNwfXM5WFf2Avimv7514ObdHwUbGY= Subject key identifier: 75:01:30:44:24:9C:4A:C6:B7:1A:C0:E5:A3:50:1C:0A:22:C8:3B:C6 Authority key identifier: 29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD Certificate issuer: /CN=A9137140/serialNumber=291799FBA519D024024F30D92317E089445214AD Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft Manifest number: 06 Signing time: Sun 05 Apr 2026 08:32:25 +0000 Manifest this update: Sun 05 Apr 2026 08:32:25 +0000 Manifest next update: Sun 12 Apr 2026 08:32:25 +0000 Files and hashes: 1: KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl (hash: HsCqeyhhHK1OvzcDQS1RFvaDBTNw2YTS4vLaRCdzWq4=) 2: B59CFE982CC911F1B7420D8891833773.roa (hash: ChML6/BXm28G8I4gfbaCWvlG/hRxjVNn890GnCbb/s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137140, serialNumber=291799FBA519D024024F30D92317E089445214AD Validity Not Before: Apr 5 08:32:25 2026 GMT Not After : Apr 12 08:32:25 2026 GMT Subject: CN=69d21e19-f1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:8b:67:03:83:02:59:60:60:63:da:ff:a4: fd:13:b8:ad:8b:1e:13:c2:39:b8:11:60:d7:51:32: 3e:c3:0d:b3:28:67:25:6d:02:71:0d:66:45:e5:8e: 12:5b:a8:5f:5b:fc:7b:fe:98:e5:cf:fe:eb:c5:a8: f6:9b:4b:b8:9f:a9:32:30:ed:06:7c:c2:78:cb:cb: 27:0c:6b:96:e5:f4:f4:71:a5:59:09:2e:e2:bd:7b: ea:95:bc:fd:b7:13:9a:7b:a8:21:48:73:81:02:3d: ab:9d:b7:da:9a:f7:dc:bb:3b:d1:b0:45:6a:b6:48: 53:e4:6b:36:88:df:e7:b5:23:f2:c8:67:53:3e:51: cb:6b:60:29:8f:dd:5d:39:94:f8:40:87:27:89:f7: 29:da:78:6b:07:da:61:f1:c2:74:25:b1:1d:ab:6e: 27:b2:4b:04:72:06:f6:73:15:ea:9a:9e:9e:65:7a: e9:4c:5c:d9:4b:71:7b:45:63:ef:91:92:ad:b8:b5: 54:a6:28:64:19:97:6e:cf:e2:dd:3a:f7:c4:64:f6: dd:71:7e:86:85:9f:a8:cb:81:97:a5:0d:9e:d6:67: a2:33:c0:be:5f:32:8e:29:57:26:fa:50:cd:23:54: 53:83:1c:ec:54:09:e2:04:c9:f9:19:7d:66:6b:4c: c0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:01:30:44:24:9C:4A:C6:B7:1A:C0:E5:A3:50:1C:0A:22:C8:3B:C6 X509v3 Authority Key Identifier: keyid:29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:92:21:81:ed:4f:0e:e6:ed:a6:61:21:18:c5:2a:aa:f8:23: 0f:af:62:9d:e5:4d:b4:d5:2a:ac:16:15:81:ce:1b:b9:11:12: e7:ff:3a:82:22:2e:85:59:49:e0:18:00:5a:0d:7c:53:14:8b: 0e:29:4d:af:da:30:ea:9c:fc:06:9a:94:c0:14:14:8d:cd:39: 0a:42:99:22:67:0e:6a:8b:7b:2b:e2:d7:44:22:f2:f3:0d:1d: d2:38:af:06:c8:87:42:59:6f:48:94:79:0d:31:76:5f:86:8a: 27:9f:9a:b4:9e:8a:06:bb:71:a9:cb:57:11:a5:d7:4c:57:03: a6:11:5c:91:f6:d3:28:f5:05:87:af:3f:0f:b2:a2:e7:bd:78: d8:b8:e7:bc:fe:cc:2b:72:97:a0:ce:96:3c:4d:e3:8e:91:14: b8:ac:0b:02:27:76:62:88:af:1e:32:69:6d:03:80:f5:43:00: 65:5d:2c:21:4e:2e:f3:4f:c3:b7:0d:8c:1a:d5:e4:00:15:e5: 28:2d:45:eb:b8:16:7e:5e:8b:c5:ff:ab:a8:cd:ac:b7:30:40: 2d:cf:c1:58:34:62:c2:cb:b6:f4:eb:bf:f0:d7:5b:04:b8:6d: cb:de:08:9e:5e:25:f1:b1:f8:c6:9a:6a:5f:2f:92:1d:37:75: 2e:46:fd:fa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE0MDExMC8GA1UEBRMoMjkxNzk5RkJBNTE5RDAyNDAyNEYzMEQ5MjMxN0UwODk0 NDUyMTRBRDAeFw0yNjA0MDUwODMyMjVaFw0yNjA0MTIwODMyMjVaMBgxFjAUBgNV BAMTDTY5ZDIxZTE5LWYxY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtGItnA4MCWWBgY9r/pP0TuK2LHhPCObgRYNdRMj7DDbMoZyVtAnENZkXljhJb qF9b/Hv+mOXP/uvFqPabS7ifqTIw7QZ8wnjLyycMa5bl9PRxpVkJLuK9e+qVvP23 E5p7qCFIc4ECPaudt9qa99y7O9GwRWq2SFPkazaI3+e1I/LIZ1M+UctrYCmP3V05 lPhAhyeJ9ynaeGsH2mHxwnQlsR2rbieySwRyBvZzFeqanp5leulMXNlLcXtFY++R kq24tVSmKGQZl27P4t0698Rk9t1xfoaFn6jLgZelDZ7WZ6IzwL5fMo4pVyb6UM0j VFODHOxUCeIEyfkZfWZrTMBzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdQEwRCSc Ssa3GsDlo1AcCiLIO8YwHwYDVR0jBBgwFoAUKReZ+6UZ0CQCTzDZIxfgiURSFK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTQwL0Y0QTc4RTYwMkND ODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENRQ1R6RFpJeGZnaVVSU0ZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1JlWi02VVowQ1FDVHpEWkl4ZmdpVVJTRkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTQwL0Y0QTc4RTYwMkNDODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENR Q1R6RFpJeGZnaVVSU0ZLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBckiGB7U8O5u2mYSEYxSqq+CMPr2Kd5U201SqsFhWBzhu5ERLn/zqCIi6FWUng GABaDXxTFIsOKU2v2jDqnPwGmpTAFBSNzTkKQpkiZw5qi3sr4tdEIvLzDR3SOK8G yIdCWW9IlHkNMXZfhoonn5q0nooGu3Gpy1cRpddMVwOmEVyR9tMo9QWHrz8PsqLn vXjYuOe8/swrcpegzpY8TeOOkRS4rAsCJ3ZiiK8eMmltA4D1QwBlXSwhTi7zT8O3 DYwa1eQAFeUoLUXruBZ+XovF/6uozay3MEAtz8FYNGLCy7b067/w11sEuG3L3gie XiXxsfjGmmpfL5IdN3UuRv36 -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:22 2026 by rpki-client