$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft File: KyraxZ7M9jhPxeNj8GfDueKemaE.mft (raw, json) Hash identifier: ciPh9nz59Bnl+c+57TjseU7bHp5RRLIUIlvk9ohRmI8= Subject key identifier: 45:52:A3:E0:37:04:5A:33:F8:3B:FB:F0:45:23:0B:51:3D:99:01:A2 Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft Manifest number: CC Signing time: Thu 15 May 2025 05:01:54 +0000 Manifest this update: Thu 15 May 2025 05:01:54 +0000 Manifest next update: Thu 22 May 2025 05:01:54 +0000 Files and hashes: 1: KyraxZ7M9jhPxeNj8GfDueKemaE.crl (hash: x7PgcwzRJiBnpRDtgWpN4srrZT9RKSgKpfaCT9tK7Xk=) 2: 71B685ACF7E511EEBC67981CC4F9AE02.roa (hash: xS6KKVico6q7YAydoXRQP98J8XdPbnXHA9bQvEcQ3gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Validity Not Before: May 15 05:01:54 2025 GMT Not After : May 22 05:01:54 2025 GMT Subject: CN=68257542-80e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:2f:40:29:02:68:3c:e2:25:be:09:ea:e4: 57:21:fe:a3:5b:cc:e1:9f:67:4c:2d:4f:2c:f5:10: 09:72:6d:50:6b:da:84:ee:79:fe:48:c3:f5:49:f8: bc:07:93:72:e8:d0:ad:7c:09:43:f9:9e:1d:7b:ae: bd:e2:b8:b7:b8:7b:ae:b7:f5:1a:0a:f1:1f:2c:60: 4e:88:c3:42:5a:1a:c3:4c:0e:bd:21:5f:75:ab:3b: 4b:54:aa:14:bf:a7:50:8b:ba:17:84:da:14:4d:ec: 93:61:3d:b9:f0:44:bd:97:1d:a8:a5:e9:6a:05:e3: 44:d7:71:2a:94:ed:06:89:6c:34:09:3b:f1:b2:ab: b3:cc:d3:00:87:5f:a9:ef:f9:2b:11:12:89:12:94: 33:53:e4:48:8c:ad:42:ad:56:a1:4a:63:e2:7c:d4: c0:33:22:d0:77:20:b5:49:51:f7:31:dd:fe:69:5f: e8:0a:9d:d1:11:42:42:5c:b0:5c:e9:dd:82:43:68: a6:ec:a2:b4:f1:e4:dc:4a:88:83:55:bf:d9:2b:2b: 2e:92:4c:7c:43:13:f8:25:0d:16:25:25:b8:42:df: 3c:d1:f9:67:cf:b7:73:cd:25:6f:90:51:90:e0:76: fe:ed:f2:81:7c:a6:00:85:9f:34:f0:39:50:bb:40: a5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:52:A3:E0:37:04:5A:33:F8:3B:FB:F0:45:23:0B:51:3D:99:01:A2 X509v3 Authority Key Identifier: keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:d2:7b:fc:13:d1:80:53:84:ee:12:3d:73:3e:7a:b6:9a:24: 44:fc:d5:65:5c:8b:75:61:e3:58:44:d5:3f:a8:5a:dd:c8:11: c9:5f:18:95:66:3f:6a:78:de:29:6f:64:54:f5:2b:e4:a4:08: be:a2:a1:09:3b:e7:b3:f6:05:74:00:d8:4f:8e:9b:11:17:b3: fe:16:5c:3f:32:c5:13:e2:9d:35:f9:57:d3:af:90:0e:20:ac: 8c:2f:4e:d1:4d:54:6c:b3:48:5f:83:d9:98:d8:ea:99:a8:de: 10:1a:5c:50:2e:25:47:18:7c:8c:69:57:64:2e:1e:b3:e8:e1: 19:83:57:d7:0e:7b:eb:b2:9d:c5:6a:f1:3d:71:a5:73:90:9a: ff:f9:66:de:98:a4:0a:53:b7:3a:c0:c6:4c:8e:0d:1a:62:03: 31:77:9e:63:42:6f:87:86:79:42:98:14:fa:90:e5:39:bc:56: 58:3d:1e:a5:48:cb:08:e7:2a:03:70:ff:e1:8c:61:54:19:4f: 97:52:38:42:18:27:b6:9f:21:6a:c3:ce:a2:99:6c:06:70:15: 3a:d1:ea:4b:35:4a:d7:e0:a4:1a:31:4e:a4:9e:97:49:bf:f0: 9e:b2:62:f3:83:a2:68:92:bf:47:14:15:06:a0:31:f3:af:bb: 20:4d:d8:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKDJCMkFEQUM1OUVDQ0Y2Mzg0RkM1RTM2M0YwNjdDM0I5 RTI5RTk5QTEwHhcNMjUwNTE1MDUwMTU0WhcNMjUwNTIyMDUwMTU0WjAYMRYwFAYD VQQDEw02ODI1NzU0Mi04MGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrUvQCkCaDziJb4J6uRXIf6jW8zhn2dMLU8s9RAJcm1Qa9qE7nn+SMP1Sfi8 B5Ny6NCtfAlD+Z4de6694ri3uHuut/UaCvEfLGBOiMNCWhrDTA69IV91qztLVKoU v6dQi7oXhNoUTeyTYT258ES9lx2opelqBeNE13EqlO0GiWw0CTvxsquzzNMAh1+p 7/krERKJEpQzU+RIjK1CrVahSmPifNTAMyLQdyC1SVH3Md3+aV/oCp3REUJCXLBc 6d2CQ2im7KK08eTcSoiDVb/ZKysukkx8QxP4JQ0WJSW4Qt880flnz7dzzSVvkFGQ 4Hb+7fKBfKYAhZ808DlQu0CljwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVSo+A3 BFoz+Dv78EUjC1E9mQGiMB8GA1UdIwQYMBaAFCsq2sWezPY4T8XjY/Bnw7ninpmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GRjk0RTcxMkY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlqaFB4ZU5qOEdmRHVlS2Vt YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t5cmF4WjdNOWpoUHhlTmo4R2ZEdWVLZW1hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GRjk0RTcxMkY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlq aFB4ZU5qOEdmRHVlS2VtYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI0nv8E9GAU4TuEj1zPnq2miRE/NVlXIt1YeNYRNU/qFrdyBHJXxiV Zj9qeN4pb2RU9SvkpAi+oqEJO+ez9gV0ANhPjpsRF7P+Flw/MsUT4p01+VfTr5AO IKyML07RTVRss0hfg9mY2OqZqN4QGlxQLiVHGHyMaVdkLh6z6OEZg1fXDnvrsp3F avE9caVzkJr/+WbemKQKU7c6wMZMjg0aYgMxd55jQm+HhnlCmBT6kOU5vFZYPR6l SMsI5yoDcP/hjGFUGU+XUjhCGCe2nyFqw86imWwGcBU60epLNUrX4KQaMU6knpdJ v/CesmLzg6Jokr9HFBUGoDHzr7sgTdg9 -----END CERTIFICATE-----Generated at Thu May 15 07:10:45 2025 by rpki-client