$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft File: KyraxZ7M9jhPxeNj8GfDueKemaE.mft (raw, json) Hash identifier: UhAD73hHdj/xYokegA+Id/GVkRc9mQJUa9pPn7hKWYw= Subject key identifier: 5A:E9:F4:36:B3:C8:8E:A7:50:0B:47:77:F4:70:DA:A3:AE:74:1B:E6 Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft Manifest number: 01AA Signing time: Thu 23 Jul 2026 05:29:16 +0000 Manifest this update: Thu 23 Jul 2026 05:29:15 +0000 Manifest next update: Thu 30 Jul 2026 05:29:15 +0000 Files and hashes: 1: KyraxZ7M9jhPxeNj8GfDueKemaE.crl (hash: 4Qlcrqd8ea1UOtmq71SxUti0D6xE123jsKO1fZcoDbI=) 2: 71B685ACF7E511EEBC67981CC4F9AE02.roa (hash: RaGY6FAZxGZDZsSuof8rmTq3skc2lNTAnKA5LtFgVgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Validity Not Before: Jul 23 05:29:15 2026 GMT Not After : Jul 30 05:29:15 2026 GMT Subject: CN=6a61a6ac-a193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:22:54:1e:63:19:c6:48:15:92:fb:9b:c3: 4a:8b:a4:1b:cc:e7:f5:ad:0d:16:8b:da:c9:b5:1f: c7:6d:69:36:d1:31:71:96:7b:e6:94:e2:b0:e1:34: 39:ba:57:9e:8d:6e:ef:ba:72:2c:f6:3f:86:62:a3: 84:d1:12:6f:55:f1:d3:c5:39:08:9b:92:98:22:39: fc:60:66:3f:e5:c4:b5:e4:0b:9f:c6:0e:d4:57:2a: a2:92:3f:36:5c:3e:f5:b5:9e:85:af:c5:88:f4:08: 58:95:de:c2:f2:a0:88:f3:35:37:37:1e:bf:b2:25: 7a:18:bb:ee:3c:3e:82:47:99:6b:e0:6e:40:79:01: 01:87:c5:e9:da:05:d6:2b:9c:8d:66:02:81:f3:be: a5:dd:99:ca:9d:c4:99:7a:6e:cd:94:3e:66:a2:d5: 2f:4b:56:45:e8:58:bc:ff:06:0c:1b:50:15:bc:b2: 66:ee:ab:4e:19:25:c6:5e:aa:0b:1b:ac:d6:45:01: 26:06:4f:f1:e7:eb:c0:2f:bc:29:39:12:7e:d4:06: d3:41:97:cd:49:8e:b8:d7:1f:1b:82:74:e8:b1:91: f6:c7:b4:29:cc:42:39:d6:2b:e8:20:3a:92:aa:d7: 18:a8:44:dd:35:f3:70:e2:ef:00:e5:40:93:21:3c: ed:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E9:F4:36:B3:C8:8E:A7:50:0B:47:77:F4:70:DA:A3:AE:74:1B:E6 X509v3 Authority Key Identifier: keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:84:a6:60:f8:da:85:ad:87:87:76:59:6e:16:26:da:9c:60: 28:0e:39:ff:7f:6f:3b:34:5e:a5:da:41:2c:5f:bb:90:d7:c6: 0f:12:55:1a:7c:40:fe:59:40:90:93:a0:6b:bc:85:b1:a3:7d: d7:3d:2e:bb:5d:26:31:de:65:f7:ea:31:6a:6b:a2:67:66:15: 5f:f3:0e:12:a0:17:63:38:75:ff:ab:1d:5c:9a:a9:6e:a5:fa: 28:3b:0a:bb:59:d0:59:d9:67:a6:06:16:1c:b5:4c:30:9f:a4: 93:9a:6b:40:9a:1b:c4:57:0d:e4:84:42:2a:74:f3:1b:8b:03: 3c:cd:eb:37:a3:73:46:c8:a8:dd:e2:03:ed:6b:2e:57:aa:d8: ee:e9:a3:b7:21:ff:af:6e:54:ef:fb:c2:52:f0:93:10:7f:5f: 01:df:b7:5b:20:58:ab:66:f2:ee:8b:f3:af:88:6e:cc:f0:86: b9:80:ca:f2:10:5f:d3:da:1c:a9:b1:fa:33:4c:58:ad:8a:b9: 69:78:3a:44:87:c2:65:e5:11:cc:ed:9c:c5:3f:42:a7:07:be: b7:ad:30:a1:c7:28:e7:5e:fd:33:dd:13:da:9c:af:fc:ed:46: 68:89:7b:b6:07:31:4e:c8:62:d6:ae:cd:d9:a9:5e:fc:d2:72: 93:8d:e5:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKDJCMkFEQUM1OUVDQ0Y2Mzg0RkM1RTM2M0YwNjdDM0I5 RTI5RTk5QTEwHhcNMjYwNzIzMDUyOTE1WhcNMjYwNzMwMDUyOTE1WjAYMRYwFAYD VQQDEw02YTYxYTZhYy1hMTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFEiVB5jGcZIFZL7m8NKi6QbzOf1rQ0Wi9rJtR/HbWk20TFxlnvmlOKw4TQ5 uleejW7vunIs9j+GYqOE0RJvVfHTxTkIm5KYIjn8YGY/5cS15Aufxg7UVyqikj82 XD71tZ6Fr8WI9AhYld7C8qCI8zU3Nx6/siV6GLvuPD6CR5lr4G5AeQEBh8Xp2gXW K5yNZgKB876l3ZnKncSZem7NlD5motUvS1ZF6Fi8/wYMG1AVvLJm7qtOGSXGXqoL G6zWRQEmBk/x5+vAL7wpORJ+1AbTQZfNSY641x8bgnTosZH2x7QpzEI51ivoIDqS qtcYqETdNfNw4u8A5UCTITzttwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrp9Daz yI6nUAtHd/Rw2qOudBvmMB8GA1UdIwQYMBaAFCsq2sWezPY4T8XjY/Bnw7ninpmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GRjk0RTcxMkY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlqaFB4ZU5qOEdmRHVlS2Vt YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t5cmF4WjdNOWpoUHhlTmo4R2ZEdWVLZW1hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GRjk0RTcxMkY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlq aFB4ZU5qOEdmRHVlS2VtYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEISmYPjaha2Hh3ZZbhYm2pxgKA45/39vOzRepdpBLF+7kNfGDxJVGnxA/llA kJOga7yFsaN91z0uu10mMd5l9+oxamuiZ2YVX/MOEqAXYzh1/6sdXJqpbqX6KDsK u1nQWdlnpgYWHLVMMJ+kk5prQJobxFcN5IRCKnTzG4sDPM3rN6NzRsio3eID7Wsu V6rY7umjtyH/r25U7/vCUvCTEH9fAd+3WyBYq2by7ovzr4huzPCGuYDK8hBf09oc qbH6M0xYrYq5aXg6RIfCZeURzO2cxT9Cpwe+t60wocco5179M90T2pyv/O1GaIl7 tgcxTshi1q7N2ale/NJyk43lBA== -----END CERTIFICATE-----Generated at Fri Jul 24 10:09:55 2026 by rpki-client