$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft File: KyraxZ7M9jhPxeNj8GfDueKemaE.mft (raw, json) Hash identifier: 6rW93qzlkE4WUs0WtXtBt6aNsyWcYarH70lHBQHFn3o= Subject key identifier: AB:F6:47:88:A4:01:39:B1:53:11:E7:69:73:87:89:CC:2D:13:D7:76 Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft Manifest number: C3 Signing time: Sun 27 Apr 2025 04:41:17 +0000 Manifest this update: Sun 27 Apr 2025 04:41:17 +0000 Manifest next update: Sun 04 May 2025 04:41:17 +0000 Files and hashes: 1: KyraxZ7M9jhPxeNj8GfDueKemaE.crl (hash: o7N7gjC9HoF49RrkLipIhVWprq5rQGAzoVEyB+xBZJ4=) 2: 71B685ACF7E511EEBC67981CC4F9AE02.roa (hash: xS6KKVico6q7YAydoXRQP98J8XdPbnXHA9bQvEcQ3gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1 Validity Not Before: Apr 27 04:41:17 2025 GMT Not After : May 4 04:41:17 2025 GMT Subject: CN=680db56d-191a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:50:2c:2a:0f:07:8c:12:e4:50:df:6a:5c:ec: 7b:65:13:0c:5c:04:d2:b8:f9:eb:91:4b:ba:7b:d6: 40:0a:1f:15:c4:01:47:af:d1:9d:c2:1f:d5:a9:e1: f4:93:f3:0b:d9:33:47:0f:ed:8c:79:cf:01:ef:e3: bb:1c:57:ff:b4:8b:60:ba:7b:d3:53:1b:7b:45:15: 0a:c9:e3:d0:12:31:07:a2:c2:41:e3:0d:d8:00:e1: e1:b3:bb:09:3c:8e:43:67:da:bd:bc:d0:e2:3b:94: 97:bd:93:d7:14:2f:d1:bb:de:e8:d0:28:7a:3b:d1: 30:25:0b:c4:30:0b:67:bb:ff:62:a1:40:d1:aa:62: 95:de:c1:85:17:99:2f:91:ff:cc:e5:97:1b:79:68: 4a:b3:32:d2:1a:bd:21:23:f1:ec:0f:5b:78:b9:77: fb:1e:fd:a2:15:5b:7b:49:e8:ee:60:65:35:32:4c: e7:d1:07:8e:28:25:93:ee:f5:9a:85:2f:e5:d0:2b: 35:42:95:8a:bf:db:2e:19:f7:33:dd:6e:ca:9c:fa: e5:e7:3f:cb:e7:f9:22:49:17:53:e1:eb:d1:83:03: 28:30:8b:7f:63:49:5d:09:9e:2f:58:9b:ee:9f:5a: 62:dc:a2:44:ea:b2:06:e0:fc:ae:88:33:dc:16:4b: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F6:47:88:A4:01:39:B1:53:11:E7:69:73:87:89:CC:2D:13:D7:76 X509v3 Authority Key Identifier: keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:61:25:4c:f6:f1:d1:39:a9:01:9a:6f:1c:f6:84:49:5b:75: d1:75:30:66:e5:e0:b7:cc:af:67:e0:7e:46:56:6e:5c:b5:c5: b2:90:54:14:3a:98:28:2c:39:c2:23:2d:5a:2b:19:21:ee:c7: 4d:b6:31:a9:5d:0d:8d:5e:a9:ae:3f:ca:2b:a8:33:91:93:72: 2a:06:a0:ff:08:65:45:91:fd:93:e9:b1:c5:87:52:7b:e3:7d: 0f:28:90:83:10:23:5a:04:94:a7:69:f7:21:a7:8d:ed:e7:3e: bd:ad:c3:04:e3:f1:8b:2f:a3:af:54:52:d8:08:c6:96:b1:a9: 75:f4:41:ca:c1:51:c0:58:d0:9b:b1:fa:a4:48:e4:7a:c3:09: 23:f6:f3:6c:e7:d7:15:6a:7b:94:74:28:eb:89:23:b1:ce:f1: d0:49:3e:82:cb:1d:bf:61:42:f3:43:8a:d0:a3:22:f6:2d:e8: d2:e0:af:a4:47:a3:58:53:8f:b7:d8:6a:b7:3d:2d:af:4b:b6: b3:fe:4d:5a:eb:de:dc:2a:ec:13:a3:c7:d8:4b:04:62:36:c9: 98:66:03:13:06:3a:1b:16:78:4f:9c:bc:e5:30:09:6f:92:5d: b2:bf:04:be:01:72:08:22:c5:06:02:f3:1f:2c:fa:19:78:2e: 50:d4:84:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKDJCMkFEQUM1OUVDQ0Y2Mzg0RkM1RTM2M0YwNjdDM0I5 RTI5RTk5QTEwHhcNMjUwNDI3MDQ0MTE3WhcNMjUwNTA0MDQ0MTE3WjAYMRYwFAYD VQQDEw02ODBkYjU2ZC0xOTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7lAsKg8HjBLkUN9qXOx7ZRMMXATSuPnrkUu6e9ZACh8VxAFHr9Gdwh/VqeH0 k/ML2TNHD+2Mec8B7+O7HFf/tItgunvTUxt7RRUKyePQEjEHosJB4w3YAOHhs7sJ PI5DZ9q9vNDiO5SXvZPXFC/Ru97o0Ch6O9EwJQvEMAtnu/9ioUDRqmKV3sGFF5kv kf/M5ZcbeWhKszLSGr0hI/HsD1t4uXf7Hv2iFVt7SejuYGU1Mkzn0QeOKCWT7vWa hS/l0Cs1QpWKv9suGfcz3W7KnPrl5z/L5/kiSRdT4evRgwMoMIt/Y0ldCZ4vWJvu n1pi3KJE6rIG4PyuiDPcFkvOzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKv2R4ik ATmxUxHnaXOHicwtE9d2MB8GA1UdIwQYMBaAFCsq2sWezPY4T8XjY/Bnw7ninpmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GRjk0RTcxMkY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlqaFB4ZU5qOEdmRHVlS2Vt YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t5cmF4WjdNOWpoUHhlTmo4R2ZEdWVLZW1hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GRjk0RTcxMkY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi9LeXJheFo3TTlq aFB4ZU5qOEdmRHVlS2VtYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4YSVM9vHROakBmm8c9oRJW3XRdTBm5eC3zK9n4H5GVm5ctcWykFQU OpgoLDnCIy1aKxkh7sdNtjGpXQ2NXqmuP8orqDORk3IqBqD/CGVFkf2T6bHFh1J7 430PKJCDECNaBJSnafchp43t5z69rcME4/GLL6OvVFLYCMaWsal19EHKwVHAWNCb sfqkSOR6wwkj9vNs59cVanuUdCjriSOxzvHQST6Cyx2/YULzQ4rQoyL2LejS4K+k R6NYU4+32Gq3PS2vS7az/k1a697cKuwTo8fYSwRiNsmYZgMTBjobFnhPnLzlMAlv kl2yvwS+AXIIIsUGAvMfLPoZeC5Q1IRR -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net