
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier: /URHKcHB02bJ8WFEVBT9R1CE5hSOCxll9kVBCHKLA1c=
Subject key identifier: E8:C5:F5:CE:97:3C:76:D1:30:8C:7B:29:8B:CB:7C:87:2B:83:D8:6E
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number: 017C
Signing time: Thu 23 Jul 2026 06:24:19 +0000
Manifest this update: Thu 23 Jul 2026 06:24:19 +0000
Manifest next update: Thu 30 Jul 2026 06:24:19 +0000
Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: hBegavnsF7d5JzVG2tRp/QB/Mtll1n8R8S0U8teuQlw=)
2: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: 2OACQWVvVFcyxRcug44Fzbt444tccR/OfJPwSkqIztc=)
3: AC7759D2135511F092D0090CC4F9AE02.roa (hash: cIR+w+xkklPQUMPNQXsoO8Am69Kl6nONkw9k4W8PI0Q=)
4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: 1+rHD96cmTTrY5JYvLtnUFvcPBEAFnoYSShMEul4gsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Validity
Not Before: Jul 23 06:24:19 2026 GMT
Not After : Jul 30 06:24:19 2026 GMT
Subject: CN=6a61b393-a436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:c5:6e:98:97:98:66:0b:1c:e3:14:5e:6c:
71:83:0b:a1:9b:d5:e9:76:fd:61:b5:46:32:62:01:
30:31:e3:4e:32:7c:e6:04:2d:5e:e3:c7:76:d4:c2:
4f:f1:a3:c1:a8:df:78:57:02:dc:79:95:fe:01:9e:
93:7b:2a:da:ce:91:46:73:2f:c3:2e:47:89:94:04:
be:a6:23:75:24:01:72:2f:b0:df:f8:12:0c:f0:84:
65:3c:0d:a6:e8:89:f4:29:20:97:bb:e3:7c:48:24:
e9:da:d1:2e:41:83:f8:36:67:9f:14:73:2e:7e:d5:
18:d0:a8:aa:b8:86:c6:02:32:4c:8f:59:48:0b:34:
e0:dc:a5:34:2c:85:a7:0d:90:57:96:4a:e2:8b:5e:
a8:f3:51:88:6c:97:3b:38:02:11:5d:ca:42:5e:b7:
5a:4b:78:19:77:36:86:5b:79:33:58:86:0c:af:97:
46:9b:fd:ac:df:57:e7:74:00:d5:24:87:3c:f5:03:
af:4d:89:f9:de:5e:f0:2e:73:60:b2:7d:25:39:2c:
5c:b4:23:c0:b6:15:53:f5:53:f5:df:f4:77:a9:ce:
d6:c0:26:8d:e5:66:ef:3c:63:f6:3a:e0:fb:e1:26:
81:ac:02:5d:4d:53:fd:d5:db:a6:40:da:a6:20:da:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C5:F5:CE:97:3C:76:D1:30:8C:7B:29:8B:CB:7C:87:2B:83:D8:6E
X509v3 Authority Key Identifier:
keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b3:85:0c:4c:2b:b1:68:40:11:b3:76:4e:ba:8c:9a:ed:c2:
4e:bf:95:1e:cc:a8:f5:7a:d8:9a:d8:1d:04:23:3c:55:31:9d:
28:06:df:71:34:f4:4d:16:3d:16:a5:0c:ac:52:91:27:e7:70:
ff:99:56:e1:fd:e2:a7:c1:02:55:74:11:da:41:3c:b5:5d:27:
fe:cf:3c:98:cb:ab:e9:f2:f5:ff:06:69:6b:df:1d:46:9c:b0:
61:69:67:33:f3:fb:b2:9c:d8:ad:8a:49:84:a1:31:b2:a1:1e:
26:7b:67:62:7b:03:2c:14:04:1b:48:06:7f:59:9a:b2:80:65:
00:a9:39:13:8d:25:4a:70:57:70:c4:26:de:d4:2e:8c:9d:f2:
35:72:f9:a5:39:c4:5a:71:e0:c3:6d:09:e4:76:c9:b3:c4:36:
e1:5d:a7:bf:ab:f7:04:17:65:45:50:49:60:0b:f0:52:b6:6e:
17:ea:ce:2a:7e:c5:5b:fc:23:c1:c8:aa:49:b3:fa:3e:be:42:
3a:1e:98:8f:f7:93:1a:4e:ee:2c:9a:01:ca:c8:17:06:06:06:
60:0d:4f:bf:12:eb:af:f9:05:30:bc:c6:06:84:86:06:80:9b:
d6:f5:9e:b5:15:40:f4:db:f2:eb:26:80:87:9b:26:6a:e0:e6:
2b:fe:92:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:19 2026 by rpki-client