$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json) Hash identifier: 9gg8ODXeW6O5CFHQuq0XYchWtrl9a5KIhd5bG23AnjA= Subject key identifier: AF:1D:94:1A:AF:06:1C:58:71:5F:7E:94:FE:BA:9F:5D:AD:C3:24:37 Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft Manifest number: 0140 Signing time: Wed 25 Mar 2026 04:47:50 +0000 Manifest this update: Wed 25 Mar 2026 04:47:50 +0000 Manifest next update: Wed 01 Apr 2026 04:47:50 +0000 Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: V176SIl5HbTqwhABiBPPy0C1+beqoGVwpCnV6BcPOAs=) 2: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: 1+rHD96cmTTrY5JYvLtnUFvcPBEAFnoYSShMEul4gsc=) 3: AC7759D2135511F092D0090CC4F9AE02.roa (hash: cIR+w+xkklPQUMPNQXsoO8Am69Kl6nONkw9k4W8PI0Q=) 4: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: 2OACQWVvVFcyxRcug44Fzbt444tccR/OfJPwSkqIztc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Validity Not Before: Mar 25 04:47:50 2026 GMT Not After : Apr 1 04:47:50 2026 GMT Subject: CN=69c368f6-7d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5e:11:2f:e0:d1:24:2c:81:20:76:d0:d8:84: 4f:83:ae:02:39:82:b7:82:92:bd:9c:9d:96:00:73: 62:80:cb:e6:03:73:f6:b3:f4:f1:19:57:3d:bb:06: 1c:38:62:87:e6:8c:5e:04:d3:26:b9:1c:a1:01:e9: 3e:5a:cc:bc:0c:f8:ed:96:91:91:28:b5:6a:65:5e: 39:b7:fd:9f:df:8b:a7:5c:95:c5:ff:49:79:c8:d6: a1:82:de:3b:da:11:3c:23:e1:03:f9:66:16:ec:cb: 9b:13:a7:a2:4f:3e:e0:c2:b3:57:35:be:cc:8c:ee: 42:46:bf:d9:d4:b1:1e:30:f2:eb:cd:e0:62:1d:b3: 1b:bf:98:13:47:86:70:f3:41:6e:de:b1:9c:f0:91: ac:2f:10:cb:ff:2d:a4:b1:4b:ac:21:39:0f:8b:49: c7:d1:c3:f6:05:95:90:76:9c:14:61:e9:0c:e8:4e: 42:14:8b:f9:f2:06:79:64:dc:11:5d:a4:2d:ce:72: 78:45:72:3c:87:99:a0:50:8e:e1:10:82:4a:99:20: 72:db:3b:57:77:bd:69:2d:1e:e2:62:e2:2d:16:cb: e2:74:52:2a:32:b3:40:d9:31:d5:84:5e:18:27:fc: 4c:62:dc:b4:42:cf:1a:41:71:b0:21:82:d9:eb:6d: 05:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1D:94:1A:AF:06:1C:58:71:5F:7E:94:FE:BA:9F:5D:AD:C3:24:37 X509v3 Authority Key Identifier: keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:60:73:03:e5:7b:71:01:c1:d5:a2:43:a8:b3:17:a2:36:03: b6:c6:e9:b3:a3:8f:7f:a8:3a:25:c0:de:22:73:aa:2c:c7:08: c0:4a:92:4d:66:51:e4:5a:26:3f:10:42:a9:dd:59:78:5b:4a: cf:cf:26:5c:10:c8:d6:e2:89:35:51:9c:01:67:00:b8:06:5e: 9c:d1:11:fa:10:5b:31:da:0b:ae:d8:27:de:1f:f6:6d:e9:0e: 8c:95:d8:07:30:b3:20:a8:51:d4:28:a0:58:fc:8b:85:93:28: 1d:e8:14:15:d7:be:ef:30:72:be:1e:b9:01:93:62:eb:f7:07: ac:17:c0:d7:5c:ae:7d:ee:0b:3f:d1:db:90:ee:94:3f:c6:9c: 5d:63:4b:a5:9a:72:0c:a6:3d:82:b9:3d:2e:93:2d:56:45:49: eb:8c:68:90:56:8d:e1:ca:69:34:3f:8c:f8:e7:f2:2f:44:a2: c5:76:52:55:d5:a2:61:c4:45:9b:02:e6:a1:e8:5c:8f:61:7b: 83:33:e4:05:38:96:95:86:1b:6d:8d:0d:69:91:84:7b:58:65: e7:df:76:ed:a4:98:f7:f6:00:93:c7:31:e0:98:41:16:bb:f8: cc:e3:e0:9b:2c:c3:91:ad:15:e6:a3:58:f5:17:ab:12:49:30: b9:31:90:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk2NzIxMTAvBgNVBAUTKDkxQUE3NzgzRkIwMjc4MTk4MzhDNEE5MUM5MUM2MEQ0 MUZCM0VFQUIwHhcNMjYwMzI1MDQ0NzUwWhcNMjYwNDAxMDQ0NzUwWjAYMRYwFAYD VQQDEw02OWMzNjhmNi03ZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw14RL+DRJCyBIHbQ2IRPg64COYK3gpK9nJ2WAHNigMvmA3P2s/TxGVc9uwYc OGKH5oxeBNMmuRyhAek+Wsy8DPjtlpGRKLVqZV45t/2f34unXJXF/0l5yNahgt47 2hE8I+ED+WYW7MubE6eiTz7gwrNXNb7MjO5CRr/Z1LEeMPLrzeBiHbMbv5gTR4Zw 80Fu3rGc8JGsLxDL/y2ksUusITkPi0nH0cP2BZWQdpwUYekM6E5CFIv58gZ5ZNwR XaQtznJ4RXI8h5mgUI7hEIJKmSBy2ztXd71pLR7iYuItFsvidFIqMrNA2THVhF4Y J/xMYty0Qs8aQXGwIYLZ620F7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8dlBqv BhxYcV9+lP66n12twyQ3MB8GA1UdIwQYMBaAFJGqd4P7AngZg4xKkckcYNQfs+6r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi9FNUY0NUFEMDVG NTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VCbURqRXFSeVJ4ZzFCLXo3 cXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2thcDNnX3NDZUJtRGpFcVJ5UnhnMUItejdxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTY3Mi9FNUY0NUFEMDVGNTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VC bURqRXFSeVJ4ZzFCLXo3cXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAGBzA+V7cQHB1aJDqLMXojYDtsbps6OPf6g6JcDeInOqLMcIwEqSTWZR5Fom PxBCqd1ZeFtKz88mXBDI1uKJNVGcAWcAuAZenNER+hBbMdoLrtgn3h/2bekOjJXY BzCzIKhR1CigWPyLhZMoHegUFde+7zByvh65AZNi6/cHrBfA11yufe4LP9HbkO6U P8acXWNLpZpyDKY9grk9LpMtVkVJ64xokFaN4cppND+M+OfyL0SixXZSVdWiYcRF mwLmoehcj2F7gzPkBTiWlYYbbY0NaZGEe1hl59927aSY9/YAk8cx4JhBFrv4zOPg myzDka0V5qNY9RerEkkwuTGQFg== -----END CERTIFICATE-----Generated at Thu Mar 26 05:04:30 2026 by rpki-client