$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft File: KyraxZ7M9jhPxeNj8GfDueKemaE.mft (raw, json) Hash identifier: 7lidBacm8zfNIDr4UQCmox8nhplcJ+7zOLMmhzNtPRE= Subject key identifier: 39:F3:1C:54:79:86:A6:F4:DC:74:75:51:D0:A4:24:1F:99:BF:44:39 Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft Manifest number: E4 Signing time: Thu 03 Jul 2025 05:35:53 +0000 Manifest this update: Thu 03 Jul 2025 05:35:53 +0000 Manifest next update: Thu 10 Jul 2025 05:35:53 +0000 Files and hashes: 1: KyraxZ7M9jhPxeNj8GfDueKemaE.crl (hash: q1J5rfzgeYj9qmKy6NWtXGNmf7fQmZ92LYiaGgVf8MM=) 2: 71B685ACF7E511EEBC67981CC4F9AE02.roa (hash: xS6KKVico6q7YAydoXRQP98J8XdPbnXHA9bQvEcQ3gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Validity Not Before: Jul 3 05:35:53 2025 GMT Not After : Jul 10 05:35:53 2025 GMT Subject: CN=686616b9-a705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:9c:1d:6f:95:dc:5d:31:c2:cc:89:1e:8a: 93:c7:5d:1a:46:5c:a1:70:df:58:b9:65:0d:3f:ba: 75:0e:37:4c:82:ef:e2:69:79:17:8c:f3:56:07:16: 67:94:7d:91:89:36:2b:c2:2c:eb:62:bd:45:6f:64: c7:2b:e1:3d:ba:71:64:b0:35:63:9b:09:6f:7e:71: fe:28:31:8e:9f:15:cc:ff:49:97:69:bd:dc:80:53: 5f:7b:f5:e4:f2:83:82:fa:94:86:a3:83:91:91:e5: 33:c0:33:c0:53:f5:fe:ff:64:d5:c4:cd:0f:b6:0f: 22:79:ae:b3:dd:9f:d2:d2:0a:19:d4:92:df:07:4e: 3a:03:3f:23:20:69:28:4f:2b:ac:f4:e1:eb:04:ca: 89:48:11:6e:07:70:8b:b7:02:3a:2e:4c:97:95:ab: b0:9a:85:9f:2f:ba:9e:e6:32:4b:02:f7:40:a0:e1: e9:d1:02:f5:9a:27:e4:14:03:36:5c:2e:21:cf:d1: 6b:80:74:8f:f0:af:fc:54:97:d4:3c:71:e2:59:4d: d1:18:6d:f3:ed:b1:34:3b:7d:ad:d8:3c:78:6b:7e: b6:6d:90:8d:20:d5:86:52:22:ee:c6:b3:a4:64:42: 12:cd:60:53:a3:9c:52:08:f3:eb:57:51:66:38:55: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F3:1C:54:79:86:A6:F4:DC:74:75:51:D0:A4:24:1F:99:BF:44:39 X509v3 Authority Key Identifier: keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:35:4c:dd:be:50:fb:6c:af:1d:6c:f8:3f:a6:fd:cc:9a:8d: 8b:3a:cc:6e:7b:5c:1d:1e:ea:ea:32:0b:ca:c0:43:c2:e3:a9: 08:55:9b:7e:6c:a1:31:71:c3:78:18:22:14:5a:50:76:75:02: fd:db:a6:e7:03:14:ad:2e:38:8d:7e:c6:59:5b:1c:89:b0:6f: 33:42:14:41:a6:ba:c4:9b:27:d1:00:9a:3b:46:9b:2c:35:f6: d2:b6:7c:04:92:e2:f7:54:f8:da:b8:53:21:54:23:de:71:44: 63:d6:d8:40:6b:01:6d:8d:fd:f0:17:77:0f:cb:3f:f8:b9:0c: 0f:92:98:0d:34:6b:65:7a:12:5e:c3:40:67:28:0e:56:47:7b: d2:4b:02:48:c5:16:ad:63:f7:20:1a:a4:54:f4:3e:99:99:a6: f4:4e:c2:7c:7b:7c:e2:28:64:97:82:88:6b:89:34:a2:82:0a: ae:1d:21:79:79:a4:c2:40:53:16:44:f4:10:b4:64:9c:51:57: 47:22:db:20:c8:4f:17:a9:d1:b0:f7:75:0b:ac:10:ed:cf:4f: de:c3:f5:d2:e9:51:6e:16:6b:ce:17:05:f1:6f:33:ec:2f:92: a0:8e:06:dd:3c:62:ec:36:b4:0e:70:e4:be:74:37:87:f7:6d: 85:0a:92:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKDJCMkFEQUM1OUVDQ0Y2Mzg0RkM1RTM2M0YwNjdDM0I5 RTI5RTk5QTEwHhcNMjUwNzAzMDUzNTUzWhcNMjUwNzEwMDUzNTUzWjAYMRYwFAYD VQQDEw02ODY2MTZiOS1hNzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdScHW+V3F0xwsyJHoqTx10aRlyhcN9YuWUNP7p1DjdMgu/iaXkXjPNWBxZn lH2RiTYrwizrYr1Fb2THK+E9unFksDVjmwlvfnH+KDGOnxXM/0mXab3cgFNfe/Xk 8oOC+pSGo4ORkeUzwDPAU/X+/2TVxM0Ptg8iea6z3Z/S0goZ1JLfB046Az8jIGko Tyus9OHrBMqJSBFuB3CLtwI6LkyXlauwmoWfL7qe5jJLAvdAoOHp0QL1mifkFAM2 XC4hz9FrgHSP8K/8VJfUPHHiWU3RGG3z7bE0O32t2Dx4a362bZCNINWGUiLuxrOk ZEISzWBTo5xSCPPrV1FmOFUjiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnzHFR5 hqb03HR1UdCkJB+Zv0Q5MB8GA1UdIwQYMBaAFCsq2sWezPY4T8XjY/Bnw7ninpmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GRjk0RTcxMkY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlqaFB4ZU5qOEdmRHVlS2Vt YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t5cmF4WjdNOWpoUHhlTmo4R2ZEdWVLZW1hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GRjk0RTcxMkY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlq aFB4ZU5qOEdmRHVlS2VtYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9NUzdvlD7bK8dbPg/pv3Mmo2LOsxue1wdHurqMgvKwEPC46kIVZt+ bKExccN4GCIUWlB2dQL926bnAxStLjiNfsZZWxyJsG8zQhRBprrEmyfRAJo7Rpss NfbStnwEkuL3VPjauFMhVCPecURj1thAawFtjf3wF3cPyz/4uQwPkpgNNGtlehJe w0BnKA5WR3vSSwJIxRatY/cgGqRU9D6Zmab0TsJ8e3ziKGSXgohriTSiggquHSF5 eaTCQFMWRPQQtGScUVdHItsgyE8XqdGw93ULrBDtz0/ew/XS6VFuFmvOFwXxbzPs L5KgjgbdPGLsNrQOcOS+dDeH922FCpJw -----END CERTIFICATE-----Generated at Thu Jul 3 14:17:07 2025 by rpki-client