$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft File: KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft (raw, json) Hash identifier: biGODaFZhbmo556LgHAbSMGGS6aEgJB1sBoF5svcTc8= Subject key identifier: 3A:E2:8E:03:5A:D6:02:13:AC:3B:55:E1:F9:DD:77:D9:DF:87:C9:1C Authority key identifier: 29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD Certificate issuer: /CN=A9137140/serialNumber=291799FBA519D024024F30D92317E089445214AD Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft Manifest number: 6E Signing time: Tue 27 Oct 2026 08:15:41 +0000 Manifest this update: Tue 27 Oct 2026 08:15:41 +0000 Manifest next update: Tue 03 Nov 2026 08:15:41 +0000 Files and hashes: 1: KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl (hash: AvbaAQSspiy2lFKB0yAffTDJYLD1Jr6I3Pjm5FOTAv4=) 2: B59CFE982CC911F1B7420D8891833773.roa (hash: ChML6/BXm28G8I4gfbaCWvlG/hRxjVNn890GnCbb/s0=) 3: EE75754E326711F18845F4BEBB833773.roa (hash: HCeaq3kzIY8THNJaU+JbnLdHlRHU5qOObU/7pgQVxZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137140, serialNumber=291799FBA519D024024F30D92317E089445214AD Validity Not Before: Oct 27 08:15:41 2026 GMT Not After : Nov 3 08:15:41 2026 GMT Subject: CN=6ae05dad-8a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:87:ef:b6:c2:40:5e:3c:5a:19:e9:a3:15: 3b:bf:f8:01:0b:d7:ef:9d:b6:1e:07:25:b2:c7:85: a1:c5:c1:c0:db:00:40:4d:ea:ba:0e:14:35:59:fa: 83:78:eb:80:05:c6:d9:ad:cf:36:ac:98:54:67:cf: 8c:7a:3a:c5:56:ef:53:7a:8f:fd:39:1c:d7:3c:b4: 6b:a9:5b:57:71:15:bd:c0:a6:11:04:a7:50:77:72: 86:4f:0b:73:21:7b:00:5f:79:66:69:f1:df:91:ca: d3:9a:e8:13:71:88:86:92:5f:2b:84:9c:2e:83:98: 79:ff:a3:fb:a4:eb:c6:9d:35:25:c9:b4:4c:1e:d0: 7b:e1:83:5b:b7:fb:cd:6d:4b:62:51:ec:f2:fa:b2: 30:75:59:15:f7:4f:37:28:ac:36:0a:b2:3a:fd:97: 17:02:70:df:85:ef:c8:d1:af:01:64:54:18:97:76: 1b:34:94:bc:30:73:f4:2f:0c:0a:7b:04:48:e1:0f: 54:6f:7b:09:93:a6:3b:b0:ef:51:4b:b5:1d:07:6e: 3a:5a:21:30:da:22:7e:8f:df:f6:ed:e3:77:32:0c: 0a:ba:2e:61:14:5a:14:4b:fd:73:6c:e6:7a:84:5a: 42:ef:11:c9:a1:35:32:a5:af:a2:01:8d:b4:2a:be: b5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E2:8E:03:5A:D6:02:13:AC:3B:55:E1:F9:DD:77:D9:DF:87:C9:1C X509v3 Authority Key Identifier: keyid:29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9f:d2:08:7c:e1:af:ca:f5:12:6c:ea:95:18:c2:55:c5:4c: e9:15:83:b2:93:c8:78:cc:fb:4f:ee:78:e1:45:f8:bc:d4:12: 6b:91:9c:e0:3b:03:79:2c:93:b4:fb:c2:33:c7:ec:13:b5:79: 0c:e2:54:82:e3:f6:bd:d8:76:6f:97:c7:08:52:4d:8f:71:e6: f4:61:c2:7e:a5:c5:5a:1f:e2:e7:a1:34:f1:ff:c1:8e:a4:41: 22:b7:ee:29:85:a5:0d:cd:9d:f0:12:cb:76:9d:2d:15:e1:bf: fb:64:de:b7:5b:f3:28:55:ad:4f:7d:88:76:70:ea:e0:0a:85: 12:24:c1:39:19:48:7f:7c:de:15:94:c7:b2:16:5a:67:e8:0e: db:55:35:e6:83:d5:07:e8:d5:7f:0c:c3:92:fe:90:7f:d1:4c: 61:08:d5:5d:a4:83:ac:f3:16:07:99:79:6f:c1:52:a6:60:0e: f8:1e:e4:6b:c1:13:45:ce:9e:71:f9:f3:17:22:9e:df:23:65: 3f:05:98:3a:5e:90:28:95:b1:c2:8b:80:48:05:e0:30:a7:1f: 20:84:e3:67:fe:8e:e4:e4:c9:9e:a9:64:33:bc:a8:43:23:c0: 9a:42:e5:ef:53:5b:c2:6a:ec:62:31:d5:16:29:92:45:91:a5: 71:84:e3:f5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE0MDExMC8GA1UEBRMoMjkxNzk5RkJBNTE5RDAyNDAyNEYzMEQ5MjMxN0UwODk0 NDUyMTRBRDAeFw0yNjEwMjcwODE1NDFaFw0yNjExMDMwODE1NDFaMBgxFjAUBgNV BAMTDTZhZTA1ZGFkLThhNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzaIfvtsJAXjxaGemjFTu/+AEL1++dth4HJbLHhaHFwcDbAEBN6roOFDVZ+oN4 64AFxtmtzzasmFRnz4x6OsVW71N6j/05HNc8tGupW1dxFb3AphEEp1B3coZPC3Mh ewBfeWZp8d+RytOa6BNxiIaSXyuEnC6DmHn/o/uk68adNSXJtEwe0Hvhg1u3+81t S2JR7PL6sjB1WRX3TzcorDYKsjr9lxcCcN+F78jRrwFkVBiXdhs0lLwwc/QvDAp7 BEjhD1RvewmTpjuw71FLtR0HbjpaITDaIn6P3/bt43cyDAq6LmEUWhRL/XNs5nqE WkLvEcmhNTKlr6IBjbQqvrXBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOuKOA1rW AhOsO1Xh+d132d+HyRwwHwYDVR0jBBgwFoAUKReZ+6UZ0CQCTzDZIxfgiURSFK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTQwL0Y0QTc4RTYwMkND ODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENRQ1R6RFpJeGZnaVVSU0ZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1JlWi02VVowQ1FDVHpEWkl4ZmdpVVJTRkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTQwL0Y0QTc4RTYwMkNDODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENR Q1R6RFpJeGZnaVVSU0ZLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBsn9IIfOGvyvUSbOqVGMJVxUzpFYOyk8h4zPtP7njhRfi81BJrkZzgOwN5LJO0 +8Izx+wTtXkM4lSC4/a92HZvl8cIUk2Pceb0YcJ+pcVaH+LnoTTx/8GOpEEit+4p haUNzZ3wEst2nS0V4b/7ZN63W/MoVa1PfYh2cOrgCoUSJME5GUh/fN4VlMeyFlpn 6A7bVTXmg9UH6NV/DMOS/pB/0UxhCNVdpIOs8xYHmXlvwVKmYA74HuRrwRNFzp5x +fMXIp7fI2U/BZg6XpAolbHCi4BIBeAwpx8ghONn/o7k5MmeqWQzvKhDI8CaQuXv U1vCauxiMdUWKZJFkaVxhOP1 -----END CERTIFICATE-----Generated at Wed Oct 28 16:36:04 2026 by rpki-client