
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier: uTUDVtmoL+nJ/6Sc8DXd2EwpUZ94e3UaOWhOvqodVjk=
Subject key identifier: 79:2B:47:EB:83:AA:5D:7E:98:EC:A6:88:90:4B:90:52:2E:55:9F:16
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number: 019B
Signing time: Mon 21 Sep 2026 04:30:27 +0000
Manifest this update: Mon 21 Sep 2026 04:30:27 +0000
Manifest next update: Mon 28 Sep 2026 04:30:27 +0000
Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: +TZi2nv6w/jgLNzv+sUVS3wZETC1rJISiFYh+yp+XfE=)
2: AC7759D2135511F092D0090CC4F9AE02.roa (hash: cIR+w+xkklPQUMPNQXsoO8Am69Kl6nONkw9k4W8PI0Q=)
3: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: 2OACQWVvVFcyxRcug44Fzbt444tccR/OfJPwSkqIztc=)
4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: 1+rHD96cmTTrY5JYvLtnUFvcPBEAFnoYSShMEul4gsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Validity
Not Before: Sep 21 04:30:27 2026 GMT
Not After : Sep 28 04:30:27 2026 GMT
Subject: CN=6ab0b2e3-046a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:46:7d:82:01:5c:64:c4:2c:d6:ca:ae:fb:
72:c5:10:c2:50:24:3d:01:98:48:67:f3:64:23:47:
d3:19:b8:db:32:eb:87:49:01:db:9a:03:8b:b4:d3:
d6:af:fd:9d:bb:83:5f:91:9e:ba:bd:22:81:6a:f4:
da:14:43:e9:25:e6:71:db:58:d9:c6:66:09:d6:28:
3d:34:b9:cf:98:c9:97:fd:1e:8a:df:56:75:3c:9e:
1a:19:26:6d:b1:c4:25:9f:a0:26:c7:fb:28:28:44:
79:97:56:e3:ea:11:24:71:00:0a:2c:04:bb:4f:c1:
c6:4a:fe:e6:b8:cc:19:ae:0c:f1:b3:ae:e9:d8:a0:
09:85:4a:e6:81:89:77:8b:44:71:b4:56:d1:e4:82:
2f:69:e0:ea:ed:01:ba:f1:ff:c5:1d:07:b1:2a:40:
00:67:ff:9b:ee:1a:fd:75:6e:0d:07:16:95:6b:70:
cd:43:2b:cf:bc:45:2a:6a:cb:54:5b:db:e2:e7:ea:
ba:95:f7:72:5b:7c:29:1e:12:72:c0:4a:99:ab:b4:
8d:4e:f9:ff:88:70:cf:af:ea:eb:8a:df:e9:c4:1e:
01:7b:04:f3:0f:f7:11:4f:fa:15:5f:1e:cf:2c:b4:
f2:f5:ea:56:db:74:90:4f:a2:d8:ca:5f:ae:6f:33:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2B:47:EB:83:AA:5D:7E:98:EC:A6:88:90:4B:90:52:2E:55:9F:16
X509v3 Authority Key Identifier:
keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:a5:26:b8:29:0c:5b:f3:54:b0:65:08:1a:7d:95:60:d3:23:
ad:be:96:a8:ad:68:db:32:26:ba:fa:06:1d:8c:1e:02:13:7d:
01:b2:03:09:f0:10:cf:c2:30:71:7a:97:31:be:93:1b:4c:c8:
a9:2b:3e:1f:c6:84:b9:ad:ac:1c:77:42:c7:6c:5f:21:36:f7:
5f:66:4d:0a:d5:a8:5e:99:df:5a:07:fe:f4:36:59:a8:3b:67:
db:64:cb:3c:13:39:0b:ce:b1:38:8d:43:1b:56:86:b7:36:d8:
fe:c9:c8:ed:02:4c:a1:44:0d:46:c4:cd:20:86:dd:03:53:f6:
6d:8f:db:68:43:f0:31:52:d6:93:e6:c3:c8:4d:3d:56:7d:bb:
e3:c9:47:10:0e:3c:b4:e9:7c:33:d6:e2:47:a7:71:20:00:23:
83:6d:16:f8:29:3c:68:6a:1a:fe:83:05:39:18:d7:d7:08:b6:
5a:d9:f5:63:28:7f:81:2d:fc:87:2a:92:76:f4:02:55:91:1c:
e3:45:9e:46:29:54:5d:37:0c:7f:3c:bf:0d:e8:47:82:32:a5:
37:50:29:de:a8:0a:61:38:aa:3e:41:30:db:f7:ee:a5:21:03:
03:8d:d0:2c:91:6c:92:07:d1:a5:ac:1f:ca:c3:93:a3:8b:c0:
78:d3:05:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk2NzIxMTAvBgNVBAUTKDkxQUE3NzgzRkIwMjc4MTk4MzhDNEE5MUM5MUM2MEQ0
MUZCM0VFQUIwHhcNMjYwOTIxMDQzMDI3WhcNMjYwOTI4MDQzMDI3WjAYMRYwFAYD
VQQDEw02YWIwYjJlMy0wNDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuh1GfYIBXGTELNbKrvtyxRDCUCQ9AZhIZ/NkI0fTGbjbMuuHSQHbmgOLtNPW
r/2du4NfkZ66vSKBavTaFEPpJeZx21jZxmYJ1ig9NLnPmMmX/R6K31Z1PJ4aGSZt
scQln6Amx/soKER5l1bj6hEkcQAKLAS7T8HGSv7muMwZrgzxs67p2KAJhUrmgYl3
i0RxtFbR5IIvaeDq7QG68f/FHQexKkAAZ/+b7hr9dW4NBxaVa3DNQyvPvEUqastU
W9vi5+q6lfdyW3wpHhJywEqZq7SNTvn/iHDPr+rrit/pxB4BewTzD/cRT/oVXx7P
LLTy9epW23SQT6LYyl+ubzPOwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkrR+uD
ql1+mOymiJBLkFIuVZ8WMB8GA1UdIwQYMBaAFJGqd4P7AngZg4xKkckcYNQfs+6r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi9FNUY0NUFEMDVG
NTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VCbURqRXFSeVJ4ZzFCLXo3
cXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2thcDNnX3NDZUJtRGpFcVJ5UnhnMUItejdxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTY3Mi9FNUY0NUFEMDVGNTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VC
bURqRXFSeVJ4ZzFCLXo3cXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcqUmuCkMW/NUsGUIGn2VYNMjrb6WqK1o2zImuvoGHYweAhN9AbIDCfAQz8Iw
cXqXMb6TG0zIqSs+H8aEua2sHHdCx2xfITb3X2ZNCtWoXpnfWgf+9DZZqDtn22TL
PBM5C86xOI1DG1aGtzbY/snI7QJMoUQNRsTNIIbdA1P2bY/baEPwMVLWk+bDyE09
Vn2748lHEA48tOl8M9biR6dxIAAjg20W+Ck8aGoa/oMFORjX1wi2Wtn1Yyh/gS38
hyqSdvQCVZEc40WeRilUXTcMfzy/DehHgjKlN1Ap3qgKYTiqPkEw2/fupSEDA43Q
LJFskgfRpawfysOTo4vAeNMFsg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:45:42 2026 by rpki-client