$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json) Hash identifier: OO7EPw5nZI2ETmGvcfyX8Swv1kvjEatQTcwYaV15sHU= Subject key identifier: 1F:8B:D5:FF:1A:55:70:3E:85:7D:FB:7F:49:6D:A1:46:9D:BE:30:CB Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft Manifest number: 0158 Signing time: Mon 11 May 2026 05:21:42 +0000 Manifest this update: Mon 11 May 2026 05:21:41 +0000 Manifest next update: Mon 18 May 2026 05:21:41 +0000 Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: 5xQvFKpVUBsto62tIPBn8o3n0XP2+VLMDG7FX7Qxs8o=) 2: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: 2OACQWVvVFcyxRcug44Fzbt444tccR/OfJPwSkqIztc=) 3: AC7759D2135511F092D0090CC4F9AE02.roa (hash: cIR+w+xkklPQUMPNQXsoO8Am69Kl6nONkw9k4W8PI0Q=) 4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: 1+rHD96cmTTrY5JYvLtnUFvcPBEAFnoYSShMEul4gsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Validity Not Before: May 11 05:21:41 2026 GMT Not After : May 18 05:21:41 2026 GMT Subject: CN=6a016766-a022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:ab:33:b0:eb:69:32:b8:9a:c4:96:ea:93: 0a:f6:81:c8:4a:dd:d4:68:50:00:fa:e4:a9:2e:d2: 66:d6:87:23:5f:f5:72:d1:5e:64:e9:56:b9:18:30: f1:e4:bf:fb:e2:1e:ac:c9:65:7c:24:69:73:37:c8: 32:68:c9:69:33:97:aa:28:3a:b6:f9:89:0c:fd:1a: 29:db:7d:eb:e6:bb:c3:a0:00:a9:f0:45:eb:4b:0f: 62:72:a5:e2:ae:ab:a3:b4:d2:e4:b7:23:60:df:5f: 69:de:b2:f3:ac:9b:11:4a:02:e5:b9:40:86:28:be: 38:e0:88:1d:95:28:ac:7f:75:e9:a5:be:2b:7b:ff: e2:3f:70:c0:d4:e9:79:a1:95:89:c3:ea:e5:03:81: c9:43:67:15:65:37:57:fc:36:2e:4f:bf:00:b7:f6: 56:ff:f5:38:5e:75:7d:4d:11:90:cc:d2:d6:bc:b3: 49:75:7e:58:fc:25:dc:0c:3f:a5:2a:42:89:a3:4c: 46:b4:aa:35:55:f1:e3:61:5f:49:49:4b:02:de:bc: 65:7e:ca:b3:44:86:95:f8:2a:45:cf:cf:52:6f:2f: b3:72:f7:6d:37:98:b1:e3:6f:b3:cc:6a:b7:a3:15: 3a:ff:e2:ed:eb:c9:a7:e3:de:71:c9:87:46:3c:62: 39:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8B:D5:FF:1A:55:70:3E:85:7D:FB:7F:49:6D:A1:46:9D:BE:30:CB X509v3 Authority Key Identifier: keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:0f:7a:d6:11:ae:dc:8e:8b:37:06:87:85:ce:e9:f5:57:54: 48:1c:96:e8:35:4c:fa:36:4d:49:d1:20:af:df:22:e4:8b:c9: 9e:f4:8f:bf:a1:c2:9e:c4:e4:a8:0d:b8:99:1d:78:80:19:97: f9:bc:36:d8:cf:3d:1e:06:04:06:36:7f:e6:62:75:ec:b7:73: cb:fc:51:7c:1e:aa:27:2e:04:66:96:ab:76:e7:ae:e2:d8:4c: 7d:3a:4a:0b:58:99:a5:d2:e7:4c:2e:bf:6f:8d:49:7f:82:1e: 70:08:22:93:39:b1:98:42:64:65:90:4f:9c:ab:7e:54:66:b8: b0:fc:f9:57:0d:96:63:39:3f:eb:c4:53:17:85:cb:ad:ff:33: 09:ac:7d:a1:05:3e:79:9f:11:1d:df:d4:59:7f:75:82:a0:df: 29:d7:2a:9c:0f:f1:7d:42:3b:f1:22:a4:20:41:ef:56:7f:91: 88:30:28:d7:e8:52:b1:25:b5:bc:ee:f0:8f:25:df:51:d8:b3: ba:5f:63:9b:58:49:2d:ec:37:74:4c:c3:ec:2e:b1:6d:9a:55: 8c:64:04:86:a0:f3:79:fd:9a:e9:d7:e1:28:b0:79:e1:2c:bd: 2f:ba:1c:1f:e0:18:a7:87:50:73:d0:d4:de:e7:39:cb:cc:4f: fd:a4:b7:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk2NzIxMTAvBgNVBAUTKDkxQUE3NzgzRkIwMjc4MTk4MzhDNEE5MUM5MUM2MEQ0 MUZCM0VFQUIwHhcNMjYwNTExMDUyMTQxWhcNMjYwNTE4MDUyMTQxWjAYMRYwFAYD VQQDEw02YTAxNjc2Ni1hMDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmCrM7DraTK4msSW6pMK9oHISt3UaFAA+uSpLtJm1ocjX/Vy0V5k6Va5GDDx 5L/74h6syWV8JGlzN8gyaMlpM5eqKDq2+YkM/Rop233r5rvDoACp8EXrSw9icqXi rqujtNLktyNg319p3rLzrJsRSgLluUCGKL444IgdlSisf3Xppb4re//iP3DA1Ol5 oZWJw+rlA4HJQ2cVZTdX/DYuT78At/ZW//U4XnV9TRGQzNLWvLNJdX5Y/CXcDD+l KkKJo0xGtKo1VfHjYV9JSUsC3rxlfsqzRIaV+CpFz89Sby+zcvdtN5ix42+zzGq3 oxU6/+Lt68mn495xyYdGPGI5cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+L1f8a VXA+hX37f0ltoUadvjDLMB8GA1UdIwQYMBaAFJGqd4P7AngZg4xKkckcYNQfs+6r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi9FNUY0NUFEMDVG NTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VCbURqRXFSeVJ4ZzFCLXo3 cXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2thcDNnX3NDZUJtRGpFcVJ5UnhnMUItejdxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTY3Mi9FNUY0NUFEMDVGNTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VC bURqRXFSeVJ4ZzFCLXo3cXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoQ961hGu3I6LNwaHhc7p9VdUSByW6DVM+jZNSdEgr98i5IvJnvSPv6HCnsTk qA24mR14gBmX+bw22M89HgYEBjZ/5mJ17Ldzy/xRfB6qJy4EZpardueu4thMfTpK C1iZpdLnTC6/b41Jf4IecAgikzmxmEJkZZBPnKt+VGa4sPz5Vw2WYzk/68RTF4XL rf8zCax9oQU+eZ8RHd/UWX91gqDfKdcqnA/xfUI78SKkIEHvVn+RiDAo1+hSsSW1 vO7wjyXfUdizul9jm1hJLew3dEzD7C6xbZpVjGQEhqDzef2a6dfhKLB54Sy9L7oc H+AYp4dQc9DU3uc5y8xP/aS3LQ== -----END CERTIFICATE-----Generated at Wed May 13 04:40:37 2026 by rpki-client