$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft File: KyraxZ7M9jhPxeNj8GfDueKemaE.mft (raw, json) Hash identifier: qdJiEmMoeBCk9l4FL4JSz3R596IBTni+/Q0USqNLJz0= Subject key identifier: 43:C8:AA:1B:89:38:2E:A9:36:DA:00:26:32:20:5B:E6:DC:8B:1D:42 Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft Manifest number: B4 Signing time: Sat 29 Mar 2025 05:21:57 +0000 Manifest this update: Sat 29 Mar 2025 05:21:57 +0000 Manifest next update: Sat 05 Apr 2025 05:21:57 +0000 Files and hashes: 1: KyraxZ7M9jhPxeNj8GfDueKemaE.crl (hash: DFlpni5iQmOx78bT6EEYIpG2A8lR8jq+wKyrqd8r4UI=) 2: 71B685ACF7E511EEBC67981CC4F9AE02.roa (hash: xS6KKVico6q7YAydoXRQP98J8XdPbnXHA9bQvEcQ3gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469 Validity Not Before: Mar 29 05:21:57 2025 GMT Not After : Apr 5 05:21:57 2025 GMT Subject: CN=67e78375-ea9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:a4:e7:e7:a9:95:99:98:4a:c4:24:25:83: d2:c7:9f:ae:8a:66:fd:e9:66:99:c8:2e:5f:0b:8b: 43:9f:40:25:54:17:b3:95:43:c8:29:5d:d5:c3:5f: 7f:92:58:69:f5:ce:a3:15:61:a5:5d:c9:58:de:ce: bb:29:1a:85:b5:2a:a7:1f:de:f4:32:11:97:7a:27: 42:55:40:99:ba:7d:e9:cf:7c:91:bc:6d:38:16:ad: 4e:69:22:91:c9:c4:bb:58:90:d4:5d:0c:53:7d:17: 85:61:7e:7a:fc:1a:67:a4:93:6a:af:9b:16:ea:44: 4d:c2:54:85:97:f3:8f:59:59:bc:64:69:eb:ee:98: 4a:34:f8:e2:28:28:26:c4:c6:de:25:f3:db:a0:00: d0:e0:18:09:6e:ca:b3:d8:51:ee:9c:b4:92:d0:99: 27:85:eb:c0:ed:e0:b2:51:78:2c:1d:ae:1c:a8:1b: c4:81:66:f4:32:a9:69:39:ab:da:71:8d:94:11:2c: 88:a4:2c:11:e4:a7:e9:c8:fb:59:4c:92:50:cc:aa: 3a:37:fd:dc:66:ba:fb:e7:80:99:e4:c0:dd:af:57: eb:60:d5:5f:51:8d:77:88:a0:5b:54:07:43:56:f7: eb:96:72:1f:b3:bb:e0:73:38:a5:0e:6f:c2:67:aa: 47:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C8:AA:1B:89:38:2E:A9:36:DA:00:26:32:20:5B:E6:DC:8B:1D:42 X509v3 Authority Key Identifier: keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:0a:22:f8:ff:f2:0e:03:52:46:34:b2:61:0d:39:dd:b6:54: fc:8c:b8:0b:25:f3:5c:1c:b9:76:a8:1d:d0:d4:4e:86:71:a5: fd:40:b9:84:cf:b8:4f:0c:e8:47:22:26:71:7e:78:f7:cd:da: ea:87:e6:e8:d6:e9:ad:fe:b7:93:f1:41:28:09:0e:88:96:f1: dc:0e:47:08:f2:15:a7:a2:a9:25:a1:8a:43:b9:a4:20:9d:40: ce:6c:4e:97:79:58:09:a2:89:03:86:43:f6:a5:2d:5c:63:a4: e8:40:f5:60:c4:f8:c0:78:61:81:d9:f1:2e:9b:c7:f0:7d:c5: 47:d1:63:e9:91:56:11:73:11:7e:df:21:a7:20:ba:e4:1e:59: fa:a5:b5:79:45:44:46:f1:14:8a:be:e0:20:f2:10:9c:b0:90: 01:83:37:e1:e8:44:d5:74:b1:c5:35:6f:79:8d:8c:2c:dc:5a: 5c:f8:83:42:5c:dc:55:e7:e3:07:cd:ef:4e:55:33:c9:67:60: be:82:00:0c:83:01:04:2e:3c:47:60:29:e6:e2:5a:75:25:eb: f4:8e:a5:ea:9d:88:dc:d9:fc:99:e6:2b:14:9e:bd:62:39:45: 77:fa:f5:28:b6:fd:35:7b:61:d4:0a:f8:3c:1d:6c:33:3c:9c: 15:4a:79:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKDJCMkFEQUM1OUVDQ0Y2Mzg0RkM1RTM2M0YwNjdDM0I5 RTI5RTk5QTEwHhcNMjUwMzI5MDUyMTU3WhcNMjUwNDA1MDUyMTU3WjAYMRYwFAYD VQQDEw02N2U3ODM3NS1lYTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYmk5+eplZmYSsQkJYPSx5+uimb96WaZyC5fC4tDn0AlVBezlUPIKV3Vw19/ klhp9c6jFWGlXclY3s67KRqFtSqnH970MhGXeidCVUCZun3pz3yRvG04Fq1OaSKR ycS7WJDUXQxTfReFYX56/BpnpJNqr5sW6kRNwlSFl/OPWVm8ZGnr7phKNPjiKCgm xMbeJfPboADQ4BgJbsqz2FHunLSS0JknhevA7eCyUXgsHa4cqBvEgWb0MqlpOava cY2UESyIpCwR5KfpyPtZTJJQzKo6N/3cZrr754CZ5MDdr1frYNVfUY13iKBbVAdD VvfrlnIfs7vgczilDm/CZ6pHpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPIqhuJ OC6pNtoAJjIgW+bcix1CMB8GA1UdIwQYMBaAFCsq2sWezPY4T8XjY/Bnw7ninpmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GRjk0RTcxMkY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlqaFB4ZU5qOEdmRHVlS2Vt YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t5cmF4WjdNOWpoUHhlTmo4R2ZEdWVLZW1hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GRjk0RTcxMkY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlq aFB4ZU5qOEdmRHVlS2VtYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBCiL4//IOA1JGNLJhDTndtlT8jLgLJfNcHLl2qB3Q1E6GcaX9QLmE z7hPDOhHIiZxfnj3zdrqh+bo1umt/reT8UEoCQ6IlvHcDkcI8hWnoqkloYpDuaQg nUDObE6XeVgJookDhkP2pS1cY6ToQPVgxPjAeGGB2fEum8fwfcVH0WPpkVYRcxF+ 3yGnILrkHln6pbV5RURG8RSKvuAg8hCcsJABgzfh6ETVdLHFNW95jYws3Fpc+INC XNxV5+MHze9OVTPJZ2C+ggAMgwEELjxHYCnm4lp1Jev0jqXqnYjc2fyZ5isUnr1i OUV3+vUotv01e2HUCvg8HWwzPJwVSnn7 -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:50 2025 by rpki-client