$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json) Hash identifier: vBMT6LY/4p9N484xoFtqk1UlnU/3O5K3QMeuNDMEp4c= Subject key identifier: BE:86:31:4A:25:DC:A9:80:D5:60:82:61:E1:27:1E:74:FC:B1:79:FD Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Certificate serial: 026A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft Manifest number: 025B Signing time: Thu 23 Jul 2026 03:27:41 +0000 Manifest this update: Thu 23 Jul 2026 03:27:40 +0000 Manifest next update: Thu 30 Jul 2026 03:27:40 +0000 Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: cLskSW+AeufvrU3eniH/fzu8qDXyZHFbOA7cdkFkfYM=) 2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: Pa6zK+kRshF3BMg8W/LDZdS0h0pzzVUC/7JqNU9wtmY=) 3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: /YmLjcVQbVo3ZZhzCl8ZHUyRrJ64Q6POActdbKR9BiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 618 (0x26a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Validity Not Before: Jul 23 03:27:40 2026 GMT Not After : Jul 30 03:27:40 2026 GMT Subject: CN=6a618a2d-d919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fd:0c:b1:64:1f:2f:86:56:c3:26:7a:79:29: ec:5c:ed:70:19:e2:a6:29:f8:85:2f:02:86:1b:dc: de:57:f3:d5:83:1c:db:fa:a9:fa:7b:8d:07:0b:4e: 50:d6:23:1e:0e:36:ca:b9:cb:ca:b6:74:43:5f:a9: e5:40:f1:24:17:78:a0:f0:58:6b:bc:79:3b:cd:72: 99:f8:42:0d:58:e8:79:f5:1c:f2:f6:0f:e9:71:9b: ab:17:e9:fd:90:08:94:25:de:ba:7e:5b:18:23:2c: b2:43:00:94:7c:9d:30:52:42:03:ee:9e:3f:eb:c2: 03:c2:9e:92:c6:98:94:85:38:d6:cf:5f:df:ed:42: 1e:83:a5:95:38:6f:9b:91:d8:84:b6:2c:9b:a7:68: 42:dc:dc:00:b0:b4:83:03:51:51:e6:d0:c3:64:33: 09:3b:04:a3:ae:e5:dd:ca:5e:8e:a4:a5:00:df:25: 69:3d:f2:bd:98:03:17:f8:83:89:7e:db:1d:ea:38: 4c:86:82:ba:07:4f:dd:85:30:a4:a9:25:eb:35:9a: 81:e4:57:bc:9f:5f:23:f7:09:ec:c6:61:02:53:a5: da:a0:97:5a:c2:22:ec:ff:2e:42:ac:00:30:8f:88: b1:ff:94:e0:0d:22:66:8c:58:4d:b8:d0:88:da:c3: da:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:86:31:4A:25:DC:A9:80:D5:60:82:61:E1:27:1E:74:FC:B1:79:FD X509v3 Authority Key Identifier: keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:08:da:a9:bc:17:19:36:c4:8b:03:80:fb:ad:a9:4d:3e:e2: 36:e4:96:bb:46:2c:72:20:5c:65:ff:dd:8e:43:6d:6c:2d:77: 8f:03:b3:b2:58:e8:d8:e4:36:40:e6:e4:42:e7:99:66:eb:46: 97:0e:8c:6e:51:19:a8:34:f1:4f:ef:f5:90:99:fb:d6:98:9a: 3a:81:1f:b4:de:c3:fa:28:43:19:77:33:f8:97:d3:bf:c9:89: c6:3e:4f:6c:15:e3:b3:73:b9:64:92:47:6a:50:be:0d:63:3e: 26:8a:1e:09:24:f9:46:11:26:96:7e:55:68:0a:f5:ca:90:bd: d5:f8:da:68:73:8d:11:35:1e:68:a1:2a:51:6d:02:d0:61:3b: 1a:9a:1e:24:46:8f:bf:6d:a5:f0:fc:d8:19:a3:2d:03:ac:d7: 0d:23:08:73:5a:ce:79:1d:3a:14:ae:3e:b0:85:84:8c:e8:69: 6d:4d:3d:6f:06:70:df:28:dc:de:d2:8c:ce:04:3e:8f:af:50: 87:f7:70:b1:9c:59:19:e4:5c:18:12:52:9e:7b:c6:82:0b:84: 4e:93:94:20:c9:be:cb:80:7c:88:83:22:27:51:f2:2e:f0:eb: 69:f8:83:8c:dc:01:b9:8e:a6:dd:35:28:04:e4:73:e4:bd:68: b9:86:5f:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE NTEwM0YwOTAwHhcNMjYwNzIzMDMyNzQwWhcNMjYwNzMwMDMyNzQwWjAYMRYwFAYD VQQDEw02YTYxOGEyZC1kOTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkP0MsWQfL4ZWwyZ6eSnsXO1wGeKmKfiFLwKGG9zeV/PVgxzb+qn6e40HC05Q 1iMeDjbKucvKtnRDX6nlQPEkF3ig8FhrvHk7zXKZ+EINWOh59Rzy9g/pcZurF+n9 kAiUJd66flsYIyyyQwCUfJ0wUkID7p4/68IDwp6SxpiUhTjWz1/f7UIeg6WVOG+b kdiEtiybp2hC3NwAsLSDA1FR5tDDZDMJOwSjruXdyl6OpKUA3yVpPfK9mAMX+IOJ ftsd6jhMhoK6B0/dhTCkqSXrNZqB5Fe8n18j9wnsxmECU6XaoJdawiLs/y5CrAAw j4ix/5TgDSJmjFhNuNCI2sPa1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6GMUol 3KmA1WCCYeEnHnT8sXn9MB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2 N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnwjaqbwXGTbEiwOA+62pTT7iNuSWu0YsciBcZf/djkNtbC13jwOzsljo2OQ2 QObkQueZZutGlw6MblEZqDTxT+/1kJn71piaOoEftN7D+ihDGXcz+JfTv8mJxj5P bBXjs3O5ZJJHalC+DWM+JooeCST5RhEmln5VaAr1ypC91fjaaHONETUeaKEqUW0C 0GE7GpoeJEaPv22l8PzYGaMtA6zXDSMIc1rOeR06FK4+sIWEjOhpbU09bwZw3yjc 3tKMzgQ+j69Qh/dwsZxZGeRcGBJSnnvGgguETpOUIMm+y4B8iIMiJ1HyLvDrafiD jNwBuY6m3TUoBORz5L1ouYZfcw== -----END CERTIFICATE-----Generated at Fri Jul 24 17:08:03 2026 by rpki-client