
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json)
Hash identifier: RmMV22qVHu9tvesebmtUPT4f2dKGRYoqhHdHxOXHXrk=
Subject key identifier: FD:86:23:10:6B:8F:47:84:16:5F:98:6F:7F:97:AC:ED:C2:0B:5B:60
Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Certificate serial: 0243
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
Manifest number: 0236
Signing time: Wed 13 May 2026 02:41:56 +0000
Manifest this update: Wed 13 May 2026 02:41:55 +0000
Manifest next update: Wed 20 May 2026 02:41:55 +0000
Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: 2WU0XpJtTzmlheF8+JhYw6CzTKXMj63lJ2hvG05uDT0=)
2: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: eiQsTllpF8BMSVruQz9vNR573SLUIMJwhRO8MDJ2mOU=)
3: 1C46B158029711EEB8410455C4F9AE02.roa (hash: RDJarjSiq362qNetHXrS5ilLEXM/PHX+RDsa96oRW4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Validity
Not Before: May 13 02:41:55 2026 GMT
Not After : May 20 02:41:55 2026 GMT
Subject: CN=6a03e4f4-43cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:b2:6a:72:55:9e:c0:09:ff:c9:08:e1:f4:
d5:00:d6:c0:af:2a:54:06:87:01:bc:48:db:58:8d:
05:10:15:28:07:4c:30:a8:6c:47:d5:b4:8a:15:74:
b5:64:22:dd:39:7e:03:f5:2f:68:3f:14:f4:c4:15:
c2:48:d8:e3:a4:6f:9c:38:2e:70:98:84:64:f9:7e:
d2:ea:5d:ad:b4:c8:a3:61:2c:fa:00:c7:96:8c:a3:
b0:cb:52:cc:a2:5e:cc:b5:64:ea:52:3a:32:86:c4:
2a:2c:5e:8e:57:28:34:76:ad:8e:d5:a4:a0:b5:12:
f3:8e:a1:45:a0:52:86:d8:4f:2f:d4:76:9d:a7:c7:
31:55:9c:f2:a2:d3:7b:a0:0a:53:75:c2:d7:62:68:
b9:40:6f:17:83:4c:51:bf:e7:b8:3a:9c:79:c3:13:
51:7b:c2:a7:c9:6f:91:47:a2:94:7c:fb:c4:6e:7a:
06:05:07:a3:69:08:8c:c4:90:c4:94:9a:34:01:28:
08:09:1f:c0:3a:b9:c4:02:97:fa:72:28:fb:9d:5a:
05:af:cb:11:c1:5e:1c:ba:17:b3:ed:30:9d:c7:bf:
0f:57:50:b6:58:94:3f:dc:d6:70:e0:09:16:b0:81:
72:08:08:45:ca:ea:33:7b:29:bc:3d:65:e3:28:05:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:23:10:6B:8F:47:84:16:5F:98:6F:7F:97:AC:ED:C2:0B:5B:60
X509v3 Authority Key Identifier:
keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:30:cc:c5:08:f3:70:c6:8b:64:85:da:c3:c9:9b:76:74:b5:
02:7c:24:45:d1:b6:26:ed:29:b0:b1:13:9e:18:c2:20:0a:97:
dc:a0:82:ad:2e:e9:f6:74:07:c1:9d:14:51:96:f6:8a:43:ab:
05:50:eb:00:1c:a1:3e:9f:0a:b1:0c:9d:54:90:bd:91:a5:12:
35:f2:4b:54:4e:7f:65:57:1a:d8:29:cd:23:16:4f:0d:53:7a:
b0:c4:de:ac:0d:09:f3:fb:ba:6f:d1:14:99:ec:89:65:84:dd:
f2:a6:74:cb:a5:23:d0:0f:45:bd:51:7e:98:c5:47:c7:2f:2b:
91:b0:63:cb:dd:bc:77:8a:a7:cf:d8:78:e1:89:f1:4d:f0:31:
c3:01:d5:b5:70:78:e8:b2:39:5f:66:e8:c3:ca:1e:76:29:6d:
88:33:4c:6b:0c:b1:88:86:79:af:c3:4a:6e:03:c8:4e:77:44:
85:ae:09:16:13:7d:a8:59:03:6f:81:d4:55:bf:c8:21:a9:40:
65:f0:2e:d0:1f:3f:23:f1:30:df:e1:92:b9:22:80:e5:9c:4b:
2d:47:f2:4c:28:df:9f:98:71:09:22:48:01:42:83:dd:bc:83:
6b:53:26:37:46:0a:3d:5a:dd:a7:13:12:c8:00:27:3b:e9:b3:
b5:b0:62:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:45:12 2026 by rpki-client