
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json)
Hash identifier: 9Rpd7taM33enZJYrzgf7BieZ98yWoeHTV4oH0iADgSI=
Subject key identifier: D3:B4:CE:CD:DA:50:3A:47:72:18:5F:03:B5:88:19:B6:7A:85:F6:68
Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
Manifest number: 0283
Signing time: Fri 09 Oct 2026 02:24:03 +0000
Manifest this update: Fri 09 Oct 2026 02:24:02 +0000
Manifest next update: Fri 16 Oct 2026 02:24:02 +0000
Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: R/eCXz92foGHlzZU9a13c0bVe/QopSUkcmjkeO6iHO0=)
2: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: /YmLjcVQbVo3ZZhzCl8ZHUyRrJ64Q6POActdbKR9BiU=)
3: 1C46B158029711EEB8410455C4F9AE02.roa (hash: Pa6zK+kRshF3BMg8W/LDZdS0h0pzzVUC/7JqNU9wtmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 02:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Validity
Not Before: Oct 9 02:24:02 2026 GMT
Not After : Oct 16 02:24:02 2026 GMT
Subject: CN=6ac85043-125b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:42:47:f9:15:1c:31:4c:10:24:5b:13:c9:81:
0d:d0:47:ac:af:80:e7:1b:85:21:42:54:0e:18:07:
89:68:6e:08:12:66:d0:28:ab:70:f6:05:f0:ae:f4:
c2:dd:e0:52:a7:bb:89:5c:03:8f:12:01:ad:de:cb:
2c:92:6d:f6:b2:b5:23:49:e6:4c:cc:60:cb:43:2f:
1b:4d:a9:4e:b5:cb:92:8e:60:44:d8:5f:c8:29:e2:
09:6b:a3:ac:ba:19:2a:00:ed:a3:70:df:36:cd:46:
89:a1:4c:e0:22:a8:47:b6:64:e0:3d:22:9d:2e:f1:
b4:c7:4d:48:18:60:d9:1a:12:b5:d0:6f:ed:9f:f6:
8c:6c:4f:21:a8:bb:8e:2e:11:b3:6c:b9:d6:97:7f:
78:d5:fd:6b:17:ab:6b:3b:ef:8c:43:7b:79:9d:c2:
c5:c6:3e:db:2b:64:62:fe:b2:38:ae:d5:ed:26:ab:
ff:0a:07:11:e8:99:aa:ad:f8:97:f7:55:4b:4d:b5:
f0:38:6e:cd:a1:f9:3c:48:a0:61:db:f9:ad:c6:f8:
ad:06:e7:f1:53:57:e3:70:dc:85:22:61:d9:96:d2:
30:89:a2:49:90:b2:bf:bf:6e:bc:e8:0d:03:aa:2e:
d0:75:b6:e3:ba:2f:35:67:a5:ef:bd:d9:98:dc:7c:
af:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B4:CE:CD:DA:50:3A:47:72:18:5F:03:B5:88:19:B6:7A:85:F6:68
X509v3 Authority Key Identifier:
keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:cd:46:ad:a4:5a:2b:7a:47:94:85:9c:bd:7b:78:43:37:0a:
b5:61:72:29:24:ad:53:bf:d8:9a:ff:12:d8:72:de:77:5d:43:
28:e3:b2:7e:52:a8:a2:75:87:66:ec:76:69:8c:09:17:42:97:
43:79:64:cc:2f:22:18:df:d0:50:9f:ca:a2:4f:33:80:c1:f0:
f0:a9:f8:13:c5:bd:2d:d0:52:7b:a9:ab:ce:77:a8:ae:8a:c6:
8b:17:01:88:99:ce:fe:e6:a2:3d:fa:1e:5a:f4:e9:97:e0:1f:
84:20:fc:d1:ec:2f:88:8a:ef:47:8a:ae:3c:4e:4c:2d:2d:50:
32:87:dd:d3:6f:01:a5:5a:97:20:6e:f3:27:cf:eb:e5:97:90:
50:67:13:e5:98:ab:76:d2:22:55:4e:a5:c7:5a:0d:e7:e0:87:
74:51:9f:d3:59:34:bf:b0:e0:6a:02:ba:5c:83:04:a1:2f:7f:
81:53:37:eb:17:e9:3d:29:bb:46:53:16:e0:27:50:a5:d6:6a:
ee:89:87:ef:85:b2:c9:0c:bc:e3:10:a4:24:49:4c:19:74:01:
3f:50:01:97:aa:47:e3:12:d3:30:32:71:54:95:ac:c5:4e:6f:
eb:f3:3f:73:9a:77:8f:88:89:e2:c9:23:58:a2:19:21:fb:d1:
24:3a:3b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:19:38 2026 by rpki-client