
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier: mf+U8/jw8Gyk1F9RHn+jwerDAiyImHdwKBolcTvkGys=
Subject key identifier: 9D:63:ED:C4:02:3B:33:F5:01:C1:FB:32:F7:C3:16:3A:29:5C:F6:14
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number: 018A
Signing time: Wed 19 Aug 2026 05:19:43 +0000
Manifest this update: Wed 19 Aug 2026 05:19:42 +0000
Manifest next update: Wed 26 Aug 2026 05:19:42 +0000
Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: ktTLY7J6UA+NN2rOncHrgHq2sSYNBsC/i1DLZkr//MQ=)
2: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: 1+rHD96cmTTrY5JYvLtnUFvcPBEAFnoYSShMEul4gsc=)
3: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: 2OACQWVvVFcyxRcug44Fzbt444tccR/OfJPwSkqIztc=)
4: AC7759D2135511F092D0090CC4F9AE02.roa (hash: cIR+w+xkklPQUMPNQXsoO8Am69Kl6nONkw9k4W8PI0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Validity
Not Before: Aug 19 05:19:42 2026 GMT
Not After : Aug 26 05:19:42 2026 GMT
Subject: CN=6a853cef-50c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:73:3e:7c:3d:7b:b0:38:3d:f3:2d:70:79:
50:90:c0:5f:68:29:87:b6:36:38:62:a3:03:ca:8c:
db:07:df:33:f2:21:f1:1f:27:01:88:06:5e:24:e9:
4f:0a:6a:7e:af:a0:3c:94:cb:3c:5b:7f:a2:81:2c:
7f:11:82:d3:6b:79:c9:7c:1c:5c:30:88:93:fc:b3:
75:ba:e7:bf:ec:a5:68:57:c4:26:a4:8e:9e:84:42:
40:62:58:9d:7b:e2:67:5b:1c:7b:a5:1a:e6:c5:30:
c3:f4:02:0c:f8:39:06:c4:cb:25:fb:c8:07:b5:26:
1d:d5:c9:0e:c9:bc:ce:fb:b3:0a:cd:f3:47:67:d9:
0d:ea:21:ea:8b:86:80:eb:5f:37:f5:86:82:93:29:
3c:c4:1d:a0:30:44:02:65:0d:fc:9e:a6:a6:44:94:
df:0c:50:72:fd:78:4b:c6:7d:2c:c5:f0:2b:2a:87:
5b:aa:a5:ac:80:99:31:a5:7c:95:b3:6a:d0:f4:dd:
07:69:ca:7c:3a:c2:76:c5:87:29:a1:fb:3f:55:c0:
32:99:71:84:af:b4:3e:75:bb:00:35:26:de:67:79:
1b:2c:5c:8a:cb:24:fd:db:3d:54:07:1f:a1:e9:3c:
c8:81:6e:02:ee:83:34:61:3b:b2:27:79:48:4c:63:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:63:ED:C4:02:3B:33:F5:01:C1:FB:32:F7:C3:16:3A:29:5C:F6:14
X509v3 Authority Key Identifier:
keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8b:a8:30:1f:b4:ed:6e:d3:f6:59:d3:89:eb:0d:b4:a3:bd:
76:92:50:45:b6:49:b8:56:ff:7c:71:8c:82:20:9c:33:02:53:
2f:42:7b:81:12:7e:3c:69:73:6f:3b:50:48:70:9f:f9:eb:c2:
cf:08:3a:d8:6d:ec:11:c5:ca:5c:8f:88:ad:c6:da:42:5b:2e:
da:d8:71:5d:08:84:fe:99:15:fc:4a:cc:0a:d6:0e:33:37:ed:
07:89:32:63:a4:fe:74:af:4d:47:3f:01:9d:5a:63:9f:02:b0:
a3:a1:ea:e3:10:94:e6:f3:98:0b:04:4d:78:6d:9e:d2:44:39:
8c:7b:d8:7e:1a:ce:ee:e7:c9:8e:91:a9:22:8f:8f:89:2a:82:
3a:46:20:2d:c9:35:f6:5b:38:eb:62:d8:c1:d9:83:31:8c:9c:
f2:1c:ab:89:42:ac:b4:16:dc:f0:96:6d:39:be:6e:d1:bc:31:
28:79:c3:ad:14:0d:2e:7d:d7:e9:10:71:48:d6:d0:7d:70:9e:
ae:25:5b:56:e4:51:43:2d:58:0c:0c:6b:e1:80:28:21:dd:ba:
17:ff:80:e4:60:f8:10:f3:f0:54:36:9c:23:e4:66:8f:d4:b9:
ee:a0:ec:d8:b6:c8:38:ce:c0:7d:e8:dd:36:45:e0:2f:55:32:
42:9d:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:07 2026 by rpki-client