$ rpki-client -vvf rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft File: KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft (raw, json) Hash identifier: XpBDj3svYHwhRaZhkUcO4PN+dFR/inSph/e0T651ARk= Subject key identifier: 50:79:AC:F3:15:3B:53:7A:67:D0:E8:5F:14:DD:59:E7:64:F3:AC:C8 Authority key identifier: 29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD Certificate issuer: /CN=A9137140/serialNumber=291799FBA519D024024F30D92317E089445214AD Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft Manifest number: 1D Signing time: Tue 19 May 2026 08:49:45 +0000 Manifest this update: Tue 19 May 2026 08:49:44 +0000 Manifest next update: Tue 26 May 2026 08:49:44 +0000 Files and hashes: 1: KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl (hash: h/v1jgRrJu2c7GRVvu5o1R92/vjzHMvgrhquGFARhAM=) 2: B59CFE982CC911F1B7420D8891833773.roa (hash: ChML6/BXm28G8I4gfbaCWvlG/hRxjVNn890GnCbb/s0=) 3: EE75754E326711F18845F4BEBB833773.roa (hash: HCeaq3kzIY8THNJaU+JbnLdHlRHU5qOObU/7pgQVxZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137140, serialNumber=291799FBA519D024024F30D92317E089445214AD Validity Not Before: May 19 08:49:44 2026 GMT Not After : May 26 08:49:44 2026 GMT Subject: CN=6a0c2428-874e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:79:c9:aa:54:38:87:de:20:1f:db:20:78: c9:97:95:69:1b:30:9f:ae:07:fc:e1:41:ea:c9:27: b7:e9:4b:89:25:84:b3:f2:70:43:18:83:b8:55:0c: db:21:23:1d:d0:15:df:f9:49:32:4a:f9:86:3c:21: 7e:84:76:1e:ae:25:86:91:ef:3e:a4:73:6e:66:2f: ad:a0:1b:5c:48:ca:dc:f5:b3:27:1e:2a:ce:9c:17: 9d:d4:94:d1:e2:e1:58:83:a9:e0:c8:7c:ad:64:c6: b6:13:b9:7b:89:cb:10:51:00:02:90:a0:9e:5d:c6: a8:c4:56:1d:70:f2:01:f5:a2:e1:e1:1a:17:fd:6f: 8a:3a:e2:1f:03:74:23:25:b8:63:64:04:a6:c8:08: 77:6a:42:f8:ad:4e:f8:4e:bb:8c:6e:43:ad:07:7b: 50:d5:16:c8:fc:a1:a1:a7:2e:ef:ab:5a:0f:25:34: 28:f5:b4:5a:b1:08:fd:62:68:2c:00:50:94:8d:f0: 83:79:72:4e:ad:51:1b:d3:8d:28:77:9b:26:d1:08: 39:44:cc:92:f2:7f:0d:36:c9:36:76:fe:61:8a:a0: 23:99:4b:77:5f:53:98:d5:ca:65:60:65:d8:c5:70: 06:fe:31:50:a4:a2:c4:c8:20:ee:9d:39:64:a3:25: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:79:AC:F3:15:3B:53:7A:67:D0:E8:5F:14:DD:59:E7:64:F3:AC:C8 X509v3 Authority Key Identifier: keyid:29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ac:04:f1:b8:11:ad:60:65:26:6d:cc:dc:fb:91:de:2c:a1: 3e:6f:c6:df:87:46:c6:92:16:4f:2a:50:3b:81:96:b6:ed:07: 74:fc:d1:76:d2:33:6b:e1:2a:bc:22:59:21:00:a2:e1:45:c6: df:14:d9:5a:ac:8c:3d:7e:f8:ee:23:81:fe:d9:09:76:87:69: 9f:f4:71:6d:47:8c:be:6f:17:88:22:6a:2c:1b:e9:1f:2b:74: e8:a8:f3:d5:4f:9d:75:46:44:72:36:62:3d:96:32:96:a5:de: 78:b6:93:7d:89:e8:d4:21:99:de:f4:14:50:61:fb:7a:5f:a7: 9c:8d:47:39:ec:d9:89:2d:84:c3:89:71:0d:b5:f2:f8:a4:db: 06:93:2f:e5:44:3e:62:c7:62:48:30:f9:e1:f1:cb:8b:10:4d: 7c:81:ba:bf:50:73:83:5e:99:24:54:33:e5:d8:26:1c:7a:04: f6:1f:50:95:18:30:01:f3:da:95:b2:98:2e:44:8e:66:6e:be: 3b:38:98:10:ad:48:a0:47:bd:ea:4e:cc:2f:0a:b5:95:4f:61: ac:68:7c:a0:73:5e:b1:f2:a4:d6:a5:03:c1:80:b6:ff:6b:06: 55:39:75:f0:90:bc:17:77:c9:c5:36:c8:dc:f2:57:d1:9c:b6: 30:f3:e3:7c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE0MDExMC8GA1UEBRMoMjkxNzk5RkJBNTE5RDAyNDAyNEYzMEQ5MjMxN0UwODk0 NDUyMTRBRDAeFw0yNjA1MTkwODQ5NDRaFw0yNjA1MjYwODQ5NDRaMBgxFjAUBgNV BAMTDTZhMGMyNDI4LTg3NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDAHnJqlQ4h94gH9sgeMmXlWkbMJ+uB/zhQerJJ7fpS4klhLPycEMYg7hVDNsh Ix3QFd/5STJK+YY8IX6Edh6uJYaR7z6kc25mL62gG1xIytz1syceKs6cF53UlNHi 4ViDqeDIfK1kxrYTuXuJyxBRAAKQoJ5dxqjEVh1w8gH1ouHhGhf9b4o64h8DdCMl uGNkBKbICHdqQvitTvhOu4xuQ60He1DVFsj8oaGnLu+rWg8lNCj1tFqxCP1iaCwA UJSN8IN5ck6tURvTjSh3mybRCDlEzJLyfw02yTZ2/mGKoCOZS3dfU5jVymVgZdjF cAb+MVCkosTIIO6dOWSjJUoLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUHms8xU7 U3pn0OhfFN1Z52TzrMgwHwYDVR0jBBgwFoAUKReZ+6UZ0CQCTzDZIxfgiURSFK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTQwL0Y0QTc4RTYwMkND ODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENRQ1R6RFpJeGZnaVVSU0ZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1JlWi02VVowQ1FDVHpEWkl4ZmdpVVJTRkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTQwL0Y0QTc4RTYwMkNDODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENR Q1R6RFpJeGZnaVVSU0ZLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQByrATxuBGtYGUmbczc+5HeLKE+b8bfh0bGkhZPKlA7gZa27Qd0/NF20jNr4Sq8 IlkhAKLhRcbfFNlarIw9fvjuI4H+2Ql2h2mf9HFtR4y+bxeIImosG+kfK3ToqPPV T511RkRyNmI9ljKWpd54tpN9iejUIZne9BRQYft6X6ecjUc57NmJLYTDiXENtfL4 pNsGky/lRD5ix2JIMPnh8cuLEE18gbq/UHODXpkkVDPl2CYcegT2H1CVGDAB89qV spguRI5mbr47OJgQrUigR73qTswvCrWVT2GsaHygc16x8qTWpQPBgLb/awZVOXXw kLwXd8nFNsjc8lfRnLYw8+N8 -----END CERTIFICATE-----Generated at Thu May 21 10:28:07 2026 by rpki-client