$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft File: KyraxZ7M9jhPxeNj8GfDueKemaE.mft (raw, json) Hash identifier: HPFUG04oXwmtm1foH2gP1Pw2hEP2XorO9dhZHaRQr7I= Subject key identifier: B9:73:30:07:20:98:82:89:46:D6:B2:88:7B:E5:FC:A7:34:9F:4B:FC Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft Manifest number: 01AC Signing time: Mon 27 Jul 2026 05:47:28 +0000 Manifest this update: Mon 27 Jul 2026 05:47:27 +0000 Manifest next update: Mon 03 Aug 2026 05:47:27 +0000 Files and hashes: 1: KyraxZ7M9jhPxeNj8GfDueKemaE.crl (hash: NfTgv8bf462ObcwkXDv5lfPh7rDuREoKnHNPkvO/Mnc=) 2: 71B685ACF7E511EEBC67981CC4F9AE02.roa (hash: RaGY6FAZxGZDZsSuof8rmTq3skc2lNTAnKA5LtFgVgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Validity Not Before: Jul 27 05:47:27 2026 GMT Not After : Aug 3 05:47:27 2026 GMT Subject: CN=6a66f0f0-3f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7e:3e:f7:61:b8:ff:99:ac:2e:56:f8:e7:b0: 01:4f:3f:5e:50:2a:d4:42:e5:f6:0a:5a:42:e5:8d: 5b:d6:68:a2:8e:cb:68:6d:31:51:6a:b5:bc:74:82: 2a:fe:a5:74:d9:10:0a:f3:a0:b4:de:0d:66:a6:92: c0:79:43:5f:f3:1b:1b:4c:05:b1:e6:34:ac:6f:02: 63:2f:02:65:52:5d:c5:03:6d:46:89:82:ad:e7:a6: e1:79:7a:23:57:f6:76:25:e8:b8:a7:c9:8f:6d:04: 5d:bd:9a:0c:07:c6:f5:06:2a:f1:a7:f0:11:d1:7e: 50:52:eb:be:0f:26:0b:77:25:a3:13:eb:89:7c:f8: 43:22:6a:05:93:9c:c1:b3:f5:ae:9d:1f:d3:c9:45: 7b:78:9f:8b:89:eb:f4:80:8b:4d:cc:18:a7:e9:35: 7f:c5:d6:a2:73:7c:53:5d:00:9e:69:3b:11:f5:2f: c1:ce:d9:4b:bb:13:03:c2:ed:e8:ab:5a:e3:38:87: d0:7c:15:b8:d2:71:6f:76:50:62:a7:2e:fd:da:0c: c5:31:a0:0b:c0:9c:a6:73:31:a7:7c:08:0c:a2:3b: 02:34:20:17:8a:12:74:73:1a:f1:7a:5a:f5:80:cd: 1a:62:7c:c6:f9:56:c0:a7:5b:ab:78:2c:14:7e:73: 33:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:73:30:07:20:98:82:89:46:D6:B2:88:7B:E5:FC:A7:34:9F:4B:FC X509v3 Authority Key Identifier: keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:44:7d:e4:b1:9c:75:b1:ef:68:6e:be:4d:ba:5c:2b:a7:95: 9d:7e:75:5a:e4:99:58:8e:f4:35:3d:ad:0d:6f:26:f8:08:e8: 33:ac:36:db:83:54:66:d0:18:fe:00:a5:52:7c:2c:14:87:f1: 81:bd:23:87:69:46:cb:ba:e6:0e:5b:6a:12:7d:6a:4d:8a:04: 26:33:8c:f0:2d:89:ab:a9:f6:9d:0b:d5:24:cd:c9:d8:74:78: 01:5c:1a:77:42:fd:9b:e5:b1:d5:34:8d:b0:56:cd:a1:3e:73: 8f:97:0f:ad:74:63:29:19:cb:cb:73:95:80:73:2e:82:7f:e1: b5:bc:b4:07:c0:26:6d:32:5b:42:8c:57:ad:eb:9c:da:6b:01: fb:2e:67:05:60:10:be:3f:1e:18:ac:18:b6:63:d4:88:9e:84: 47:03:92:16:2a:a7:4f:90:08:cd:03:ef:7b:66:02:e6:37:2a: 7b:80:40:c5:23:6b:57:b4:b3:65:c3:07:f4:4c:5c:61:7b:2a: 09:40:22:13:6a:e5:79:19:38:76:05:5b:9d:d3:dd:bc:1c:60: 61:99:90:2a:42:8c:e7:78:55:76:1c:3a:c2:56:02:5f:f0:b8: cc:a7:a6:77:ef:85:95:92:55:73:19:85:92:7f:55:59:ad:32: 66:ef:02:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKDJCMkFEQUM1OUVDQ0Y2Mzg0RkM1RTM2M0YwNjdDM0I5 RTI5RTk5QTEwHhcNMjYwNzI3MDU0NzI3WhcNMjYwODAzMDU0NzI3WjAYMRYwFAYD VQQDEw02YTY2ZjBmMC0zZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkn4+92G4/5msLlb457ABTz9eUCrUQuX2ClpC5Y1b1miijstobTFRarW8dIIq /qV02RAK86C03g1mppLAeUNf8xsbTAWx5jSsbwJjLwJlUl3FA21GiYKt56bheXoj V/Z2Jei4p8mPbQRdvZoMB8b1Birxp/AR0X5QUuu+DyYLdyWjE+uJfPhDImoFk5zB s/WunR/TyUV7eJ+Liev0gItNzBin6TV/xdaic3xTXQCeaTsR9S/BztlLuxMDwu3o q1rjOIfQfBW40nFvdlBipy792gzFMaALwJymczGnfAgMojsCNCAXihJ0cxrxelr1 gM0aYnzG+VbAp1ureCwUfnMzvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlzMAcg mIKJRtayiHvl/Kc0n0v8MB8GA1UdIwQYMBaAFCsq2sWezPY4T8XjY/Bnw7ninpmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GRjk0RTcxMkY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlqaFB4ZU5qOEdmRHVlS2Vt YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t5cmF4WjdNOWpoUHhlTmo4R2ZEdWVLZW1hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GRjk0RTcxMkY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlq aFB4ZU5qOEdmRHVlS2VtYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWER95LGcdbHvaG6+TbpcK6eVnX51WuSZWI70NT2tDW8m+AjoM6w224NUZtAY /gClUnwsFIfxgb0jh2lGy7rmDltqEn1qTYoEJjOM8C2Jq6n2nQvVJM3J2HR4AVwa d0L9m+Wx1TSNsFbNoT5zj5cPrXRjKRnLy3OVgHMugn/htby0B8AmbTJbQoxXreuc 2msB+y5nBWAQvj8eGKwYtmPUiJ6ERwOSFiqnT5AIzQPve2YC5jcqe4BAxSNrV7Sz ZcMH9ExcYXsqCUAiE2rleRk4dgVbndPdvBxgYZmQKkKM53hVdhw6wlYCX/C4zKem d++FlZJVcxmFkn9VWa0yZu8CIg== -----END CERTIFICATE-----Generated at Wed Jul 29 01:32:57 2026 by rpki-client