$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft File: KyraxZ7M9jhPxeNj8GfDueKemaE.mft (raw, json) Hash identifier: h1Hw1Zl5vupECTzGIHapI4aRSzMKlRxai0GF6SzjSZQ= Subject key identifier: 27:D6:BC:54:B9:F3:66:F3:0E:20:A7:8F:F0:98:44:F0:DF:D6:1D:D5 Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft Manifest number: 01CC Signing time: Wed 23 Sep 2026 03:35:41 +0000 Manifest this update: Wed 23 Sep 2026 03:35:40 +0000 Manifest next update: Wed 30 Sep 2026 03:35:40 +0000 Files and hashes: 1: KyraxZ7M9jhPxeNj8GfDueKemaE.crl (hash: SoIXHzgNs2255w0tCglPHyEAqxFskCHM4YYAAGW+6vU=) 2: 71B685ACF7E511EEBC67981CC4F9AE02.roa (hash: 7C5LGMzL2zjKUNkNMEtGgemGIueLgB4AcOZOxZnPsQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Validity Not Before: Sep 23 03:35:40 2026 GMT Not After : Sep 30 03:35:40 2026 GMT Subject: CN=6ab3490c-c25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:87:d4:9d:c8:8f:f4:b3:7f:69:8f:f8:f5:96: 69:63:4e:03:2a:54:50:b7:66:00:e3:a5:67:bd:af: 13:81:5b:49:1f:3c:5e:ef:ce:5a:b2:f2:d7:4a:c8: 27:14:00:b0:30:fc:5e:cf:1c:ae:30:ba:57:95:36: d9:09:8c:38:76:a4:81:56:ba:b6:09:b3:f9:78:dd: a1:0c:c2:39:18:5d:35:da:31:d2:3a:f5:c0:46:90: 7a:71:e1:fb:b4:dc:9c:c1:75:f8:23:0d:e9:05:9c: aa:3f:11:43:9f:07:82:cb:3c:aa:85:a5:19:3d:14: 8c:6f:26:a3:31:ac:36:5a:ad:29:62:83:36:62:29: 0e:b4:33:b9:fd:76:d2:47:2c:38:88:49:c4:0b:81: f4:7f:2d:75:ff:02:f3:9c:4e:60:75:ec:51:15:d1: 34:16:16:eb:2a:b1:b2:d4:13:76:bc:93:80:86:11: ae:c8:5d:35:5e:3f:61:f7:5a:29:b9:76:ea:68:3d: 17:ca:7f:bb:7b:8f:20:96:f5:54:30:2a:a5:65:4c: c6:ae:44:9d:fb:24:96:21:06:8c:3a:d3:e5:91:13: 94:30:00:c4:9e:7d:f2:c7:ea:c9:22:a5:e5:13:96: 0a:9b:08:be:a4:c3:2b:2f:39:e7:a0:a6:0d:8a:35: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D6:BC:54:B9:F3:66:F3:0E:20:A7:8F:F0:98:44:F0:DF:D6:1D:D5 X509v3 Authority Key Identifier: keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:21:d1:e9:14:6d:74:bc:2f:84:77:54:4b:52:35:50:65:3b: 88:b4:db:ab:9a:14:8e:35:e2:ac:49:b3:98:1d:d0:c2:da:ca: 84:c8:7f:cf:9a:9f:04:35:82:e8:fb:e0:3a:83:34:c3:49:14: 46:84:b3:9d:52:0a:b4:de:e5:cd:2f:dc:4d:29:23:80:a6:ae: a6:f7:70:26:a3:23:16:7b:93:9c:03:ad:c1:9f:e4:af:4a:f4: c7:07:34:54:ae:da:91:cb:a5:70:e8:49:e3:25:55:8b:c9:01: 3e:99:c9:38:92:84:ea:78:75:7d:59:5d:de:cd:0f:0f:6d:42: 0d:c6:4a:1c:d5:57:de:6b:bf:41:20:4f:6f:06:47:54:66:30: 7e:70:fb:1b:95:9e:3f:45:41:0d:63:dc:ac:20:ba:7c:d4:f1: f4:65:01:08:6e:8f:46:3c:5a:f7:60:01:6d:97:61:bd:ce:18: f3:5a:80:99:44:91:1e:95:01:fd:8c:55:57:cc:b3:49:3a:ac: ca:79:77:d1:88:8b:23:37:cb:11:6b:b2:53:cb:1f:c8:5e:4c: 77:36:cc:22:00:16:2a:5d:16:a0:6e:89:e0:39:c6:32:78:60: 63:cd:23:83:46:ff:67:91:a1:07:65:d1:b4:7f:9e:ff:dd:de: 93:85:c7:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKDJCMkFEQUM1OUVDQ0Y2Mzg0RkM1RTM2M0YwNjdDM0I5 RTI5RTk5QTEwHhcNMjYwOTIzMDMzNTQwWhcNMjYwOTMwMDMzNTQwWjAYMRYwFAYD VQQDEw02YWIzNDkwYy1jMjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34fUnciP9LN/aY/49ZZpY04DKlRQt2YA46Vnva8TgVtJHzxe785asvLXSsgn FACwMPxezxyuMLpXlTbZCYw4dqSBVrq2CbP5eN2hDMI5GF012jHSOvXARpB6ceH7 tNycwXX4Iw3pBZyqPxFDnweCyzyqhaUZPRSMbyajMaw2Wq0pYoM2YikOtDO5/XbS Ryw4iEnEC4H0fy11/wLznE5gdexRFdE0FhbrKrGy1BN2vJOAhhGuyF01Xj9h91op uXbqaD0Xyn+7e48glvVUMCqlZUzGrkSd+ySWIQaMOtPlkROUMADEnn3yx+rJIqXl E5YKmwi+pMMrLznnoKYNijXMPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfWvFS5 82bzDiCnj/CYRPDf1h3VMB8GA1UdIwQYMBaAFCsq2sWezPY4T8XjY/Bnw7ninpmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GRjk0RTcxMkY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlqaFB4ZU5qOEdmRHVlS2Vt YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t5cmF4WjdNOWpoUHhlTmo4R2ZEdWVLZW1hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GRjk0RTcxMkY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlq aFB4ZU5qOEdmRHVlS2VtYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiSHR6RRtdLwvhHdUS1I1UGU7iLTbq5oUjjXirEmzmB3QwtrKhMh/z5qfBDWC 6PvgOoM0w0kURoSznVIKtN7lzS/cTSkjgKaupvdwJqMjFnuTnAOtwZ/kr0r0xwc0 VK7akculcOhJ4yVVi8kBPpnJOJKE6nh1fVld3s0PD21CDcZKHNVX3mu/QSBPbwZH VGYwfnD7G5WeP0VBDWPcrCC6fNTx9GUBCG6PRjxa92ABbZdhvc4Y81qAmUSRHpUB /YxVV8yzSTqsynl30YiLIzfLEWuyU8sfyF5MdzbMIgAWKl0WoG6J4DnGMnhgY80j g0b/Z5GhB2XRtH+e/93ek4XHCw== -----END CERTIFICATE-----Generated at Thu Sep 24 03:23:02 2026 by rpki-client