
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier: rTt4z6WrW4HqgHcueLjqkJb68sNEWC3vt1YX/gl7qdQ=
Subject key identifier: 5D:82:4A:45:A4:1D:DC:83:9D:CE:C8:12:57:38:28:29:E1:FD:C3:D5
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number: 0173
Signing time: Sun 05 Jul 2026 05:35:49 +0000
Manifest this update: Sun 05 Jul 2026 05:35:48 +0000
Manifest next update: Sun 12 Jul 2026 05:35:48 +0000
Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: cp3bNOEn+nIWyep6NqvW8y51YbVq7zmHINzetnOwuAU=)
2: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: 2OACQWVvVFcyxRcug44Fzbt444tccR/OfJPwSkqIztc=)
3: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: 1+rHD96cmTTrY5JYvLtnUFvcPBEAFnoYSShMEul4gsc=)
4: AC7759D2135511F092D0090CC4F9AE02.roa (hash: cIR+w+xkklPQUMPNQXsoO8Am69Kl6nONkw9k4W8PI0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 05:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Validity
Not Before: Jul 5 05:35:48 2026 GMT
Not After : Jul 12 05:35:48 2026 GMT
Subject: CN=6a49ed35-c230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:ac:33:06:c2:b6:4a:fd:9c:22:84:6e:3a:
1c:f7:6c:cc:8a:a3:04:11:7e:02:d7:d7:8d:63:43:
0d:31:14:19:dd:c9:71:fd:b4:db:99:35:59:46:7a:
51:ae:81:6c:3e:5a:9f:25:32:72:c1:8e:d6:43:b6:
f1:0d:64:1c:f7:93:a8:a9:88:9e:b3:1c:ac:b0:f5:
80:2f:c4:80:56:3c:9a:87:2f:10:2f:fc:8a:14:19:
4f:b8:55:18:7b:57:ee:35:be:02:d4:0d:dd:f5:28:
b6:9d:f9:01:59:42:e4:a1:a7:94:a5:69:c8:12:2d:
d3:ec:96:45:ea:c0:06:af:41:3a:0f:d0:c3:3b:20:
e0:35:4a:05:e6:1c:9c:8c:97:0e:8c:c5:18:46:7f:
99:78:29:6b:b8:ed:05:a5:e5:e2:07:33:65:1c:1f:
75:06:8d:0a:90:56:dc:67:a9:5b:26:41:79:88:67:
96:33:cd:76:9e:ab:b8:c8:dc:3b:2e:ed:a7:cd:17:
12:63:5f:5f:db:39:a9:2b:35:f9:72:73:d7:f5:31:
86:c0:8a:cd:5c:d0:7c:1d:7b:bf:52:74:1b:93:b7:
68:15:81:49:ad:9d:6e:a2:5b:26:a7:39:ba:29:ab:
f1:b6:a4:48:78:75:4d:db:8c:f2:c9:a9:85:ca:ad:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:82:4A:45:A4:1D:DC:83:9D:CE:C8:12:57:38:28:29:E1:FD:C3:D5
X509v3 Authority Key Identifier:
keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6c:40:00:db:90:5a:ce:5e:34:9e:d2:d9:d2:f3:a7:11:c6:
ee:0d:c3:cf:3d:6e:d2:99:18:bd:e4:1b:e4:f7:88:02:cd:a7:
3d:30:9d:6e:91:37:30:51:71:85:da:8b:ac:79:01:bc:ff:b4:
e9:99:14:35:5f:62:e4:df:5f:4d:1f:fe:80:5a:81:e5:35:b0:
67:92:07:7c:6c:31:2b:53:4e:0f:14:0e:69:58:1b:20:4a:2d:
36:7a:99:a7:f9:e4:8c:d5:fa:e8:84:cf:68:14:ef:c9:76:dc:
03:56:27:2a:83:41:9c:d0:af:e3:8f:32:72:de:89:2d:43:e6:
df:f7:1f:4b:ec:25:47:a5:89:f0:52:84:c7:c4:2f:af:ab:e4:
bd:04:95:ca:3b:86:84:67:9d:be:e5:14:53:4d:8b:f3:37:b2:
8a:78:7b:12:44:39:b6:26:05:9e:28:65:29:f5:48:45:b6:99:
99:59:ab:0f:66:4e:ad:67:4c:20:4b:de:40:5b:f3:4a:6d:1f:
81:32:f3:1d:f1:6f:60:77:5f:9f:cd:26:de:84:a4:31:b5:ab:
16:c1:88:66:5c:cd:cd:c5:3c:59:1d:0a:ec:af:bb:5f:32:7d:
55:71:dc:e7:61:f7:63:5b:af:9c:e2:18:38:e3:fd:92:17:c0:
91:7d:04:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:07:44 2026 by rpki-client