$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft File: KyraxZ7M9jhPxeNj8GfDueKemaE.mft (raw, json) Hash identifier: qv8wcDP4iyDI4ktxoTlo3ldMqJFdCxCxG/Mrq5kFmhI= Subject key identifier: A5:EC:15:CD:24:85:C7:C4:9B:78:79:F2:2F:9F:F4:33:E7:FA:C6:2B Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft Manifest number: 0187 Signing time: Wed 13 May 2026 04:32:41 +0000 Manifest this update: Wed 13 May 2026 04:32:40 +0000 Manifest next update: Wed 20 May 2026 04:32:40 +0000 Files and hashes: 1: KyraxZ7M9jhPxeNj8GfDueKemaE.crl (hash: LewadHSlvFDv7lJtybpTbjmX+nawTWIM3tjRZFYoGHg=) 2: 71B685ACF7E511EEBC67981CC4F9AE02.roa (hash: RaGY6FAZxGZDZsSuof8rmTq3skc2lNTAnKA5LtFgVgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Validity Not Before: May 13 04:32:40 2026 GMT Not After : May 20 04:32:40 2026 GMT Subject: CN=6a03fee9-1a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:d3:7f:51:70:fa:51:84:34:a1:dd:24:22: 2c:f1:c2:fd:b9:dc:ac:cf:77:8e:dd:4f:5d:9f:36: 1a:03:88:7f:46:fd:b8:af:1f:2f:49:ba:f9:77:07: e9:24:1b:ab:4b:b3:2b:25:02:bc:6e:e3:e5:09:e9: 68:bf:9e:34:7e:60:e9:53:8e:e1:d8:f2:2f:74:d8: b1:85:75:19:ea:d9:9e:45:f0:2c:5a:96:ae:ef:bf: cb:6a:93:61:b9:69:c2:90:ad:2e:a2:34:8c:20:97: 5a:a5:15:21:91:a0:69:24:cf:d5:0d:2d:da:a4:2d: 22:ed:ed:f8:96:b6:79:89:8b:c4:c0:6c:2a:8f:91: 27:6e:80:54:4b:86:ee:46:87:dd:81:5a:20:f7:c5: a5:a5:46:7b:a1:71:30:7e:e0:1a:a3:48:c0:09:45: 42:ac:f9:92:7d:59:9a:c3:b9:ae:49:35:d1:0d:a3: 43:47:c1:5c:ce:b9:a5:92:f7:cc:cb:93:9f:f2:15: f1:2a:a4:80:39:4e:69:1f:17:17:fb:cf:bf:51:ee: ca:34:d0:af:61:db:09:56:fd:60:71:5b:c0:9d:dc: ed:cf:1e:46:e1:9b:fc:f1:af:99:cb:34:75:61:88: 3d:3e:01:85:2c:b1:e8:1f:36:e7:b4:ae:aa:d0:d2: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EC:15:CD:24:85:C7:C4:9B:78:79:F2:2F:9F:F4:33:E7:FA:C6:2B X509v3 Authority Key Identifier: keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:84:ab:43:1a:b8:03:93:bc:4e:9c:b8:34:61:1b:a4:84:95: a4:e3:1c:62:3f:e8:eb:e1:53:62:f6:26:c5:e2:59:5e:52:23: 80:00:0d:8d:42:f4:05:21:2f:db:76:e6:2b:b4:b7:64:70:72: f2:5b:74:0a:77:91:d8:ff:10:71:db:e5:47:41:21:d1:e8:5f: bf:48:28:5d:02:3d:6a:84:6f:96:5e:a4:87:40:33:52:45:60: cd:7b:1d:6c:04:99:a2:52:8a:4f:06:71:c8:35:ab:00:29:62: c1:bf:40:44:4d:9b:35:32:fa:3f:26:20:9f:da:92:ce:56:a3: ad:64:47:39:2d:ec:46:c3:5c:af:f9:69:47:43:ae:4f:a9:2a: 8a:87:75:b0:2c:2d:f5:09:e5:eb:dd:5e:c6:17:4a:a5:9c:74: b8:a7:c0:a7:ae:70:8c:a2:bb:fd:c0:a3:30:30:f1:4f:78:bd: 5d:6f:db:bd:aa:2f:da:d9:38:0c:58:eb:4f:fc:6a:0c:fc:0b: 30:07:e3:70:62:f6:e2:b6:e6:0d:ce:18:7b:ab:d9:b4:31:c3: f9:4d:5c:04:81:4d:0c:33:97:59:35:7e:6d:96:ce:0f:d9:df: 9f:99:a8:4d:56:1e:35:c3:3f:61:00:40:7a:bd:39:e4:06:2b: 19:53:06:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKDJCMkFEQUM1OUVDQ0Y2Mzg0RkM1RTM2M0YwNjdDM0I5 RTI5RTk5QTEwHhcNMjYwNTEzMDQzMjQwWhcNMjYwNTIwMDQzMjQwWjAYMRYwFAYD VQQDEw02YTAzZmVlOS0xYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6zTf1Fw+lGENKHdJCIs8cL9udysz3eO3U9dnzYaA4h/Rv24rx8vSbr5dwfp JBurS7MrJQK8buPlCelov540fmDpU47h2PIvdNixhXUZ6tmeRfAsWpau77/LapNh uWnCkK0uojSMIJdapRUhkaBpJM/VDS3apC0i7e34lrZ5iYvEwGwqj5EnboBUS4bu RofdgVog98WlpUZ7oXEwfuAao0jACUVCrPmSfVmaw7muSTXRDaNDR8FczrmlkvfM y5Of8hXxKqSAOU5pHxcX+8+/Ue7KNNCvYdsJVv1gcVvAndztzx5G4Zv88a+ZyzR1 YYg9PgGFLLHoHzbntK6q0NJKyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXsFc0k hcfEm3h58i+f9DPn+sYrMB8GA1UdIwQYMBaAFCsq2sWezPY4T8XjY/Bnw7ninpmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GRjk0RTcxMkY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlqaFB4ZU5qOEdmRHVlS2Vt YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t5cmF4WjdNOWpoUHhlTmo4R2ZEdWVLZW1hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GRjk0RTcxMkY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlq aFB4ZU5qOEdmRHVlS2VtYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIYSrQxq4A5O8Tpy4NGEbpISVpOMcYj/o6+FTYvYmxeJZXlIjgAANjUL0BSEv 23bmK7S3ZHBy8lt0CneR2P8QcdvlR0Eh0ehfv0goXQI9aoRvll6kh0AzUkVgzXsd bASZolKKTwZxyDWrACliwb9ARE2bNTL6PyYgn9qSzlajrWRHOS3sRsNcr/lpR0Ou T6kqiod1sCwt9Qnl691exhdKpZx0uKfAp65wjKK7/cCjMDDxT3i9XW/bvaov2tk4 DFjrT/xqDPwLMAfjcGL24rbmDc4Ye6vZtDHD+U1cBIFNDDOXWTV+bZbOD9nfn5mo TVYeNcM/YQBAer055AYrGVMGsQ== -----END CERTIFICATE-----Generated at Wed May 13 08:15:04 2026 by rpki-client