$ rpki-client -vvf rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft File: KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft (raw, json) Hash identifier: FqFAgAua/m2SuZd3czjSbvEUexWWVZ6LQ7pbpbo/q2M= Subject key identifier: 9C:1E:F9:80:E8:08:F8:29:9A:AD:4B:19:BF:AA:E5:55:A8:5D:67:8B Authority key identifier: 29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD Certificate issuer: /CN=A9137140/serialNumber=291799FBA519D024024F30D92317E089445214AD Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft Manifest number: 19 Signing time: Mon 11 May 2026 09:11:20 +0000 Manifest this update: Mon 11 May 2026 09:11:19 +0000 Manifest next update: Mon 18 May 2026 09:11:19 +0000 Files and hashes: 1: KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl (hash: UXqVKcLAl7N5a+r13dQyWRa7LtWM0RAsB4aq1LMZiPw=) 2: B59CFE982CC911F1B7420D8891833773.roa (hash: ChML6/BXm28G8I4gfbaCWvlG/hRxjVNn890GnCbb/s0=) 3: EE75754E326711F18845F4BEBB833773.roa (hash: HCeaq3kzIY8THNJaU+JbnLdHlRHU5qOObU/7pgQVxZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137140, serialNumber=291799FBA519D024024F30D92317E089445214AD Validity Not Before: May 11 09:11:19 2026 GMT Not After : May 18 09:11:19 2026 GMT Subject: CN=6a019d38-59b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:d8:e0:8d:fa:9a:cd:b0:32:36:d3:de:0f: 28:4b:09:3d:9d:15:d3:c3:ed:c5:a0:83:9c:01:bd: 1d:ef:a6:f0:38:e9:42:0f:8a:57:6d:79:7d:b0:0f: 54:32:73:ce:bd:ee:2b:a1:4f:2a:f0:16:89:1a:c9: 87:d6:d2:7c:b6:d3:47:dd:07:82:f8:84:32:7e:c5: c0:b1:1d:5d:13:5d:d4:6c:bc:74:38:46:41:2b:24: e1:82:3a:0e:6b:85:7f:82:91:2b:eb:e6:1e:cb:12: 0a:2b:6d:a2:88:47:da:1b:34:40:ff:87:18:ad:e8: ef:27:90:a3:27:63:19:15:d8:b9:ba:0a:fd:42:2e: cb:3b:f0:a4:ab:4a:dc:e4:6b:cf:aa:ae:b0:24:21: 27:61:99:a5:c4:77:5e:77:ae:0a:b5:da:a6:3e:5a: f7:5f:5d:a5:1d:1c:1f:44:16:4d:2b:55:a0:c8:8e: 20:3a:1e:dd:7f:87:0e:28:cf:53:8e:96:7c:c1:e3: b3:fb:cc:9f:13:aa:40:92:11:f1:2c:ca:86:31:3b: e9:9e:66:90:4f:55:4a:38:8f:96:d5:63:96:15:31: 73:ac:b3:e4:f4:75:70:fd:3f:8f:9a:66:56:ce:4b: d5:b8:bc:3a:02:6e:7c:69:f0:66:65:6a:77:bb:40: 03:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1E:F9:80:E8:08:F8:29:9A:AD:4B:19:BF:AA:E5:55:A8:5D:67:8B X509v3 Authority Key Identifier: keyid:29:17:99:FB:A5:19:D0:24:02:4F:30:D9:23:17:E0:89:44:52:14:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KReZ-6UZ0CQCTzDZIxfgiURSFK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137140/F4A78E602CC811F1A1767FCF90833773/KReZ-6UZ0CQCTzDZIxfgiURSFK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:74:64:fc:84:0c:b4:f4:b3:25:a3:20:0d:01:03:d6:f2:50: 32:8f:74:16:28:e3:0c:6d:43:10:00:cf:21:3e:df:a2:0a:c4: 66:db:8a:56:0c:a7:5f:28:38:f3:46:6b:fb:c5:bc:57:fc:c6: 11:47:6a:17:a5:c8:b3:eb:7f:67:2e:e1:e3:16:4a:6a:7f:00: cf:a3:e8:4c:22:c5:3a:9b:8e:dd:7d:ae:de:ff:b9:db:37:50: bb:20:34:ea:c9:01:2d:47:e5:17:27:f7:92:29:2c:ac:c2:34: 3d:6d:70:03:ec:b0:f9:e1:b3:2c:d9:ca:45:f2:7e:50:3f:d2: 1b:82:86:f3:a3:2e:87:a9:57:5d:03:4e:05:1d:99:cf:25:37: b0:a6:a3:c1:7a:81:e2:f5:51:d2:ae:d9:63:bc:56:5d:ec:df: 3d:58:1a:19:1f:cb:86:5a:0d:e6:7b:0f:08:ba:5c:70:9c:bc: e2:d3:88:24:41:9a:84:99:30:08:4f:0c:23:71:80:9f:46:15: 5f:67:b3:fe:0a:0b:7d:8f:09:cc:1e:ef:85:9f:24:77:a0:b0: d4:fc:80:de:f2:be:82:bf:b8:53:16:b1:6d:33:fb:18:32:3a: d6:a1:79:a3:f2:b9:65:99:87:53:90:2f:54:1a:5c:df:ad:4b: 38:c2:67:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE0MDExMC8GA1UEBRMoMjkxNzk5RkJBNTE5RDAyNDAyNEYzMEQ5MjMxN0UwODk0 NDUyMTRBRDAeFw0yNjA1MTEwOTExMTlaFw0yNjA1MTgwOTExMTlaMBgxFjAUBgNV BAMTDTZhMDE5ZDM4LTU5YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3gNjgjfqazbAyNtPeDyhLCT2dFdPD7cWgg5wBvR3vpvA46UIPildteX2wD1Qy c8697iuhTyrwFokayYfW0ny200fdB4L4hDJ+xcCxHV0TXdRsvHQ4RkErJOGCOg5r hX+CkSvr5h7LEgorbaKIR9obNED/hxit6O8nkKMnYxkV2Lm6Cv1CLss78KSrStzk a8+qrrAkISdhmaXEd153rgq12qY+WvdfXaUdHB9EFk0rVaDIjiA6Ht1/hw4oz1OO lnzB47P7zJ8TqkCSEfEsyoYxO+meZpBPVUo4j5bVY5YVMXOss+T0dXD9P4+aZlbO S9W4vDoCbnxp8GZlane7QAOFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnB75gOgI +CmarUsZv6rlVahdZ4swHwYDVR0jBBgwFoAUKReZ+6UZ0CQCTzDZIxfgiURSFK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTQwL0Y0QTc4RTYwMkND ODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENRQ1R6RFpJeGZnaVVSU0ZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1JlWi02VVowQ1FDVHpEWkl4ZmdpVVJTRkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTQwL0Y0QTc4RTYwMkNDODExRjFBMTc2N0ZDRjkwODMzNzczL0tSZVotNlVaMENR Q1R6RFpJeGZnaVVSU0ZLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB9dGT8hAy09LMloyANAQPW8lAyj3QWKOMMbUMQAM8hPt+iCsRm24pWDKdfKDjz Rmv7xbxX/MYRR2oXpciz639nLuHjFkpqfwDPo+hMIsU6m47dfa7e/7nbN1C7IDTq yQEtR+UXJ/eSKSyswjQ9bXAD7LD54bMs2cpF8n5QP9Ibgobzoy6HqVddA04FHZnP JTewpqPBeoHi9VHSrtljvFZd7N89WBoZH8uGWg3mew8IulxwnLzi04gkQZqEmTAI TwwjcYCfRhVfZ7P+Cgt9jwnMHu+FnyR3oLDU/IDe8r6Cv7hTFrFtM/sYMjrWoXmj 8rllmYdTkC9UGlzfrUs4wmd6 -----END CERTIFICATE-----Generated at Wed May 13 09:08:58 2026 by rpki-client