$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json) Hash identifier: xoeHc/Nl9Oh28ru6nWtUm3oEKzNjPcNTLreR+onKyKY= Subject key identifier: 5C:C7:CA:F6:61:F3:AD:31:45:39:B0:88:7C:1C:D4:32:96:4E:60:46 Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft Manifest number: 0223 Signing time: Sun 05 Apr 2026 02:21:27 +0000 Manifest this update: Sun 05 Apr 2026 02:21:26 +0000 Manifest next update: Sun 12 Apr 2026 02:21:26 +0000 Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: g5nXftJP2oWG/6dblt0togn6tj3bXAIRoHsLlIJ2dog=) 2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: RDJarjSiq362qNetHXrS5ilLEXM/PHX+RDsa96oRW4I=) 3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: eiQsTllpF8BMSVruQz9vNR573SLUIMJwhRO8MDJ2mOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Validity Not Before: Apr 5 02:21:26 2026 GMT Not After : Apr 12 02:21:26 2026 GMT Subject: CN=69d1c727-bba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:32:04:21:0c:ec:29:f6:e8:95:f9:1d:c0:62: 5f:e8:ec:c5:af:ca:c0:4e:e0:65:2a:e4:3e:93:a2: 67:49:17:3f:9b:0f:19:5d:18:c8:e8:2b:e3:d0:3b: 4c:2a:4a:6e:99:7e:a8:70:55:61:fa:7e:a1:67:45: 41:5e:2c:ba:dc:ee:23:a6:98:8b:58:ec:24:03:d9: b4:9a:0a:75:76:b9:80:76:d3:ae:11:6e:ff:48:ee: bf:91:e5:71:c5:e3:3a:ff:2a:20:b2:28:ec:64:f9: 69:7d:0b:27:a4:a5:f8:91:ab:62:d1:96:50:57:4e: aa:4c:de:db:65:2d:bb:dd:3b:50:d5:41:2e:8f:55: 53:91:c9:8a:de:2f:f4:2b:86:48:85:0b:ab:90:78: e8:ad:f4:80:a0:44:0c:a7:84:2c:50:fb:4b:c0:36: 4d:06:f1:75:a2:ad:30:d2:c6:c5:21:3a:d7:4a:33: b1:26:bd:f2:4a:1a:23:05:a9:e3:2d:7f:3f:19:12: 0e:5e:3e:a8:de:f0:9a:4c:b5:1b:c2:ac:26:bb:b9: 75:97:4a:79:15:11:fd:91:ff:8f:cf:39:7d:1b:80: f9:14:26:34:33:b1:01:8a:9f:1a:48:0a:5a:b4:1e: d2:fa:97:b1:6d:22:d5:94:b2:08:75:b7:95:04:1d: 81:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C7:CA:F6:61:F3:AD:31:45:39:B0:88:7C:1C:D4:32:96:4E:60:46 X509v3 Authority Key Identifier: keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:7a:1c:9d:fe:9c:e1:89:7b:cb:e4:39:b6:c6:6b:42:fe:78: e3:13:18:e4:cf:6c:76:d0:48:48:da:f0:40:e0:d7:9a:90:5a: e9:25:81:fc:ad:20:eb:d8:d8:0b:85:f9:4e:7f:21:04:26:6e: b0:d5:4e:65:2b:82:f9:99:fa:4c:df:a7:41:9c:11:46:d5:2c: 9d:37:22:cf:32:e5:5b:80:07:56:f0:40:c4:7a:a5:a5:5d:90: 0e:30:df:cd:20:41:14:07:a9:36:00:3d:9f:0a:d1:f2:fe:62: 90:76:3e:82:65:0a:49:7c:f7:77:e3:a0:6a:91:50:2d:0b:6c: 97:26:1f:1b:24:b8:bd:cc:b6:d8:c5:1a:ce:40:65:34:9d:14: cf:31:44:21:fb:18:fc:a4:7a:e6:7d:5c:0c:75:6b:48:ba:29: d7:04:b0:aa:b8:7a:bc:a7:b2:41:5d:4f:ee:c4:b6:ea:f8:f8: 28:ad:ab:1d:70:51:67:c8:64:47:a4:5c:80:20:59:53:b5:6b: 25:ff:4a:4f:a2:c3:96:d0:eb:e8:26:64:df:41:7b:66:9a:51: ae:51:bf:63:6f:4f:d5:e9:36:fd:cd:72:68:22:31:81:06:70: d0:34:1a:2a:56:97:c4:ac:cb:8c:25:f7:89:be:f8:45:47:1c: 8c:66:91:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE NTEwM0YwOTAwHhcNMjYwNDA1MDIyMTI2WhcNMjYwNDEyMDIyMTI2WjAYMRYwFAYD VQQDEw02OWQxYzcyNy1iYmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzIEIQzsKfbolfkdwGJf6OzFr8rATuBlKuQ+k6JnSRc/mw8ZXRjI6Cvj0DtM KkpumX6ocFVh+n6hZ0VBXiy63O4jppiLWOwkA9m0mgp1drmAdtOuEW7/SO6/keVx xeM6/yogsijsZPlpfQsnpKX4kati0ZZQV06qTN7bZS273TtQ1UEuj1VTkcmK3i/0 K4ZIhQurkHjorfSAoEQMp4QsUPtLwDZNBvF1oq0w0sbFITrXSjOxJr3yShojBanj LX8/GRIOXj6o3vCaTLUbwqwmu7l1l0p5FRH9kf+Pzzl9G4D5FCY0M7EBip8aSApa tB7S+pexbSLVlLIIdbeVBB2BQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzHyvZh 860xRTmwiHwc1DKWTmBGMB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2 N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgnocnf6c4Yl7y+Q5tsZrQv544xMY5M9sdtBISNrwQODXmpBa6SWB/K0g69jY C4X5Tn8hBCZusNVOZSuC+Zn6TN+nQZwRRtUsnTcizzLlW4AHVvBAxHqlpV2QDjDf zSBBFAepNgA9nwrR8v5ikHY+gmUKSXz3d+OgapFQLQtslyYfGyS4vcy22MUazkBl NJ0UzzFEIfsY/KR65n1cDHVrSLop1wSwqrh6vKeyQV1P7sS26vj4KK2rHXBRZ8hk R6RcgCBZU7VrJf9KT6LDltDr6CZk30F7ZppRrlG/Y29P1ek2/c1yaCIxgQZw0DQa KlaXxKzLjCX3ib74RUccjGaRyQ== -----END CERTIFICATE-----Generated at Mon Apr 6 13:59:57 2026 by rpki-client