
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier: 96z1oj740DATtoRpzjNYF5mtG19H4I6flNL5DsOQ7GY=
Subject key identifier: B8:2E:0F:30:9E:41:EA:22:49:22:62:C2:76:D0:21:A6:12:BC:10:77
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number: 019D
Signing time: Fri 25 Sep 2026 04:33:13 +0000
Manifest this update: Fri 25 Sep 2026 04:33:12 +0000
Manifest next update: Fri 02 Oct 2026 04:33:12 +0000
Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: JY+y4xXRGt/ObfSOY500Ne4PYOEDXm4uQQu7rc9wGRI=)
2: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: 1+rHD96cmTTrY5JYvLtnUFvcPBEAFnoYSShMEul4gsc=)
3: AC7759D2135511F092D0090CC4F9AE02.roa (hash: cIR+w+xkklPQUMPNQXsoO8Am69Kl6nONkw9k4W8PI0Q=)
4: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: 2OACQWVvVFcyxRcug44Fzbt444tccR/OfJPwSkqIztc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Validity
Not Before: Sep 25 04:33:12 2026 GMT
Not After : Oct 2 04:33:12 2026 GMT
Subject: CN=6ab5f989-bd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:42:d5:90:3b:9f:49:7f:03:40:f2:bf:95:
38:f5:f9:8a:c6:b7:b3:ba:84:24:75:7a:62:1b:ac:
46:42:45:b1:87:99:7d:3f:7a:cf:4b:0b:96:43:fe:
6e:47:ad:f8:d0:4f:27:38:5e:76:4a:d2:4e:56:08:
0d:55:f9:f3:bf:99:0b:18:59:0a:7c:30:00:62:12:
61:96:00:06:06:5f:e1:4f:cd:58:b1:27:14:f7:31:
0f:38:ae:e6:6d:e7:8b:bb:b3:8f:07:74:59:4e:13:
d7:a2:ef:ae:a7:49:a2:68:15:65:7a:66:97:7f:e7:
47:ea:7a:5e:2e:c8:9c:2f:0b:65:8f:be:e4:08:92:
f8:6b:80:03:a9:45:22:49:6d:51:96:87:b6:3a:81:
aa:d5:52:55:35:2c:03:07:02:58:d6:15:a8:27:0b:
10:71:d5:67:a8:18:4e:7a:7d:8a:aa:d3:90:f1:cd:
fa:bc:a3:d4:15:cf:29:bb:6b:73:9c:3b:3e:3d:ca:
14:3f:a3:16:93:d6:5e:1c:c0:49:48:2a:29:66:b6:
d2:36:fb:eb:4f:8c:8e:24:f4:b4:4c:e2:f3:90:00:
23:9c:c5:27:5a:7b:31:e0:6b:79:f5:40:1d:02:3b:
fd:d8:8a:ad:dd:be:42:d4:98:f9:c8:a1:8a:e2:93:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2E:0F:30:9E:41:EA:22:49:22:62:C2:76:D0:21:A6:12:BC:10:77
X509v3 Authority Key Identifier:
keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:58:ee:66:5b:73:cb:46:a0:4a:a4:4c:2e:ee:3d:f3:ad:56:
c3:ec:7d:07:0d:33:7a:d8:74:4b:90:13:47:af:82:32:57:50:
e0:d7:12:0c:36:93:18:af:a7:1d:d0:9b:67:20:69:09:bc:80:
05:40:e4:23:2e:c1:14:71:b5:1e:57:7f:d0:db:cd:5f:fa:f8:
c7:cb:0c:85:bd:2b:d8:94:80:46:13:c2:3e:a9:ee:53:31:95:
b9:b0:87:ce:94:85:45:85:a5:fd:46:c0:eb:dd:c6:aa:b2:15:
b0:b0:15:15:aa:39:b4:ab:11:36:b9:f7:d4:48:4a:9b:0c:d1:
64:b2:cf:82:86:66:2e:e0:68:5c:d1:bd:09:21:da:5b:98:ca:
3f:fa:6e:a0:67:41:5d:8a:eb:2f:97:75:cd:bc:cf:02:95:05:
f5:f9:fc:67:26:c8:5a:43:8a:66:9c:d8:e4:3b:7e:0e:f7:17:
a2:24:28:35:2b:c7:28:7a:cb:5b:99:66:ac:e3:80:54:a2:ca:
96:a4:00:00:90:55:25:e2:5d:90:df:84:b9:23:ce:b8:ee:70:
69:c3:cf:17:2b:ae:c3:04:d5:9d:4f:f5:07:83:40:43:f5:16:
a7:c1:89:8d:fd:75:8e:9c:e4:95:34:1f:44:29:25:56:19:ef:
95:d8:a9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:17:03 2026 by rpki-client