$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft File: KyraxZ7M9jhPxeNj8GfDueKemaE.mft (raw, json) Hash identifier: H2iAqrwGuIcassCdKt558L7NzAMGVdPVlTzZ3SrBNJo= Subject key identifier: 7C:9D:07:49:B5:80:1E:09:36:7F:77:0A:2C:97:95:7A:6E:A6:86:BF Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft Manifest number: FE Signing time: Sat 23 Aug 2025 05:15:59 +0000 Manifest this update: Sat 23 Aug 2025 05:15:58 +0000 Manifest next update: Sat 30 Aug 2025 05:15:58 +0000 Files and hashes: 1: KyraxZ7M9jhPxeNj8GfDueKemaE.crl (hash: 2Ad/O8fHl935NlSw9R/rAEPHSR3cDzARW5IYyleICds=) 2: 71B685ACF7E511EEBC67981CC4F9AE02.roa (hash: xS6KKVico6q7YAydoXRQP98J8XdPbnXHA9bQvEcQ3gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Validity Not Before: Aug 23 05:15:58 2025 GMT Not After : Aug 30 05:15:58 2025 GMT Subject: CN=68a94e8e-822f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:e9:ce:77:83:95:93:ce:01:7b:eb:39:0b: fc:fe:79:44:60:8f:c1:17:d9:ce:a5:09:c7:e1:c9: 5c:3c:e3:3a:d1:da:fe:1a:45:90:55:3a:39:19:bc: 5f:d2:9b:c1:cb:81:67:e7:b3:5f:78:0a:dd:a6:8e: 92:0c:d4:19:fe:88:1b:6d:0e:f9:a3:e4:ec:54:7e: 32:c1:62:55:37:7c:cd:f0:3a:85:ea:f4:a3:20:2b: 07:c9:35:1e:25:1a:d8:a4:03:be:89:f5:3e:86:55: 5d:a9:7f:18:d8:fd:06:b9:7a:b4:e6:5b:32:d1:a6: c0:3c:7f:87:ed:1f:d2:35:06:9c:2c:b6:35:31:79: e1:fb:d2:e2:6f:2d:ba:fd:90:50:46:ed:72:e2:4f: fc:a8:3f:7d:7c:db:2a:7b:c9:d7:74:8d:cf:75:6f: dc:dd:78:02:ec:ad:db:97:77:9c:f0:47:23:32:7f: 71:c6:97:f5:a9:62:31:b4:77:14:98:58:1f:78:92: 1d:18:4c:43:bd:20:45:8a:0c:90:40:b7:ba:0f:8e: 43:2a:63:a3:b8:2a:0d:31:d2:b2:75:e9:f0:64:a8: 94:3b:c7:79:63:83:68:01:e7:59:7e:81:5f:87:b2: 9a:72:56:c5:c7:75:b4:25:6f:90:bb:fa:da:b4:14: 2d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9D:07:49:B5:80:1E:09:36:7F:77:0A:2C:97:95:7A:6E:A6:86:BF X509v3 Authority Key Identifier: keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ce:fd:9d:36:e7:6f:44:0d:b5:8a:de:aa:d0:78:4c:8e:33: 64:6d:ec:24:c4:3e:cf:ed:83:36:7e:93:fa:cc:d4:24:8c:7f: 46:35:83:1e:fc:23:ba:ba:b2:0f:da:2a:ae:73:d4:32:4f:f6: e0:b3:0a:18:4c:af:a2:6f:72:e1:40:f2:a1:dd:ce:0e:7c:87: 85:56:ea:d3:10:bf:68:df:d8:0e:3b:91:da:63:6b:ba:69:8e: 6e:3c:aa:fe:c8:f5:53:c4:8b:25:af:c0:cf:05:5a:77:84:33: 78:58:14:bd:68:e9:c0:a5:63:1e:6b:f0:3e:f6:9e:2d:0e:bd: 74:88:a6:b1:92:5c:26:9e:ab:ed:7c:91:ed:c6:f1:94:c0:60: 4d:19:00:ea:4b:ac:93:05:d4:01:10:db:5d:05:a1:02:da:2c: 1b:59:02:1f:cd:5b:24:10:11:61:22:d8:d0:c8:53:9a:20:dd: 36:37:68:ef:a7:a8:04:23:e0:05:dd:0a:4b:b2:95:d3:5c:30: 3e:2e:ab:25:d3:ea:57:53:35:07:04:25:9b:7a:94:a2:e0:b7: a7:53:c9:04:76:ed:63:0f:92:f5:1b:4c:04:af:33:b5:f2:59: ad:f2:f3:07:4b:63:81:d7:74:9d:dd:18:73:3a:13:a7:a8:66: 30:6c:4d:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKDJCMkFEQUM1OUVDQ0Y2Mzg0RkM1RTM2M0YwNjdDM0I5 RTI5RTk5QTEwHhcNMjUwODIzMDUxNTU4WhcNMjUwODMwMDUxNTU4WjAYMRYwFAYD VQQDEw02OGE5NGU4ZS04MjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhTpzneDlZPOAXvrOQv8/nlEYI/BF9nOpQnH4clcPOM60dr+GkWQVTo5Gbxf 0pvBy4Fn57NfeArdpo6SDNQZ/ogbbQ75o+TsVH4ywWJVN3zN8DqF6vSjICsHyTUe JRrYpAO+ifU+hlVdqX8Y2P0GuXq05lsy0abAPH+H7R/SNQacLLY1MXnh+9Liby26 /ZBQRu1y4k/8qD99fNsqe8nXdI3PdW/c3XgC7K3bl3ec8EcjMn9xxpf1qWIxtHcU mFgfeJIdGExDvSBFigyQQLe6D45DKmOjuCoNMdKydenwZKiUO8d5Y4NoAedZfoFf h7KaclbFx3W0JW+Qu/ratBQtVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHydB0m1 gB4JNn93CiyXlXpupoa/MB8GA1UdIwQYMBaAFCsq2sWezPY4T8XjY/Bnw7ninpmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GRjk0RTcxMkY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlqaFB4ZU5qOEdmRHVlS2Vt YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t5cmF4WjdNOWpoUHhlTmo4R2ZEdWVLZW1hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GRjk0RTcxMkY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlq aFB4ZU5qOEdmRHVlS2VtYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFzv2dNudvRA21it6q0HhMjjNkbewkxD7P7YM2fpP6zNQkjH9GNYMe /CO6urIP2iquc9QyT/bgswoYTK+ib3LhQPKh3c4OfIeFVurTEL9o39gOO5HaY2u6 aY5uPKr+yPVTxIslr8DPBVp3hDN4WBS9aOnApWMea/A+9p4tDr10iKaxklwmnqvt fJHtxvGUwGBNGQDqS6yTBdQBENtdBaEC2iwbWQIfzVskEBFhItjQyFOaIN02N2jv p6gEI+AF3QpLspXTXDA+Lqsl0+pXUzUHBCWbepSi4LenU8kEdu1jD5L1G0wErzO1 8lmt8vMHS2OB13Sd3RhzOhOnqGYwbE3i -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:07 2025 by rpki-client