
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json)
Hash identifier: 6sON03pJ/DtsSlFsrdutLZet7MM+RJu93XqgzASek3g=
Subject key identifier: 27:E4:08:3C:4D:41:4F:55:F3:92:C9:32:BC:00:3B:79:0D:5C:EE:9D
Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
Manifest number: 0245
Signing time: Sat 13 Jun 2026 02:29:37 +0000
Manifest this update: Sat 13 Jun 2026 02:29:36 +0000
Manifest next update: Sat 20 Jun 2026 02:29:36 +0000
Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: AvwQYHYcXEvW1wtVkRZdcG94IaeStgK5heNK084c8UU=)
2: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: eiQsTllpF8BMSVruQz9vNR573SLUIMJwhRO8MDJ2mOU=)
3: 1C46B158029711EEB8410455C4F9AE02.roa (hash: RDJarjSiq362qNetHXrS5ilLEXM/PHX+RDsa96oRW4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Validity
Not Before: Jun 13 02:29:36 2026 GMT
Not After : Jun 20 02:29:36 2026 GMT
Subject: CN=6a2cc091-6e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:1f:21:72:0f:3e:72:74:26:9f:92:c6:7a:
ed:16:a5:35:6d:d9:5e:13:28:d1:f3:70:cb:4b:dd:
2f:95:85:8c:2a:99:64:be:a5:90:8d:2a:90:c6:da:
22:5f:d3:6c:22:bb:28:89:4c:f8:41:60:34:6e:dd:
99:56:fc:a5:0f:75:80:f3:ae:70:4a:66:6d:ce:a7:
a2:52:e3:a7:f3:48:15:c3:98:7e:44:d8:8b:c0:c4:
29:e0:66:6f:d9:fc:33:03:4d:bf:d7:96:8e:c4:ba:
5b:a3:0a:cc:1a:ee:13:36:01:d4:5c:ba:2b:05:be:
5b:b6:9c:93:a1:69:e4:0e:4f:f1:ce:6c:4d:91:0f:
f0:e9:95:07:ce:12:17:31:e6:4c:c8:00:83:07:af:
e5:3d:bb:ca:f8:4d:ba:ad:4f:4e:26:4d:0a:1e:6c:
b5:39:43:d2:58:a6:51:79:d9:bb:e8:cd:0b:91:44:
22:7c:ed:7a:4d:8f:12:e8:48:00:cb:29:42:20:cb:
51:e8:bb:1d:77:a4:7f:f0:d1:c5:50:a3:93:f1:b0:
80:84:3a:51:56:6d:73:ab:66:7b:a1:5c:e9:e1:f7:
4b:f1:fc:19:ab:6a:22:1b:fc:a1:f9:b9:04:30:74:
78:03:ff:14:1f:07:e0:b6:bb:c3:2c:43:c2:2d:3d:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E4:08:3C:4D:41:4F:55:F3:92:C9:32:BC:00:3B:79:0D:5C:EE:9D
X509v3 Authority Key Identifier:
keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:9b:63:d5:23:0c:1b:c1:a0:fe:6d:4e:9d:d3:2c:7a:a4:43:
e9:61:a4:01:19:9b:5b:1f:18:3b:5a:83:1b:2d:c0:a7:6b:f8:
e6:f0:f8:7c:d3:d7:3a:5c:3d:f2:be:3e:35:57:19:d1:d3:18:
ad:7d:87:95:85:7c:52:73:7f:33:db:66:81:a2:74:2c:34:a7:
84:97:b2:8f:43:2e:a4:9e:7c:90:9c:b6:fb:dc:0d:66:65:5e:
a9:79:99:8b:fe:f9:1d:fb:66:74:92:fd:2f:22:86:1b:18:80:
16:dd:40:a5:79:d5:3c:06:f0:fb:d9:7a:b4:fc:12:e3:1e:15:
96:f0:d0:f7:47:7d:a8:2c:fe:3d:68:6d:6b:98:91:02:1b:50:
df:e0:13:f5:e4:bf:45:ac:b3:ec:d2:b8:3d:23:e7:32:ea:d2:
8f:12:1f:81:d5:4a:2a:46:d4:24:bc:bd:bf:3b:2c:cf:41:55:
98:33:eb:68:90:be:77:e8:18:fb:93:48:48:9b:89:db:ee:b2:
51:f2:bb:f1:17:ae:14:64:be:74:0d:97:e5:3b:fb:4d:f5:51:
be:11:47:ea:00:fd:09:97:84:97:97:2a:08:74:14:29:65:5c:
3b:9c:22:c3:51:0e:f2:ff:b6:f5:49:ee:75:5a:d8:d7:86:07:
7c:3c:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:10 2026 by rpki-client