
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json)
Hash identifier: x64MbuldJE/NhpQQQegS1AqsFo3nM9jHW7s6B7pObB8=
Subject key identifier: 28:D0:13:21:B2:CF:27:15:B8:06:CF:08:87:52:41:B9:E5:FE:07:9D
Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Certificate serial: 026C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
Manifest number: 025D
Signing time: Mon 27 Jul 2026 03:43:52 +0000
Manifest this update: Mon 27 Jul 2026 03:43:52 +0000
Manifest next update: Mon 03 Aug 2026 03:43:52 +0000
Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: 7FhzOlJWoyXV4aox6Cd0I8+7XsycpVRfmg66/B7a8w4=)
2: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: /YmLjcVQbVo3ZZhzCl8ZHUyRrJ64Q6POActdbKR9BiU=)
3: 1C46B158029711EEB8410455C4F9AE02.roa (hash: Pa6zK+kRshF3BMg8W/LDZdS0h0pzzVUC/7JqNU9wtmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:43:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Validity
Not Before: Jul 27 03:43:52 2026 GMT
Not After : Aug 3 03:43:52 2026 GMT
Subject: CN=6a66d3f8-b6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:aa:9f:64:79:19:e6:7c:01:99:b3:1f:8d:d2:
c9:cd:7e:bc:5a:cb:0c:4e:2d:aa:eb:d8:fb:63:5c:
09:26:e1:04:cf:f2:67:87:44:ff:de:7c:40:c9:1c:
95:80:e3:5a:5e:e5:ee:fc:f8:77:5d:06:e1:00:e4:
c3:67:5b:89:b5:01:95:2f:56:79:9e:c7:10:68:9d:
2a:63:2e:1c:23:11:c6:93:c6:5a:5b:f6:ec:50:20:
75:4a:7c:92:a3:ac:8c:1b:d4:1f:26:ab:66:6b:29:
5e:e1:58:20:e6:cd:60:a5:5f:4c:39:e7:55:5f:35:
06:03:ee:43:36:18:03:e3:a0:49:b7:71:22:94:8e:
e3:2c:37:06:be:35:7e:7f:9a:04:29:a0:82:01:e6:
1e:d5:ab:39:53:ad:53:c0:98:64:f0:ee:55:a5:85:
75:f5:5b:e6:c9:86:8d:a9:a9:cd:7a:b1:b6:ca:6b:
3f:5e:b2:39:89:3c:8b:40:38:bd:46:b3:75:e5:5d:
72:40:56:18:31:d4:e4:46:9e:d5:8e:64:02:ab:d2:
e1:fe:38:54:9d:87:a9:38:41:ad:df:3f:58:bb:37:
49:58:0b:ed:bd:9c:50:aa:c1:2a:bc:84:88:af:20:
2a:7a:06:ab:f5:ca:b6:82:76:bc:1e:89:c9:71:83:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D0:13:21:B2:CF:27:15:B8:06:CF:08:87:52:41:B9:E5:FE:07:9D
X509v3 Authority Key Identifier:
keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:58:86:7c:61:73:66:d6:31:87:5f:0b:3d:1d:1a:82:2a:1f:
ae:7d:58:83:79:05:f8:ea:c9:f8:1c:95:37:42:6f:09:49:d1:
40:e8:36:07:ca:68:47:ec:89:10:b0:e4:b1:8b:85:84:e4:4e:
86:e0:0f:fe:ec:dd:1f:89:71:93:b9:64:e3:60:07:cc:07:f3:
58:cf:b6:78:fb:bc:60:68:b7:e8:e1:40:0b:4f:09:6e:a5:77:
0d:cb:34:c0:13:bf:98:fe:4b:12:38:79:f1:2f:3f:f9:93:cd:
c5:aa:97:3a:0a:4d:7e:41:3a:ff:58:9a:4e:36:6a:a6:93:1a:
e7:a9:9b:4b:d5:de:6c:f3:3b:f0:16:0f:8d:90:68:e7:ad:68:
a1:28:21:04:35:f3:6b:77:e6:57:d9:fc:69:a1:92:2b:2c:46:
11:d1:56:a2:82:4c:b6:0d:11:85:89:2e:44:a2:0a:2a:22:85:
52:ab:4c:78:ec:7b:7b:61:2e:c7:b4:3d:0b:a9:7c:92:21:e0:
7f:31:28:fb:cc:ff:e9:0a:58:b1:d2:47:92:89:a0:06:4a:a1:
34:25:51:3e:7d:be:52:75:62:7f:fe:07:53:08:03:9b:19:91:
e3:84:fb:87:67:fe:45:e1:0a:cb:97:49:7d:84:61:8b:96:3a:
a2:11:66:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE
NTEwM0YwOTAwHhcNMjYwNzI3MDM0MzUyWhcNMjYwODAzMDM0MzUyWjAYMRYwFAYD
VQQDEw02YTY2ZDNmOC1iNmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4qqfZHkZ5nwBmbMfjdLJzX68WssMTi2q69j7Y1wJJuEEz/Jnh0T/3nxAyRyV
gONaXuXu/Ph3XQbhAOTDZ1uJtQGVL1Z5nscQaJ0qYy4cIxHGk8ZaW/bsUCB1SnyS
o6yMG9QfJqtmayle4Vgg5s1gpV9MOedVXzUGA+5DNhgD46BJt3EilI7jLDcGvjV+
f5oEKaCCAeYe1as5U61TwJhk8O5VpYV19VvmyYaNqanNerG2yms/XrI5iTyLQDi9
RrN15V1yQFYYMdTkRp7VjmQCq9Lh/jhUnYepOEGt3z9YuzdJWAvtvZxQqsEqvISI
ryAqegar9cq2gna8HonJcYNJzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjQEyGy
zycVuAbPCIdSQbnl/gedMB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2
N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx
eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJViGfGFzZtYxh18LPR0agiofrn1Yg3kF+OrJ+ByVN0JvCUnRQOg2B8poR+yJ
ELDksYuFhOROhuAP/uzdH4lxk7lk42AHzAfzWM+2ePu8YGi36OFAC08JbqV3Dcs0
wBO/mP5LEjh58S8/+ZPNxaqXOgpNfkE6/1iaTjZqppMa56mbS9XebPM78BYPjZBo
561ooSghBDXza3fmV9n8aaGSKyxGEdFWooJMtg0RhYkuRKIKKiKFUqtMeOx7e2Eu
x7Q9C6l8kiHgfzEo+8z/6QpYsdJHkomgBkqhNCVRPn2+UnVif/4HUwgDmxmR44T7
h2f+ReEKy5dJfYRhi5Y6ohFmMQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:47 2026 by rpki-client