$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft File: KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft (raw, json) Hash identifier: qVvtp56QQS7aQXQgQnjlcXrsiSIn6Neev343ZcjwNro= Subject key identifier: 25:50:CF:D4:31:B1:EB:09:EA:03:0A:DC:3F:89:EE:16:32:66:73:DC Authority key identifier: 29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD Certificate issuer: /CN=A9137140/serialNumber=291799FBA519D024024F30D92317E089445214AD Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft Manifest number: 53 Signing time: Thu 03 Sep 2026 08:31:00 +0000 Manifest this update: Thu 03 Sep 2026 08:31:00 +0000 Manifest next update: Thu 10 Sep 2026 08:31:00 +0000 Files and hashes: 1: KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl (hash: r+SefZ9yVW7IvHF4sr+5nKd3G1CLaj/Ml5ZQpEfUtZ8=) 2: EE75754E326711F18845F4BEBB833773.roa (hash: HCeaq3kzIY8THNJaU+JbnLdHlRHU5qOObU/7pgQVxZ0=) 3: B59CFE982CC911F1B7420D8891833773.roa (hash: ChML6/BXm28G8I4gfbaCWvlG/hRxjVNn890GnCbb/s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137140, serialNumber=291799FBA519D024024F30D92317E089445214AD Validity Not Before: Sep 3 08:31:00 2026 GMT Not After : Sep 10 08:31:00 2026 GMT Subject: CN=6a993044-f4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:db:92:8d:14:84:0d:a2:27:5b:45:31:6d: cd:89:8b:57:89:3a:f8:0f:1f:f6:a3:58:f4:b3:4e: 4b:d7:3d:b8:48:61:4e:04:e9:f4:d6:49:27:d3:5e: c1:ea:59:f6:c7:76:fb:22:28:d3:8c:cd:9f:43:a0: ef:74:37:b8:51:5e:85:23:2e:8b:3f:43:64:fd:f6: 48:9f:00:d8:2f:b6:52:1c:b5:c6:52:50:23:50:dc: 40:b8:a6:88:8d:ad:64:08:57:7a:34:01:03:ac:52: 73:81:30:c9:ff:98:ce:b3:f2:bc:70:d5:18:c3:ee: 01:30:db:83:48:1d:15:19:27:5d:64:59:ca:00:88: 89:d6:76:e7:6e:d1:80:55:b8:4d:15:34:d8:8e:24: c4:cf:b4:a0:9b:91:45:2b:84:b6:c1:27:61:6c:8d: 03:27:61:3c:64:a9:0d:39:8b:2e:2b:40:86:22:8c: 31:4a:86:be:cd:9e:2c:ac:c0:ed:bd:27:43:db:d6: 51:cb:ab:20:0d:96:65:07:92:9c:c9:25:f5:b6:9a: 7e:a0:e2:74:8e:6f:f9:5d:ba:69:d6:69:a6:99:cf: 44:6a:4e:1f:7b:5d:f2:57:5c:04:8b:c5:37:7b:5d: 18:62:d1:b1:5f:c4:b5:d6:67:72:62:2d:21:ed:6c: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:50:CF:D4:31:B1:EB:09:EA:03:0A:DC:3F:89:EE:16:32:66:73:DC X509v3 Authority Key Identifier: keyid:29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:87:a8:36:90:b3:9c:02:2a:de:b4:2b:a7:da:7c:c7:20:2a: b5:6e:43:5f:71:07:80:5c:c0:99:84:b9:95:9f:4a:f2:67:70: c6:cd:2f:65:ff:8b:71:11:d5:ec:3e:fa:4c:93:24:75:60:a2: 9c:e8:38:45:2d:f5:a7:cd:73:93:98:72:01:f8:cf:28:7d:a7: 19:69:b0:2b:ca:af:6c:d9:91:9f:62:2f:e9:58:7f:6b:55:4e: 81:45:7d:26:76:42:9e:52:d6:eb:7b:1f:18:cf:80:bf:60:08: 14:1c:30:9e:e5:92:28:dc:eb:f5:ff:aa:4b:c1:68:14:b7:9d: c8:bd:8f:d5:e0:d9:2c:91:0b:6b:5d:bb:70:d7:48:77:82:1f: 2c:82:0d:2e:b2:1d:33:e4:b6:ca:ea:e8:5c:8f:90:4d:a8:dc: db:63:f4:b9:1c:e7:d6:54:90:29:02:33:cc:c0:59:1c:04:a0: 43:39:4a:32:31:5a:f9:f6:72:12:45:04:a8:26:08:fc:b9:a1: 7c:97:ce:a8:9e:fc:0b:00:00:9b:0c:3b:07:2c:e6:f5:34:03: c2:9c:dc:ad:11:30:cc:0a:ca:bb:2b:b7:4b:ae:a6:22:e7:a1: c7:3a:55:5d:2f:71:66:a8:e5:66:15:1c:93:b0:ed:50:56:3d: 9e:eb:90:8e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE0MDExMC8GA1UEBRMoMjkxNzk5RkJBNTE5RDAyNDAyNEYzMEQ5MjMxN0UwODk0 NDUyMTRBRDAeFw0yNjA5MDMwODMxMDBaFw0yNjA5MTAwODMxMDBaMBgxFjAUBgNV BAMTDTZhOTkzMDQ0LWY0ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZjduSjRSEDaInW0Uxbc2Ji1eJOvgPH/ajWPSzTkvXPbhIYU4E6fTWSSfTXsHq WfbHdvsiKNOMzZ9DoO90N7hRXoUjLos/Q2T99kifANgvtlIctcZSUCNQ3EC4poiN rWQIV3o0AQOsUnOBMMn/mM6z8rxw1RjD7gEw24NIHRUZJ11kWcoAiInWdudu0YBV uE0VNNiOJMTPtKCbkUUrhLbBJ2FsjQMnYTxkqQ05iy4rQIYijDFKhr7NniyswO29 J0Pb1lHLqyANlmUHkpzJJfW2mn6g4nSOb/ldumnWaaaZz0RqTh97XfJXXASLxTd7 XRhi0bFfxLXWZ3JiLSHtbIOrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJVDP1DGx 6wnqAwrcP4nuFjJmc9wwHwYDVR0jBBgwFoAUKReZ+6UZ0CQCTzDZIxfgiURSFK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTQwL0Y0QTc4RTYwMkND ODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENRQ1R6RFpJeGZnaVVSU0ZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1JlWi02VVowQ1FDVHpEWkl4ZmdpVVJTRkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTQwL0Y0QTc4RTYwMkNDODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENR Q1R6RFpJeGZnaVVSU0ZLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+h6g2kLOcAiretCun2nzHICq1bkNfcQeAXMCZhLmVn0ryZ3DGzS9l/4txEdXs PvpMkyR1YKKc6DhFLfWnzXOTmHIB+M8ofacZabAryq9s2ZGfYi/pWH9rVU6BRX0m dkKeUtbrex8Yz4C/YAgUHDCe5ZIo3Ov1/6pLwWgUt53IvY/V4NkskQtrXbtw10h3 gh8sgg0ush0z5LbK6uhcj5BNqNzbY/S5HOfWVJApAjPMwFkcBKBDOUoyMVr59nIS RQSoJgj8uaF8l86onvwLAACbDDsHLOb1NAPCnNytETDMCsq7K7dLrqYi56HHOlVd L3FmqOVmFRyTsO1QVj2e65CO -----END CERTIFICATE-----Generated at Sat Sep 5 07:35:25 2026 by rpki-client