$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft File: KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft (raw, json) Hash identifier: DKRj/+6+laRI5qqljCH51rTNPALiwpVmAj8MoObeauM= Subject key identifier: 95:2A:77:74:16:83:3D:C4:00:3C:20:C1:E7:46:93:92:E1:D0:C9:8E Authority key identifier: 29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD Certificate issuer: /CN=A9137140/serialNumber=291799FBA519D024024F30D92317E089445214AD Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft Manifest number: 5E Signing time: Fri 25 Sep 2026 08:16:08 +0000 Manifest this update: Fri 25 Sep 2026 08:16:07 +0000 Manifest next update: Fri 02 Oct 2026 08:16:07 +0000 Files and hashes: 1: KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl (hash: EDax6V7eFSBXwbz+0/EJCGeRAuYYq07Rdcs+gcZkcDw=) 2: EE75754E326711F18845F4BEBB833773.roa (hash: HCeaq3kzIY8THNJaU+JbnLdHlRHU5qOObU/7pgQVxZ0=) 3: B59CFE982CC911F1B7420D8891833773.roa (hash: ChML6/BXm28G8I4gfbaCWvlG/hRxjVNn890GnCbb/s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137140, serialNumber=291799FBA519D024024F30D92317E089445214AD Validity Not Before: Sep 25 08:16:07 2026 GMT Not After : Oct 2 08:16:07 2026 GMT Subject: CN=6ab62dc8-6382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:54:b2:4c:62:f2:49:cf:a5:13:5c:56:60:07: c4:bf:46:96:7a:48:79:9a:0b:d1:20:a5:01:e4:7d: 07:ad:21:d9:f9:79:2b:26:c1:27:e3:d6:a4:73:4b: af:a8:b1:69:ac:e9:22:25:dc:d7:45:73:72:31:81: 27:12:f2:2f:5f:fd:22:09:4f:62:b0:b3:39:0e:49: 03:76:7d:da:fa:96:5c:7f:89:8c:6b:54:c4:69:e6: ca:4e:ac:04:30:2e:53:a5:d2:fe:7c:c3:90:4c:2c: 04:7e:07:c5:85:52:ff:d7:d9:55:1a:cf:7c:bc:c9: ab:ab:f7:01:2b:8b:b0:b1:5e:6f:05:1e:13:99:eb: fa:15:a6:24:79:5d:53:43:f8:07:d2:3c:9c:bb:f6: d1:da:95:79:55:c7:f5:8a:5e:39:34:b4:71:23:6e: de:cc:4e:00:c2:da:42:8e:e0:98:cf:36:17:4f:c2: 7d:7f:4a:ad:17:0b:07:a9:50:2e:03:d5:b4:4c:ff: 26:66:84:46:54:a9:00:68:6a:35:14:78:ff:cd:f5: a4:a1:64:c5:04:6a:52:2f:e5:66:ac:c7:3f:7b:27: 8f:68:71:45:25:5d:ee:32:66:aa:0f:6c:b8:c4:e4: 7e:68:86:af:84:f5:b5:2b:30:13:04:65:ce:55:7b: 9f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2A:77:74:16:83:3D:C4:00:3C:20:C1:E7:46:93:92:E1:D0:C9:8E X509v3 Authority Key Identifier: keyid:29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:db:78:17:99:de:84:89:0d:83:58:26:09:d4:a8:37:ea:a1: 2b:4b:e0:3f:eb:aa:5f:f1:15:b7:1f:c8:5f:8b:23:de:05:c8: 59:02:c4:65:7a:76:b4:96:92:f6:16:c1:29:3a:22:c9:d7:74: 20:1a:3c:9d:23:5a:d2:d3:c9:04:d8:fb:e0:b9:6c:51:f8:71: 45:09:f9:b8:9d:c5:26:84:14:60:62:69:dc:5e:45:c2:19:a8: 69:7a:12:9f:72:99:60:80:22:4e:d7:20:90:f1:84:d4:37:ab: 52:5d:81:6b:1d:b4:c1:48:dc:83:3f:48:66:ea:ae:d8:82:04: 14:b7:7a:fb:be:7d:7c:32:f7:ce:0a:65:e9:b0:7f:3f:eb:c7: dc:7f:25:61:86:eb:24:f2:51:8f:e8:34:ef:37:e2:cc:77:32: 81:a1:a6:70:dc:70:f1:b2:94:b7:42:aa:42:62:5c:e7:de:b0: 46:db:d5:eb:ae:44:6e:b5:15:73:88:99:05:6a:af:15:1c:da: d1:d2:51:31:b6:5c:75:35:96:62:7c:e5:21:74:c8:00:42:88: 33:65:af:57:65:2e:e7:7e:6a:93:df:6d:3d:9a:fb:f3:73:0e: 5e:af:d0:52:ad:8a:99:f3:ee:c0:7d:cc:c3:81:2a:a3:4e:29: d1:df:76:b1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE0MDExMC8GA1UEBRMoMjkxNzk5RkJBNTE5RDAyNDAyNEYzMEQ5MjMxN0UwODk0 NDUyMTRBRDAeFw0yNjA5MjUwODE2MDdaFw0yNjEwMDIwODE2MDdaMBgxFjAUBgNV BAMTDTZhYjYyZGM4LTYzODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKVLJMYvJJz6UTXFZgB8S/RpZ6SHmaC9EgpQHkfQetIdn5eSsmwSfj1qRzS6+o sWms6SIl3NdFc3IxgScS8i9f/SIJT2KwszkOSQN2fdr6llx/iYxrVMRp5spOrAQw LlOl0v58w5BMLAR+B8WFUv/X2VUaz3y8yaur9wEri7CxXm8FHhOZ6/oVpiR5XVND +AfSPJy79tHalXlVx/WKXjk0tHEjbt7MTgDC2kKO4JjPNhdPwn1/Sq0XCwepUC4D 1bRM/yZmhEZUqQBoajUUeP/N9aShZMUEalIv5Wasxz97J49ocUUlXe4yZqoPbLjE 5H5ohq+E9bUrMBMEZc5Ve5/5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlSp3dBaD PcQAPCDB50aTkuHQyY4wHwYDVR0jBBgwFoAUKReZ+6UZ0CQCTzDZIxfgiURSFK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTQwL0Y0QTc4RTYwMkND ODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENRQ1R6RFpJeGZnaVVSU0ZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1JlWi02VVowQ1FDVHpEWkl4ZmdpVVJTRkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTQwL0Y0QTc4RTYwMkNDODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENR Q1R6RFpJeGZnaVVSU0ZLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBf23gXmd6EiQ2DWCYJ1Kg36qErS+A/66pf8RW3H8hfiyPeBchZAsRlena0lpL2 FsEpOiLJ13QgGjydI1rS08kE2PvguWxR+HFFCfm4ncUmhBRgYmncXkXCGahpehKf cplggCJO1yCQ8YTUN6tSXYFrHbTBSNyDP0hm6q7YggQUt3r7vn18MvfOCmXpsH8/ 68fcfyVhhusk8lGP6DTvN+LMdzKBoaZw3HDxspS3QqpCYlzn3rBG29XrrkRutRVz iJkFaq8VHNrR0lExtlx1NZZifOUhdMgAQogzZa9XZS7nfmqT3209mvvzcw5er9BS rYqZ8+7AfczDgSqjTinR33ax -----END CERTIFICATE-----Generated at Sat Sep 26 18:08:39 2026 by rpki-client