
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File: kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier: ida2DqpEwbHGVbdg1IoGVi71a3U5YxSS54mTVj+CRPk=
Subject key identifier: 7C:72:DA:09:C4:09:59:97:44:50:09:6D:AE:2E:87:D7:2E:42:2B:58
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number: 0132
Signing time: Sun 01 Mar 2026 06:46:36 +0000
Manifest this update: Sun 01 Mar 2026 06:46:35 +0000
Manifest next update: Sun 08 Mar 2026 06:46:35 +0000
Files and hashes: 1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: FxHRgmmoS+wfd49Vq6MWSByVyTxTA21Dfv5HRIiCvoo=)
2: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: vhbGmjHPdOQaH+bh64NTaxDM6fa2DZigRG71btxol5I=)
3: AC7759D2135511F092D0090CC4F9AE02.roa (hash: P73GyQ+xRG30WPGNAHQCLDV4zJy6doRK0RrvTedfB+M=)
4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: /OrLVPVfTQAPE0kSOqhjwV7inTaQkqbRHnBk9gH3iZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Validity
Not Before: Mar 1 06:46:35 2026 GMT
Not After : Mar 8 06:46:35 2026 GMT
Subject: CN=69a3e0cb-0421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:f2:ac:59:85:55:57:71:a1:94:f9:23:37:
57:8e:4c:e2:aa:ce:06:06:a4:53:b5:32:e3:34:20:
f8:ab:7f:6b:e5:30:37:ff:e7:5c:79:20:36:5f:26:
52:6c:86:47:d0:f6:9b:e4:c6:55:3d:94:6a:46:b0:
97:85:cd:64:db:ef:af:bc:d3:3d:4a:71:7a:8c:5c:
ed:af:dd:50:af:00:8b:f9:25:c6:3f:7d:30:98:d9:
bd:76:6f:97:c3:d0:d1:c2:8a:68:a8:45:7b:b8:96:
eb:3c:58:50:c4:9c:dd:2b:ba:ca:cc:ee:ba:29:51:
02:dc:97:29:ef:4c:08:0b:a4:94:f0:0e:90:e2:95:
00:87:88:b7:20:13:46:77:c7:82:dc:fd:d0:7c:8f:
ed:71:9a:7c:94:78:04:0e:12:33:30:39:3d:f1:15:
e3:5b:1c:71:c0:60:9b:7b:da:ed:df:9e:9a:85:1f:
ca:64:e7:2e:00:a1:68:28:a4:02:5a:fe:e5:9b:95:
87:63:2d:22:07:13:3f:f3:7e:bf:4d:77:ae:45:5e:
78:5a:8b:ba:d8:2e:6d:29:55:51:30:bc:1d:02:14:
55:93:26:0f:34:ab:8b:ca:63:c0:f9:47:f1:da:a8:
2f:13:56:05:f4:03:05:48:0b:e0:d1:f3:8b:5c:ee:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:72:DA:09:C4:09:59:97:44:50:09:6D:AE:2E:87:D7:2E:42:2B:58
X509v3 Authority Key Identifier:
keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b8:43:99:fa:8a:84:9a:75:46:40:2f:5e:39:17:32:86:5d:
60:16:1f:ad:52:59:89:04:79:66:25:fd:49:b1:f5:58:ca:d6:
a7:40:9b:69:73:77:59:37:1c:96:34:87:99:8f:20:00:63:10:
5a:86:f3:ac:99:98:16:8f:15:16:69:f8:47:d2:45:2b:ee:22:
3e:09:e0:c6:97:fe:d9:0f:a2:5c:1c:60:16:d7:2b:8c:fe:89:
a2:40:92:a1:2b:89:f9:5a:41:dd:57:3e:44:7f:3b:e6:00:39:
c0:a9:6a:72:cb:bb:b4:59:e4:5b:0d:56:6c:52:9f:94:19:ae:
f9:70:84:8b:9c:23:da:8b:82:ba:00:ee:8f:51:11:a9:64:8e:
d1:29:6c:7f:97:2f:87:3c:bc:40:fa:69:a5:00:46:ca:ca:09:
e2:cc:ee:35:31:a1:25:4f:5f:f8:cf:1f:2a:05:12:25:be:17:
a5:0e:39:1f:5f:32:52:d7:0c:02:30:30:4d:b3:00:7e:c8:ff:
12:cd:d6:cb:87:a7:fe:3a:1f:16:55:a3:da:a1:93:0d:21:71:
2e:af:59:7c:2e:91:85:e7:9d:da:c9:7a:47:90:8e:ba:f9:86:
dd:f1:db:96:2d:8e:9a:28:c2:67:ab:fe:e1:62:6c:52:02:08:
6b:8b:f0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:17 2026 by rpki-client