$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft File: KyraxZ7M9jhPxeNj8GfDueKemaE.mft (raw, json) Hash identifier: QkdB8Uum71f7hVHCDdS1d+qqG06Y7EcIKQQdAMlXw8Q= Subject key identifier: 80:9B:30:8D:F6:F7:AB:53:FC:25:12:12:45:0B:78:F0:5C:8B:64:96 Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft Manifest number: 011D Signing time: Sun 19 Oct 2025 07:38:01 +0000 Manifest this update: Sun 19 Oct 2025 07:38:00 +0000 Manifest next update: Sun 26 Oct 2025 07:38:00 +0000 Files and hashes: 1: KyraxZ7M9jhPxeNj8GfDueKemaE.crl (hash: VzbzO0DnM3oQVPxdFnvUAAfTQZWM01YDfjLyQCRoBgQ=) 2: 71B685ACF7E511EEBC67981CC4F9AE02.roa (hash: hnnfq71rK1ZIuAmUqIiiCmmEhX9P+SlsIzqCbG4sw9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Validity Not Before: Oct 19 07:38:00 2025 GMT Not After : Oct 26 07:38:00 2025 GMT Subject: CN=68f49559-ee48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:87:d0:63:30:b6:5e:9a:e5:16:c6:aa:58:0b: 24:0b:f9:03:71:a7:f5:8b:4b:3b:a1:8c:21:8d:bc: 1d:89:f3:96:9c:8d:99:57:92:3d:3e:63:85:95:7a: 62:5f:23:f1:4e:84:6d:5f:12:80:a2:46:16:be:2b: 7c:10:41:4e:a3:dc:16:fb:92:fb:f9:1d:2c:4c:eb: 14:e6:8c:10:0b:85:ca:e6:48:85:e1:08:32:a0:f7: f8:11:07:72:c4:0a:a5:b7:a9:77:bb:3e:9a:5a:ef: ff:f1:27:80:f7:23:95:37:e3:75:a5:c7:b4:73:a4: 09:fd:54:54:32:f2:c4:6a:7d:d4:56:56:a4:0d:7c: 88:a8:8d:b8:b9:fb:c2:8f:38:28:32:60:a4:8f:62: a1:ef:b3:64:2c:58:63:9b:24:2e:57:20:8c:73:3a: 5a:00:fc:75:ab:30:bd:79:68:d0:75:87:a8:2d:b8: 50:e5:ca:eb:a5:fc:a1:1a:ab:84:a3:5a:d4:bb:8d: 64:4e:03:ef:eb:da:c8:ef:64:6f:58:d9:36:04:7f: 83:72:54:96:56:10:10:23:4d:2c:f9:e3:d6:ce:db: b4:8b:55:cf:4a:09:fe:49:e1:3e:08:d2:67:40:77: 15:ae:4d:a6:11:ea:6f:cb:58:21:2a:e3:2a:07:26: 3c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9B:30:8D:F6:F7:AB:53:FC:25:12:12:45:0B:78:F0:5C:8B:64:96 X509v3 Authority Key Identifier: keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:1c:ed:cb:39:21:cf:7c:64:e9:2c:ce:cf:11:c7:74:bc:da: 11:3e:8b:4c:73:ba:be:47:4e:84:8a:29:09:e2:5c:8e:15:18: 7a:7a:45:b2:e3:00:c1:12:80:bf:f8:ec:ae:10:0a:e8:67:3e: ab:25:65:35:af:48:f1:8d:cd:ac:cc:3a:df:9a:c2:c5:15:7e: 16:e4:d4:6c:e1:bf:5c:2e:f0:7d:76:8c:df:a7:6b:fa:86:e5: 96:44:98:45:fd:ee:43:96:c9:2e:7d:d8:6a:04:89:74:35:d3: 24:2c:94:f7:9a:f9:0c:ac:b2:11:99:40:d9:91:91:9c:6d:03: 5c:01:5d:fc:5c:66:95:85:99:c3:9e:41:0a:e9:ac:db:c2:62: 51:e7:c9:da:0d:60:12:bb:1d:99:46:a4:cc:fd:5d:9e:b2:a9: 65:d0:89:1c:0f:7f:71:2b:52:b3:f6:de:ed:f0:d1:8e:a7:2a: 1f:3f:4f:39:38:9e:92:3e:a5:e9:f7:2b:38:22:0d:b1:ef:4d: 91:88:76:02:5b:13:8e:1d:63:73:c4:c9:0e:93:8c:c4:67:1c: 62:2b:86:e0:c0:1c:a2:2c:4b:f3:8c:6a:f8:ea:24:43:88:40: ff:54:44:9c:03:75:db:0b:30:e2:c6:1c:46:04:fd:99:a0:4a: 03:9a:86:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKDJCMkFEQUM1OUVDQ0Y2Mzg0RkM1RTM2M0YwNjdDM0I5 RTI5RTk5QTEwHhcNMjUxMDE5MDczODAwWhcNMjUxMDI2MDczODAwWjAYMRYwFAYD VQQDEw02OGY0OTU1OS1lZTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYfQYzC2XprlFsaqWAskC/kDcaf1i0s7oYwhjbwdifOWnI2ZV5I9PmOFlXpi XyPxToRtXxKAokYWvit8EEFOo9wW+5L7+R0sTOsU5owQC4XK5kiF4QgyoPf4EQdy xAqlt6l3uz6aWu//8SeA9yOVN+N1pce0c6QJ/VRUMvLEan3UVlakDXyIqI24ufvC jzgoMmCkj2Kh77NkLFhjmyQuVyCMczpaAPx1qzC9eWjQdYeoLbhQ5crrpfyhGquE o1rUu41kTgPv69rI72RvWNk2BH+DclSWVhAQI00s+ePWztu0i1XPSgn+SeE+CNJn QHcVrk2mEepvy1ghKuMqByY8AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICbMI32 96tT/CUSEkULePBci2SWMB8GA1UdIwQYMBaAFCsq2sWezPY4T8XjY/Bnw7ninpmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GRjk0RTcxMkY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlqaFB4ZU5qOEdmRHVlS2Vt YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t5cmF4WjdNOWpoUHhlTmo4R2ZEdWVLZW1hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GRjk0RTcxMkY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlq aFB4ZU5qOEdmRHVlS2VtYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChHO3LOSHPfGTpLM7PEcd0vNoRPotMc7q+R06EiikJ4lyOFRh6ekWy 4wDBEoC/+OyuEAroZz6rJWU1r0jxjc2szDrfmsLFFX4W5NRs4b9cLvB9dozfp2v6 huWWRJhF/e5DlskufdhqBIl0NdMkLJT3mvkMrLIRmUDZkZGcbQNcAV38XGaVhZnD nkEK6azbwmJR58naDWASux2ZRqTM/V2esqll0IkcD39xK1Kz9t7t8NGOpyofP085 OJ6SPqXp9ys4Ig2x702RiHYCWxOOHWNzxMkOk4zEZxxiK4bgwByiLEvzjGr46iRD iED/VEScA3XbCzDixhxGBP2ZoEoDmoYk -----END CERTIFICATE-----Generated at Mon Oct 20 16:05:53 2025 by rpki-client