
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json)
Hash identifier: NELaQqNrIfiZNoVm6y6BFQb7sQGqK2UOnkkYTjCWZi4=
Subject key identifier: 0A:03:FA:89:69:C6:E2:AE:6F:56:65:0B:3F:DC:17:42:A1:23:FD:C5
Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Certificate serial: 0219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
Manifest number: 0210
Signing time: Mon 02 Mar 2026 02:30:47 +0000
Manifest this update: Mon 02 Mar 2026 02:30:45 +0000
Manifest next update: Mon 09 Mar 2026 02:30:45 +0000
Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: ffvnLSDxe3yrKaCvr9qqKCfBk6wU76JAjO1A8lWq9Fk=)
2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: 9PDqSioWn5hBKEyF3Xh2bcZ5nBkq113KFDA0GhUPDK8=)
3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: TYXUwM1es+viCTvOIJkrXn99Lf7hGCjK/asxpXmwfB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Validity
Not Before: Mar 2 02:30:45 2026 GMT
Not After : Mar 9 02:30:45 2026 GMT
Subject: CN=69a4f657-8c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:57:85:43:fe:8f:55:b7:55:48:c0:79:74:
93:56:08:b6:ce:c1:0e:e0:e6:c5:75:cd:90:ac:d9:
6b:14:13:69:ee:b5:88:6f:71:3a:05:89:d2:3a:47:
89:aa:2d:06:60:77:59:f1:ba:aa:f5:89:ba:11:07:
1a:b4:0d:b7:04:2d:bf:3e:25:23:6a:3f:8b:cd:64:
e8:b6:ea:c6:b8:cf:19:46:cc:3e:f5:b4:a9:d4:4f:
c3:73:2f:66:e0:10:c2:88:ac:c3:9d:e5:20:42:47:
8f:0b:73:2f:a8:5e:4c:70:de:fe:f8:01:50:97:b0:
38:8d:e2:85:ef:6d:d4:39:d0:34:f5:53:59:d7:cc:
94:34:c8:e5:c6:a9:37:27:bc:dc:82:67:82:13:c6:
51:83:ff:4d:86:c1:0e:e9:0f:ec:16:9d:3c:50:3c:
7a:96:7a:4d:86:a8:1f:a5:f0:0e:f9:e1:d3:ae:ca:
ac:9e:51:c4:bc:89:e6:da:95:88:1e:34:50:27:78:
5a:c3:f5:76:f1:64:ea:f2:35:53:41:03:74:d1:4d:
60:6b:08:a5:1e:93:b2:ea:4f:57:74:a0:74:f9:38:
23:5f:4c:73:fb:73:c3:fe:a0:9a:9b:44:05:d0:d7:
ba:13:cf:14:bd:c6:ac:07:05:1d:2d:76:00:2a:f1:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:03:FA:89:69:C6:E2:AE:6F:56:65:0B:3F:DC:17:42:A1:23:FD:C5
X509v3 Authority Key Identifier:
keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:e6:5e:7c:d5:0b:71:59:73:f2:2e:72:91:2f:e2:0f:7c:2e:
e0:fa:ac:da:c5:72:46:b2:75:fe:38:e7:79:8a:bb:30:30:96:
7c:d4:1b:e6:5b:d1:aa:87:37:74:86:b1:33:93:38:2a:0c:68:
56:da:98:4c:3f:95:51:2a:bd:51:20:11:9b:bb:96:27:e7:01:
6a:24:47:0e:d9:48:ef:a6:0b:5e:b5:0e:c6:9a:2c:10:d0:d2:
f7:dc:37:5e:6a:05:a9:7a:42:cf:29:53:4b:2f:2f:b1:8e:2f:
f7:09:2e:04:95:b9:b5:18:15:de:29:a8:b8:87:17:dd:81:2d:
14:4e:5c:44:df:0c:0e:84:f4:cc:de:f2:2c:20:d3:3f:a4:4c:
b7:0d:e5:27:da:b8:c1:aa:d2:be:54:9c:39:21:d9:bd:4c:3c:
7d:b8:ff:be:e6:4f:51:d5:03:e7:b2:84:94:35:16:12:f4:f2:
97:63:34:13:48:58:29:11:96:c0:75:b9:14:55:ff:aa:eb:1f:
1b:e2:6f:14:23:d1:b6:58:27:83:d9:5a:0f:a0:88:a4:e6:ea:
2d:b8:0c:db:a4:77:4a:90:da:8a:0e:37:55:5e:63:69:1d:0a:
df:dd:12:af:a0:a8:b9:69:19:e8:02:38:9c:06:c4:29:5c:8c:
80:19:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:15 2026 by rpki-client