
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json)
Hash identifier: SbRfcvLAI+T48b+/dC46q8zouab9pL1o9I1Txu4pM50=
Subject key identifier: D4:56:6E:A2:3A:B3:09:17:7A:B9:F0:AE:D8:33:29:07:28:D8:09:1B
Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Certificate serial: 0278
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
Manifest number: 0269
Signing time: Wed 19 Aug 2026 02:42:02 +0000
Manifest this update: Wed 19 Aug 2026 02:42:02 +0000
Manifest next update: Wed 26 Aug 2026 02:42:02 +0000
Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: zDFRpsOQ7WGGDfLjtvbtz4N4bmllh7dsZOfSqffHw64=)
2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: Pa6zK+kRshF3BMg8W/LDZdS0h0pzzVUC/7JqNU9wtmY=)
3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: /YmLjcVQbVo3ZZhzCl8ZHUyRrJ64Q6POActdbKR9BiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Validity
Not Before: Aug 19 02:42:02 2026 GMT
Not After : Aug 26 02:42:02 2026 GMT
Subject: CN=6a8517fa-8f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:c8:a8:07:6b:10:fd:dd:98:d2:b4:33:32:
22:91:60:be:6a:4a:bd:d9:43:7f:15:0d:ad:45:b8:
fe:a6:01:98:10:27:c3:3f:97:16:b0:1a:ab:dd:2f:
7f:04:fc:d6:04:75:f4:b7:7b:76:16:c1:c8:9d:8a:
36:da:e3:83:92:f1:b4:e5:ae:ad:21:d9:2d:6b:64:
8e:7b:f8:e2:88:b6:90:98:83:89:b5:6b:77:ee:b9:
59:c2:35:b7:f7:74:17:98:08:0c:17:28:1f:25:43:
43:c9:33:31:3a:42:ec:10:51:f1:c1:6b:2a:3d:3f:
e3:90:af:e0:d9:89:63:58:b4:02:3e:69:d8:fe:ed:
71:9f:c5:2a:b0:66:ee:b8:85:b7:c4:4d:6e:90:a5:
ea:07:95:5c:98:02:1f:45:a0:07:ff:63:fb:c6:76:
43:85:14:00:62:41:57:3f:52:e8:52:5f:31:4f:75:
93:be:01:9b:73:c9:ba:1f:ee:3b:e7:07:3f:81:34:
f8:45:af:be:50:0d:29:f2:ad:98:82:59:a5:9f:82:
98:44:68:f6:56:d4:4f:25:8d:af:61:95:67:b4:15:
6a:d5:07:89:7a:89:39:41:e8:64:8b:bc:61:ba:8b:
e0:b6:f8:da:ae:74:0c:27:dd:f3:53:9e:9a:7a:05:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:56:6E:A2:3A:B3:09:17:7A:B9:F0:AE:D8:33:29:07:28:D8:09:1B
X509v3 Authority Key Identifier:
keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:db:b0:97:7e:a5:89:9f:c4:0e:c7:e4:7a:48:71:02:3f:7c:
7f:ec:94:cf:b9:da:d0:4e:d3:82:f6:c3:e6:a5:0b:fe:27:26:
bf:25:32:10:ac:a4:b6:54:57:04:2d:57:88:ec:b3:f8:03:a4:
f7:93:49:18:38:8e:ac:3b:d1:a7:27:7f:ff:2e:af:1e:70:1f:
54:b5:d6:a3:0d:e4:7a:f6:c3:c4:fc:e7:78:36:2f:19:4a:ed:
f0:5a:5f:05:18:3b:77:64:01:7b:19:b0:2c:d0:fe:86:68:e2:
e8:68:f5:5b:d5:49:53:09:43:f0:e8:e1:4b:50:01:28:cb:79:
88:69:5e:3f:5f:4f:c0:f3:23:3f:02:ca:62:02:b6:34:7e:20:
c4:90:2f:39:e7:d8:11:b6:58:8e:27:36:50:07:ed:51:58:75:
d5:71:31:3a:f0:b1:0f:b3:70:a2:50:06:9e:df:c1:63:23:14:
0b:ba:ca:84:c5:4a:ae:a0:90:44:cd:88:b9:93:a6:60:c6:68:
b2:a9:ee:47:35:cf:4c:7b:4c:67:fe:5b:8c:f5:5d:69:5b:77:
97:17:a7:e6:18:de:19:9c:1e:25:29:75:d0:4d:83:61:e6:b7:
17:ca:e6:5f:27:ad:34:d4:ce:73:61:52:9c:d1:b6:aa:f0:ef:
ac:0a:8c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:33 2026 by rpki-client