$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json) Hash identifier: 3oRiczTOPFuRD8cEfi85cIKbYVOIYbk5ELb3Cb4Rvu0= Subject key identifier: 09:62:9F:94:89:5A:C8:DE:A4:9D:F2:06:9B:83:03:C0:BD:CE:21:7C Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft Manifest number: 014C Signing time: Fri 17 Apr 2026 05:07:20 +0000 Manifest this update: Fri 17 Apr 2026 05:07:20 +0000 Manifest next update: Fri 24 Apr 2026 05:07:20 +0000 Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: C2OjyDVyZFxxk0bxCrZyPNSByg0y6/j1okRibCKpcJs=) 2: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: 1+rHD96cmTTrY5JYvLtnUFvcPBEAFnoYSShMEul4gsc=) 3: AC7759D2135511F092D0090CC4F9AE02.roa (hash: cIR+w+xkklPQUMPNQXsoO8Am69Kl6nONkw9k4W8PI0Q=) 4: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: 2OACQWVvVFcyxRcug44Fzbt444tccR/OfJPwSkqIztc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Validity Not Before: Apr 17 05:07:20 2026 GMT Not After : Apr 24 05:07:20 2026 GMT Subject: CN=69e1c008-e0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:06:86:90:19:1a:f4:4a:1c:9c:1b:00:b4: ef:66:3d:69:f9:a3:f9:a4:c9:61:39:9a:d1:c6:23: 79:66:27:83:e0:68:6a:a4:8a:b0:09:99:87:a1:a6: cc:0b:44:9d:ed:12:07:47:3c:3a:58:41:b4:69:57: 87:61:90:a3:d6:85:2a:12:a6:37:10:85:d5:59:d7: 7d:01:4c:b8:55:3e:98:30:1a:8f:e8:65:58:0f:a3: 9d:d9:00:6a:c9:3f:a0:19:2d:10:f0:46:e2:db:a8: 2e:8e:44:f6:36:e0:14:31:d6:68:39:a7:9d:8a:7e: 8b:e6:5e:76:85:78:8d:7c:82:c3:0b:2c:29:d4:de: 6e:a4:0e:e5:0f:6f:08:ac:a2:d1:64:19:f5:75:b4: a7:22:23:17:8e:2f:12:5c:b3:5e:f2:e5:f0:6c:9c: 3e:e0:86:4e:f1:1b:fd:8b:dd:4b:8b:7a:15:9d:a0: 82:6b:66:f6:eb:46:17:95:25:fa:d0:d4:1e:73:57: 00:d2:a1:86:2d:6b:6a:da:42:36:58:b5:6d:78:a3: 31:c2:8e:ef:8e:b7:a8:96:ca:9a:3b:f2:bd:83:37: 0a:7d:cc:a1:38:56:5c:eb:8b:7a:c7:93:43:7e:8d: 40:7c:65:4e:99:e1:0b:e9:10:fa:36:de:ab:e2:cf: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:62:9F:94:89:5A:C8:DE:A4:9D:F2:06:9B:83:03:C0:BD:CE:21:7C X509v3 Authority Key Identifier: keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1b:d2:34:aa:59:b8:08:bf:1c:c2:98:bf:62:27:c5:e7:3d: b8:60:95:2f:3e:ba:04:99:57:4c:31:87:f9:85:3b:6c:29:0f: 4a:23:f4:e2:10:87:d9:e2:b2:c0:99:01:34:ee:eb:ed:e4:2e: d7:cf:52:69:35:72:45:ea:1c:bf:7c:1d:96:16:f1:5e:49:b2: 36:24:63:b4:b7:c5:b2:21:5c:62:56:e4:74:e7:b9:4c:1b:30: 5b:98:ce:b4:ac:d2:36:7c:2a:9c:02:f3:54:6f:fb:f2:94:9c: 79:04:a8:c8:c3:70:7d:ee:20:3a:9a:68:8f:0a:6d:69:0a:26: 63:4c:07:66:09:35:29:e2:f1:17:a7:e3:d8:30:28:05:02:a2: 4e:1e:bf:30:c8:e6:1f:09:41:60:e6:74:8c:3c:5a:ee:f2:5e: a6:f0:87:25:a3:49:8f:28:e4:eb:1b:d4:48:3e:8d:5f:05:bb: de:81:4c:cc:26:d0:2f:d4:08:9e:ce:ca:34:69:98:64:fa:23: f6:65:14:c8:1a:f0:88:a0:5d:8f:52:59:22:00:e8:23:9c:88: ec:2c:cd:13:12:fb:fd:09:3e:e1:59:09:7a:12:28:3a:5a:5c: 9f:69:91:97:8e:89:02:91:19:43:fa:8f:4a:96:7f:33:91:0e: 41:70:94:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk2NzIxMTAvBgNVBAUTKDkxQUE3NzgzRkIwMjc4MTk4MzhDNEE5MUM5MUM2MEQ0 MUZCM0VFQUIwHhcNMjYwNDE3MDUwNzIwWhcNMjYwNDI0MDUwNzIwWjAYMRYwFAYD VQQDEw02OWUxYzAwOC1lMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzwGhpAZGvRKHJwbALTvZj1p+aP5pMlhOZrRxiN5ZieD4GhqpIqwCZmHoabM C0Sd7RIHRzw6WEG0aVeHYZCj1oUqEqY3EIXVWdd9AUy4VT6YMBqP6GVYD6Od2QBq yT+gGS0Q8Ebi26gujkT2NuAUMdZoOaedin6L5l52hXiNfILDCywp1N5upA7lD28I rKLRZBn1dbSnIiMXji8SXLNe8uXwbJw+4IZO8Rv9i91Li3oVnaCCa2b260YXlSX6 0NQec1cA0qGGLWtq2kI2WLVteKMxwo7vjreolsqaO/K9gzcKfcyhOFZc64t6x5ND fo1AfGVOmeEL6RD6Nt6r4s+YCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAlin5SJ WsjepJ3yBpuDA8C9ziF8MB8GA1UdIwQYMBaAFJGqd4P7AngZg4xKkckcYNQfs+6r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi9FNUY0NUFEMDVG NTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VCbURqRXFSeVJ4ZzFCLXo3 cXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2thcDNnX3NDZUJtRGpFcVJ5UnhnMUItejdxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTY3Mi9FNUY0NUFEMDVGNTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VC bURqRXFSeVJ4ZzFCLXo3cXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGhvSNKpZuAi/HMKYv2Inxec9uGCVLz66BJlXTDGH+YU7bCkPSiP04hCH2eKy wJkBNO7r7eQu189SaTVyReocv3wdlhbxXkmyNiRjtLfFsiFcYlbkdOe5TBswW5jO tKzSNnwqnALzVG/78pSceQSoyMNwfe4gOppojwptaQomY0wHZgk1KeLxF6fj2DAo BQKiTh6/MMjmHwlBYOZ0jDxa7vJepvCHJaNJjyjk6xvUSD6NXwW73oFMzCbQL9QI ns7KNGmYZPoj9mUUyBrwiKBdj1JZIgDoI5yI7CzNExL7/Qk+4VkJehIoOlpcn2mR l46JApEZQ/qPSpZ/M5EOQXCUHQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:57:25 2026 by rpki-client