
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft
File: KyraxZ7M9jhPxeNj8GfDueKemaE.mft (raw, json)
Hash identifier: YOSs20Gjo1s2lgliSIxIrOqeFgM1tOidNckE5LKIzbs=
Subject key identifier: 27:37:38:47:2A:AD:F1:1C:07:0E:49:B2:82:99:33:B1:FF:C6:67:2D
Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1
Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft
Manifest number: 01CE
Signing time: Sun 27 Sep 2026 04:07:40 +0000
Manifest this update: Sun 27 Sep 2026 04:07:40 +0000
Manifest next update: Sun 04 Oct 2026 04:07:40 +0000
Files and hashes: 1: KyraxZ7M9jhPxeNj8GfDueKemaE.crl (hash: 6dgvlGwdbN0Iku1Qrhb0QM9giBkaBksk8SOSQccv1Fs=)
2: 71B685ACF7E511EEBC67981CC4F9AE02.roa (hash: 7C5LGMzL2zjKUNkNMEtGgemGIueLgB4AcOZOxZnPsQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl
rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A469, serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1
Validity
Not Before: Sep 27 04:07:40 2026 GMT
Not After : Oct 4 04:07:40 2026 GMT
Subject: CN=6ab8968c-5004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:f5:a5:fc:dd:53:78:49:cd:3c:c1:bb:80:
9f:23:21:01:22:fc:09:cf:4b:b7:9d:03:55:5a:1b:
e1:a9:b5:3c:06:40:ee:4e:bd:00:7e:c0:1c:bb:36:
9f:8f:3f:82:02:3f:9c:cb:90:7d:dd:0f:46:82:37:
cc:40:02:76:c1:d4:8e:56:f3:81:d6:52:f1:41:cb:
88:62:db:df:b7:90:c0:83:c6:76:07:6b:ae:2f:11:
7c:b6:0d:72:ab:f1:80:a1:04:f6:7f:7d:dc:c3:6d:
e5:c1:61:67:27:84:cd:cd:3a:2c:b1:21:da:99:aa:
e3:4b:3b:70:10:31:20:fb:bd:13:46:0f:0c:ad:b5:
85:23:9e:2b:4c:cf:a1:b8:03:48:d4:25:78:fb:c6:
d6:6d:21:63:cd:ae:f4:81:ec:9c:bf:1b:04:dd:6e:
b2:b7:cc:c2:9a:21:28:4b:7d:9a:67:e7:dc:da:74:
93:a5:69:03:6f:dd:21:77:61:7c:34:64:13:05:b8:
fe:b3:ec:de:23:cf:f3:17:d8:af:35:65:13:c4:50:
12:74:25:88:77:f1:df:7a:e3:9c:bb:15:1d:e3:bd:
66:0c:04:1e:1d:a9:c8:df:f0:47:1b:63:90:60:46:
17:67:74:e9:04:ea:45:28:ab:34:9b:33:9b:1c:75:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:37:38:47:2A:AD:F1:1C:07:0E:49:B2:82:99:33:B1:FF:C6:67:2D
X509v3 Authority Key Identifier:
keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:3a:4f:5c:f5:65:0b:62:74:2d:5e:6c:f2:0f:03:41:53:c5:
a6:2c:d3:1b:e0:0b:a1:3c:9e:68:f1:46:a8:d0:c1:7c:40:8a:
dc:3c:60:f3:1f:5f:f8:de:a6:1a:2b:72:31:a4:1e:6f:5f:06:
67:43:d4:ee:78:26:48:aa:7d:c5:93:2c:7c:a8:f0:f2:c7:05:
da:15:a2:4e:4a:96:15:cb:6c:9f:68:d2:be:7e:6a:fa:71:9d:
12:00:de:85:3f:85:6b:31:31:25:6f:f5:4a:77:67:27:17:5b:
d8:34:bd:0d:da:e5:3a:35:36:78:dc:e3:31:46:a0:b6:42:f1:
04:54:cc:5a:b4:bf:a6:4b:35:5d:c6:c9:36:b9:58:d8:6a:ee:
42:92:e0:b0:9d:52:4b:34:f2:4b:2c:74:9f:fa:6e:79:d4:8e:
26:3b:c1:1d:c6:56:d6:c7:cb:a4:3c:1a:a5:8d:a1:71:af:ee:
e7:5c:c4:cd:c9:c8:ee:36:00:b6:38:f8:66:84:ba:de:ac:c4:
f3:03:77:53:e3:37:17:af:6a:bf:c6:ac:1b:cb:39:6f:fd:e4:
98:24:6b:58:dc:bf:5a:40:97:c0:b7:66:15:7f:4d:ca:18:9d:
fd:27:da:87:9f:6d:69:36:3a:d7:ea:1b:42:ab:fb:7a:be:78:
12:a4:e7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:24:50 2026 by rpki-client