
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier: V0ojfVwjNbDXHJuRPgftS2F4c04gMxDRfeeT/UW+Geo=
Subject key identifier: B1:4E:C5:D7:E9:AC:FE:02:8F:96:6E:1E:E4:A0:27:D3:9F:C4:28:AE
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number: F6
Signing time: Mon 03 Nov 2025 05:27:42 +0000
Manifest this update: Mon 03 Nov 2025 05:27:42 +0000
Manifest next update: Mon 10 Nov 2025 05:27:42 +0000
Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: a85xz+AjaPlB6lgF762sIlzZsggI85Cu+9wevRnzD28=)
2: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: vhbGmjHPdOQaH+bh64NTaxDM6fa2DZigRG71btxol5I=)
3: AC7759D2135511F092D0090CC4F9AE02.roa (hash: P73GyQ+xRG30WPGNAHQCLDV4zJy6doRK0RrvTedfB+M=)
4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: /OrLVPVfTQAPE0kSOqhjwV7inTaQkqbRHnBk9gH3iZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Validity
Not Before: Nov 3 05:27:42 2025 GMT
Not After : Nov 10 05:27:42 2025 GMT
Subject: CN=69083d4e-4979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:16:03:47:90:37:2f:9d:73:df:41:5a:7a:
30:7d:ac:7b:d6:db:74:6f:a8:14:57:3d:db:1e:55:
af:6c:95:db:bc:3a:48:4b:8f:20:39:77:6e:ad:9c:
54:18:69:43:ef:79:04:a2:b1:ed:e5:88:fa:0f:7c:
03:32:70:c9:8b:17:40:42:ae:80:0f:41:02:eb:2d:
50:30:ba:2c:20:7c:cb:01:30:c2:65:e8:11:1d:53:
ba:24:eb:be:a8:1e:39:4b:71:5e:09:76:55:cf:96:
65:bb:c1:56:79:5f:18:ea:d2:e1:c7:f3:e2:c7:73:
99:6c:dc:cd:9c:bf:be:35:10:af:41:6c:84:cf:32:
4c:e5:e8:27:5e:84:64:61:0b:10:ea:6e:0c:80:a6:
8f:d1:b7:41:fd:2b:fc:4e:2e:f9:ad:78:91:bf:e2:
80:6c:64:33:b4:dc:75:f5:5d:8b:92:cd:d2:a4:9c:
1c:33:9c:a8:86:60:72:ab:d2:d6:05:1a:99:70:58:
f1:fd:4e:bb:12:83:c4:ab:b0:53:bd:33:d2:55:41:
c9:d1:1c:10:92:b8:6e:e3:97:2b:81:90:2b:3d:66:
93:0c:52:cb:1e:e5:1b:4d:95:93:47:0c:14:2f:06:
65:85:7d:25:58:01:83:a7:5c:53:7c:16:5e:d0:a8:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4E:C5:D7:E9:AC:FE:02:8F:96:6E:1E:E4:A0:27:D3:9F:C4:28:AE
X509v3 Authority Key Identifier:
keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0d:4f:00:fb:5b:90:8c:dc:43:09:00:1e:38:3f:99:da:5c:
07:07:b0:2e:8c:d5:88:51:8f:e5:c4:a2:ee:f3:89:cf:20:e8:
59:a3:d2:73:6e:4d:88:4d:03:dc:d5:d8:7e:a1:69:c6:3f:ee:
0e:df:5b:54:b4:09:ba:93:61:37:30:7c:3b:95:90:58:05:57:
77:20:16:c4:6b:f8:22:2b:8b:af:27:a7:2d:94:63:c6:5c:ab:
ca:9c:cb:43:07:64:0c:b7:f3:25:7c:3a:bf:1e:9a:32:a6:cb:
ea:47:27:59:92:bc:97:ef:5a:4d:c5:f8:2c:29:f2:3d:49:f5:
fc:e3:fc:70:03:1f:da:50:7f:07:8f:13:30:23:42:c1:1a:13:
07:da:5f:36:c5:b6:c0:c1:fd:56:c9:29:ae:c7:cb:ad:e1:92:
00:e4:67:65:5a:ec:54:21:f8:17:5b:fc:af:c0:1d:c7:fc:2c:
09:26:a1:69:ce:02:20:9e:11:34:9e:10:e4:84:d2:57:63:2a:
65:11:67:74:3f:96:a7:a6:a9:1d:c1:c8:a9:fd:ea:57:0c:a2:
c1:57:ed:4f:11:ed:c3:2b:3d:a4:ea:2c:cd:88:0f:90:da:ea:
28:c4:49:7a:f8:ff:4b:e0:00:0a:b5:83:b4:70:80:a1:61:76:
51:60:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:24 2025 by rpki-client