
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json)
Hash identifier: swdze88bJXpnRCAXl/JcYc1r9X8L15QeOcloMEYaBk0=
Subject key identifier: 56:94:13:16:CC:45:0A:05:4B:75:66:5E:D4:1E:BE:D4:23:2D:09:26
Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
Manifest number: 024C
Signing time: Tue 23 Jun 2026 02:34:22 +0000
Manifest this update: Tue 23 Jun 2026 02:34:22 +0000
Manifest next update: Tue 30 Jun 2026 02:34:22 +0000
Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: Sn9YMjH/qUsroOu2bHg14ifPOG+8EY+DWXQZrOZFVz0=)
2: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: /YmLjcVQbVo3ZZhzCl8ZHUyRrJ64Q6POActdbKR9BiU=)
3: 1C46B158029711EEB8410455C4F9AE02.roa (hash: Pa6zK+kRshF3BMg8W/LDZdS0h0pzzVUC/7JqNU9wtmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 02:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Validity
Not Before: Jun 23 02:34:22 2026 GMT
Not After : Jun 30 02:34:22 2026 GMT
Subject: CN=6a39f0ae-65bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:a9:cf:97:1b:94:b2:74:3c:87:b9:22:b5:
cf:ef:65:8c:58:71:99:78:20:38:da:69:21:ba:b4:
fa:ec:18:0c:f2:e4:4a:32:20:03:d9:ec:04:ce:56:
e1:70:7f:07:47:c3:bf:e5:02:f7:e8:4b:e9:b5:10:
1e:c7:66:81:99:e9:9d:6f:7d:e8:72:4c:16:3f:9c:
f9:73:09:58:f0:5a:97:3f:8b:d8:51:d0:33:00:a7:
42:c0:13:32:dd:f7:24:06:8e:e5:10:f5:46:e4:ba:
d1:fc:72:21:3b:05:46:74:75:36:bc:2f:45:04:11:
76:17:8a:9f:3a:6d:f4:19:a0:a4:c1:b2:eb:93:59:
82:c0:56:a9:dc:04:90:41:8c:2b:58:57:94:58:de:
14:a2:c1:64:a1:82:1d:0a:b8:61:b3:39:68:c9:38:
7e:8e:09:b4:f9:1f:0e:e2:d7:76:0e:5d:cb:70:ac:
0c:2b:e7:1c:2c:83:bd:15:23:b6:ee:4e:ea:f1:c2:
09:67:aa:0a:25:68:18:56:42:e0:bd:06:1d:4f:56:
59:29:14:72:7c:40:34:1b:62:db:57:0a:f7:fc:04:
d3:8e:39:76:b0:19:2a:98:f0:18:98:45:ac:55:19:
c8:36:67:2e:f2:d8:56:b8:72:2a:db:91:d8:08:36:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:94:13:16:CC:45:0A:05:4B:75:66:5E:D4:1E:BE:D4:23:2D:09:26
X509v3 Authority Key Identifier:
keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:bf:ce:43:6f:a6:98:af:fa:14:82:e2:0e:ac:92:4f:6a:f7:
f8:f3:17:a3:6b:c2:f3:df:08:10:bc:73:cb:e9:94:53:17:8b:
df:ee:29:7d:a5:2b:77:21:9c:75:2f:75:11:73:9e:b5:de:19:
89:f2:85:85:55:a0:47:5b:da:92:ed:44:8f:14:7e:f7:09:e1:
74:63:80:03:ae:1f:58:10:23:20:60:b8:2e:c3:2e:d8:73:7a:
f4:da:4f:57:49:80:2c:d9:f4:4e:d5:d8:7f:7d:62:98:ab:b7:
13:8e:89:a8:3f:71:24:d4:64:84:58:e3:2e:c0:8e:f6:74:f9:
fe:bb:89:1b:85:e8:91:18:38:d7:36:ae:19:dc:bb:f5:62:46:
b8:24:21:87:24:f3:6f:16:b3:1c:56:1e:26:46:30:57:0e:b5:
51:4f:fe:52:d6:88:16:8e:ab:ea:68:9a:3b:4f:b5:ed:9f:f4:
c5:9e:4f:14:61:ac:53:61:67:bd:3d:73:0c:2d:54:eb:09:0c:
bb:a7:e8:a0:da:77:e5:39:b0:59:0d:3c:a3:5a:2b:c2:be:c2:
2f:a1:a4:94:b1:fe:4f:2c:c6:81:45:0d:dd:0b:9b:86:3c:d6:
6d:6d:4f:d3:0c:29:2c:ef:9e:45:c9:01:7a:40:42:c0:08:4d:
c6:b1:ca:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:38 2026 by rpki-client