$ rpki-client -vvf rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft File: KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft (raw, json) Hash identifier: I6UMK3GNNkAloBtEmwQo+KT6eFQ+3OYIIFga8sJ4Kjk= Subject key identifier: AB:4B:14:59:26:93:08:90:B2:2A:24:32:9F:B9:CC:B7:1F:68:DD:E2 Authority key identifier: 29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD Certificate issuer: /CN=A9137140/serialNumber=291799FBA519D024024F30D92317E089445214AD Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft Manifest number: 3C Signing time: Tue 21 Jul 2026 10:26:17 +0000 Manifest this update: Tue 21 Jul 2026 10:26:16 +0000 Manifest next update: Tue 28 Jul 2026 10:26:16 +0000 Files and hashes: 1: KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl (hash: N/hLu/3l6z370CkSvZ2uWlX35lYTq6p4Fb2Hno2H67U=) 2: B59CFE982CC911F1B7420D8891833773.roa (hash: ChML6/BXm28G8I4gfbaCWvlG/hRxjVNn890GnCbb/s0=) 3: EE75754E326711F18845F4BEBB833773.roa (hash: HCeaq3kzIY8THNJaU+JbnLdHlRHU5qOObU/7pgQVxZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137140, serialNumber=291799FBA519D024024F30D92317E089445214AD Validity Not Before: Jul 21 10:26:16 2026 GMT Not After : Jul 28 10:26:16 2026 GMT Subject: CN=6a5f4949-e37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d1:1b:9f:ca:f9:f2:12:46:3c:d2:01:83:27: 36:8b:9f:54:0d:65:96:6a:6e:24:7a:b5:5c:82:15: f2:66:b4:65:df:36:ed:0d:c8:f3:a5:15:7d:08:bb: 06:be:5f:23:78:3e:14:91:33:fb:04:d1:c1:e8:45: d5:14:cc:aa:e0:aa:7f:a7:b1:3d:57:a0:62:45:9f: 11:d7:b5:53:0c:b5:49:01:42:4c:d4:40:6f:36:ce: e4:ea:d2:74:8e:7d:b7:62:84:64:c2:ba:5c:25:fc: 84:c0:08:1e:1b:cc:24:54:77:4b:56:ee:f3:70:16: 67:71:e2:9e:93:05:20:4e:2e:40:7b:30:f1:8b:60: 81:89:26:60:66:89:ee:43:10:a6:dd:0a:16:df:19: f2:4a:64:e8:87:ec:16:06:fe:a0:ce:cd:f6:de:92: 50:b2:77:fe:22:ad:72:a1:63:ff:2d:80:04:68:aa: 59:31:be:97:3a:f8:c6:9b:ad:c2:37:11:b4:79:de: ae:90:f0:86:85:ce:d7:ca:09:17:1b:06:0d:fa:c8: 64:10:32:9b:93:5b:c1:12:a0:76:bf:06:a9:9b:20: 35:45:47:b5:c8:9e:e8:4c:7d:8b:57:f3:c5:13:7f: ca:76:3c:5e:94:54:b1:4b:a1:a5:e8:e2:fd:e1:19: a1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4B:14:59:26:93:08:90:B2:2A:24:32:9F:B9:CC:B7:1F:68:DD:E2 X509v3 Authority Key Identifier: keyid:29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b8:48:83:f7:44:3e:3d:3b:00:eb:0a:e7:d8:5a:28:24:80: c3:b3:11:e2:f3:2c:de:01:d0:7a:78:c5:74:de:cd:88:6c:59: dd:01:c8:32:49:90:b0:2c:af:d6:ca:0e:25:35:3e:d0:fc:64: b0:b4:01:e7:26:71:2e:ac:79:b7:df:66:b5:1b:a4:d2:5b:0a: f8:97:e1:8f:87:1e:ef:f4:8d:ad:7b:2d:48:ff:36:a2:9f:17: a6:8d:aa:28:d1:1c:df:b2:93:c5:4a:6a:2a:bd:2e:f0:33:f1: 99:79:8a:a1:b3:17:6c:be:05:fe:93:27:56:39:69:15:96:76: 17:c9:66:db:76:97:2a:25:b1:7c:30:ad:88:b7:21:7b:aa:c2: 2f:72:14:e9:b6:8a:99:88:f3:f1:53:92:7c:9b:95:95:09:d7: 06:f6:42:15:78:f2:85:8c:f4:36:8c:8a:5c:5b:61:10:25:54: a4:f5:c2:6d:9c:34:1d:de:1d:bb:d4:84:24:ef:e5:e8:8e:a8: 6e:0d:f2:a8:8b:49:49:1b:5c:31:bc:29:7c:9a:ac:5d:f6:e9: cb:a0:66:f2:a1:05:8f:76:0c:00:61:13:45:7f:93:f3:4d:e2: 6c:41:48:8c:6b:cb:f0:ff:a2:87:f7:e5:a1:70:24:b6:86:5c: 41:f1:08:bb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE0MDExMC8GA1UEBRMoMjkxNzk5RkJBNTE5RDAyNDAyNEYzMEQ5MjMxN0UwODk0 NDUyMTRBRDAeFw0yNjA3MjExMDI2MTZaFw0yNjA3MjgxMDI2MTZaMBgxFjAUBgNV BAMTDTZhNWY0OTQ5LWUzN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi0RufyvnyEkY80gGDJzaLn1QNZZZqbiR6tVyCFfJmtGXfNu0NyPOlFX0Iuwa+ XyN4PhSRM/sE0cHoRdUUzKrgqn+nsT1XoGJFnxHXtVMMtUkBQkzUQG82zuTq0nSO fbdihGTCulwl/ITACB4bzCRUd0tW7vNwFmdx4p6TBSBOLkB7MPGLYIGJJmBmie5D EKbdChbfGfJKZOiH7BYG/qDOzfbeklCyd/4irXKhY/8tgARoqlkxvpc6+MabrcI3 EbR53q6Q8IaFztfKCRcbBg36yGQQMpuTW8ESoHa/BqmbIDVFR7XInuhMfYtX88UT f8p2PF6UVLFLoaXo4v3hGaGJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUq0sUWSaT CJCyKiQyn7nMtx9o3eIwHwYDVR0jBBgwFoAUKReZ+6UZ0CQCTzDZIxfgiURSFK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTQwL0Y0QTc4RTYwMkND ODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENRQ1R6RFpJeGZnaVVSU0ZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1JlWi02VVowQ1FDVHpEWkl4ZmdpVVJTRkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTQwL0Y0QTc4RTYwMkNDODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENR Q1R6RFpJeGZnaVVSU0ZLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQChuEiD90Q+PTsA6wrn2FooJIDDsxHi8yzeAdB6eMV03s2IbFndAcgySZCwLK/W yg4lNT7Q/GSwtAHnJnEurHm332a1G6TSWwr4l+GPhx7v9I2tey1I/zainxemjaoo 0RzfspPFSmoqvS7wM/GZeYqhsxdsvgX+kydWOWkVlnYXyWbbdpcqJbF8MK2ItyF7 qsIvchTptoqZiPPxU5J8m5WVCdcG9kIVePKFjPQ2jIpcW2EQJVSk9cJtnDQd3h27 1IQk7+XojqhuDfKoi0lJG1wxvCl8mqxd9unLoGbyoQWPdgwAYRNFf5PzTeJsQUiM a8vw/6KH9+WhcCS2hlxB8Qi7 -----END CERTIFICATE-----Generated at Wed Jul 22 02:10:51 2026 by rpki-client