$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json) Hash identifier: qAJ365e6EN982282gabD24caqyB73MVK9uC+FKZo3ao= Subject key identifier: 4F:D3:FC:7F:26:E6:77:EC:E0:A4:EE:FB:68:6C:E3:23:9A:04:F2:36 Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft Manifest number: 01A2 Signing time: Mon 05 Oct 2026 04:47:18 +0000 Manifest this update: Mon 05 Oct 2026 04:47:17 +0000 Manifest next update: Mon 12 Oct 2026 04:47:17 +0000 Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: 3EgqEptjz++Y8i2T0nneto/y8gvqDDtmvcO2YVMWZSU=) 2: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: 2OACQWVvVFcyxRcug44Fzbt444tccR/OfJPwSkqIztc=) 3: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: 1+rHD96cmTTrY5JYvLtnUFvcPBEAFnoYSShMEul4gsc=) 4: AC7759D2135511F092D0090CC4F9AE02.roa (hash: cIR+w+xkklPQUMPNQXsoO8Am69Kl6nONkw9k4W8PI0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 04:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Validity Not Before: Oct 5 04:47:17 2026 GMT Not After : Oct 12 04:47:17 2026 GMT Subject: CN=6ac32bd6-b965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:16:95:ee:e9:6e:86:21:a2:e7:ec:d8:31: 0c:a5:ed:89:23:24:66:9d:0f:ab:8d:68:4a:8d:d7: 33:49:2b:b6:cc:a8:db:ac:7e:cf:19:7a:12:83:2a: 1d:00:cf:35:81:e3:92:fa:38:c8:7e:73:84:1e:9e: 84:4f:b8:db:87:76:60:a8:98:51:ea:f1:27:bc:89: 8c:5e:0c:19:18:72:04:41:9a:62:34:87:e8:8d:32: 8a:66:bc:14:86:30:06:67:bf:f6:52:c1:ba:d2:61: 22:d4:e0:43:e0:51:54:52:c6:78:85:b5:65:87:0a: 3a:ad:c5:a3:d4:a1:eb:74:7b:99:22:ce:47:a0:80: 50:73:59:aa:2f:b4:e2:74:f8:2d:1a:6d:44:6e:e3: 8c:59:19:7c:6f:2b:06:7e:34:80:10:45:af:28:07: 74:5c:f1:aa:ae:06:1f:0c:f3:9c:96:7e:87:fb:ba: c9:c0:99:c3:cb:3c:29:23:22:94:7b:7f:b7:ff:d6: 1a:b8:87:b7:72:d1:2b:d4:80:85:9a:eb:c0:cb:35: 92:aa:ac:45:d2:97:30:41:56:42:26:27:84:eb:71: 97:0e:9e:f5:c2:21:d3:b9:81:ba:38:5e:d2:6c:a0: ce:2f:ca:73:9b:91:2b:9d:ec:e1:81:2c:77:03:c1: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D3:FC:7F:26:E6:77:EC:E0:A4:EE:FB:68:6C:E3:23:9A:04:F2:36 X509v3 Authority Key Identifier: keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ae:91:7f:20:7d:60:e7:dd:75:0f:a4:74:7b:f8:ba:72:22: fb:58:d5:a3:39:1c:c1:64:72:99:70:20:21:05:2b:b8:54:2c: f0:eb:63:4f:d6:63:7a:88:ec:a9:98:57:aa:93:63:32:b2:c4: 64:ea:96:64:c8:ec:fd:13:f3:c4:32:c9:ca:41:68:0e:5a:82: 25:08:bd:71:9d:e1:8a:fb:b0:2d:e2:25:d5:63:08:2f:b9:00: e0:1a:28:21:86:82:8a:80:0b:6a:1d:a3:db:1e:c8:03:e6:3f: 8d:cf:01:f6:f1:8e:13:72:5d:08:ac:bb:2a:f5:c6:9f:ca:a8: 0f:4d:db:cf:42:e5:e9:32:cc:27:0a:fa:fa:d6:71:57:3c:c0: aa:d2:14:46:94:86:b0:16:eb:b0:f1:db:6f:b7:63:cd:57:fc: da:93:ef:64:06:93:1d:25:01:98:34:80:be:2b:76:3d:c8:4f: 5a:8e:c1:86:8f:35:f1:ff:6e:59:95:3d:3f:cc:08:96:79:e1: 09:b9:a5:d0:8e:58:44:b4:86:6f:70:99:65:f3:66:d5:17:7e: 76:53:84:a0:03:48:72:cf:9d:30:1d:15:ca:e2:c8:ab:c6:02: 01:80:1b:00:94:67:76:47:9f:54:9f:d9:8b:71:c3:70:cc:4a: 58:4b:c0:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk2NzIxMTAvBgNVBAUTKDkxQUE3NzgzRkIwMjc4MTk4MzhDNEE5MUM5MUM2MEQ0 MUZCM0VFQUIwHhcNMjYxMDA1MDQ0NzE3WhcNMjYxMDEyMDQ0NzE3WjAYMRYwFAYD VQQDEw02YWMzMmJkNi1iOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlN0Wle7pboYhoufs2DEMpe2JIyRmnQ+rjWhKjdczSSu2zKjbrH7PGXoSgyod AM81geOS+jjIfnOEHp6ET7jbh3ZgqJhR6vEnvImMXgwZGHIEQZpiNIfojTKKZrwU hjAGZ7/2UsG60mEi1OBD4FFUUsZ4hbVlhwo6rcWj1KHrdHuZIs5HoIBQc1mqL7Ti dPgtGm1EbuOMWRl8bysGfjSAEEWvKAd0XPGqrgYfDPOcln6H+7rJwJnDyzwpIyKU e3+3/9YauIe3ctEr1ICFmuvAyzWSqqxF0pcwQVZCJieE63GXDp71wiHTuYG6OF7S bKDOL8pzm5ErnezhgSx3A8HipQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/T/H8m 5nfs4KTu+2hs4yOaBPI2MB8GA1UdIwQYMBaAFJGqd4P7AngZg4xKkckcYNQfs+6r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi9FNUY0NUFEMDVG NTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VCbURqRXFSeVJ4ZzFCLXo3 cXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2thcDNnX3NDZUJtRGpFcVJ5UnhnMUItejdxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTY3Mi9FNUY0NUFEMDVGNTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VC bURqRXFSeVJ4ZzFCLXo3cXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAK6RfyB9YOfddQ+kdHv4unIi+1jVozkcwWRymXAgIQUruFQs8OtjT9Zjeojs qZhXqpNjMrLEZOqWZMjs/RPzxDLJykFoDlqCJQi9cZ3hivuwLeIl1WMIL7kA4Boo IYaCioALah2j2x7IA+Y/jc8B9vGOE3JdCKy7KvXGn8qoD03bz0Ll6TLMJwr6+tZx VzzAqtIURpSGsBbrsPHbb7djzVf82pPvZAaTHSUBmDSAvit2PchPWo7Bho818f9u WZU9P8wIlnnhCbml0I5YRLSGb3CZZfNm1Rd+dlOEoANIcs+dMB0VyuLIq8YCAYAb AJRndkefVJ/Zi3HDcMxKWEvAjw== -----END CERTIFICATE-----Generated at Wed Oct 7 06:08:46 2026 by rpki-client