
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json)
Hash identifier: ox+mqBZ1+NL1fwZ/fyszXrPvcWv5jDWFWMSr3rYl6Wo=
Subject key identifier: 65:C3:60:9A:5E:CA:8A:51:44:D8:60:15:B1:1E:0B:C0:04:69:5D:83
Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
Certificate serial: 02A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
Manifest number: 02A0
Signing time: Wed 13 May 2026 01:37:48 +0000
Manifest this update: Wed 13 May 2026 01:37:48 +0000
Manifest next update: Wed 20 May 2026 01:37:48 +0000
Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: rKd7MhzhkmOHWapMPS8+4BG9AEgF6thjbi5RU9APLbc=)
2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fuU1wzFAik7IbNhPKdo3Uv+askPxbppv3V474lR1Znc=)
3: 503A946E030411F1912A5FB1133D8C67.roa (hash: N78bhLKiQ6NqwKCCMvKdviHe1oCvwXkwNvHkLZkzudo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl
rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
Validity
Not Before: May 13 01:37:48 2026 GMT
Not After : May 20 01:37:48 2026 GMT
Subject: CN=6a03d5ec-4ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:63:89:d0:b3:a4:2e:83:9b:e6:0c:c5:93:
26:2f:ff:58:71:df:5e:b3:41:4d:56:f3:10:41:cd:
ba:83:65:87:61:51:25:de:38:2b:43:db:e3:2f:a4:
8f:35:85:1d:07:bf:6f:52:fe:88:ed:8d:31:b6:58:
9c:72:a2:5f:5d:2e:bf:85:8c:17:a4:18:26:ba:63:
8d:d3:02:0e:72:5f:f3:25:38:6c:ad:80:c7:a6:cb:
23:86:f5:82:a3:2a:0e:40:18:c4:c9:e8:09:e3:2e:
13:12:52:69:9c:f6:7f:e7:83:41:b8:26:09:6a:ca:
4d:a2:39:f5:12:3d:9b:f6:94:ea:ff:e1:76:b8:d3:
da:58:af:d9:ae:cb:16:e7:ed:68:ff:f4:3c:0b:2e:
6b:77:b0:00:e6:25:5f:6a:81:a5:a8:8c:b7:ed:2e:
99:53:4c:9e:d2:bb:f8:b8:3f:a8:8c:1c:18:7c:08:
4f:b0:96:05:67:e5:72:1c:fa:32:dd:40:31:24:ad:
20:33:67:7b:02:4d:7e:d1:17:e4:16:0f:56:06:a3:
bc:8f:35:cd:b8:04:9a:92:4a:c5:e9:4b:c6:0f:18:
89:23:a3:bc:b6:2b:7a:5d:f9:5c:c4:2b:24:4b:6a:
42:c3:8a:33:ba:21:85:2a:9d:c8:38:b0:04:5a:35:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:60:9A:5E:CA:8A:51:44:D8:60:15:B1:1E:0B:C0:04:69:5D:83
X509v3 Authority Key Identifier:
keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a7:4f:8f:1a:b7:10:da:c9:fe:6b:73:58:1a:86:67:39:23:
9c:d5:0f:e4:ec:26:ff:85:e4:f7:9b:42:ed:0e:f4:d1:78:71:
4c:8b:eb:03:b8:20:cf:f7:f3:c1:67:92:c5:25:0e:74:79:c5:
e0:05:3f:84:ea:89:20:90:f7:af:30:83:05:c3:e5:2e:61:5f:
93:de:cb:5d:2c:ff:fa:98:b5:08:36:d4:b7:94:01:e0:95:f0:
19:e0:a5:2b:78:5b:9c:1e:f6:71:c8:b0:d2:10:d5:1c:6e:90:
31:54:80:f1:49:31:f7:d1:9d:77:02:48:4a:c2:7e:b4:55:6b:
a3:bc:4d:1e:55:fe:e0:1b:58:12:16:30:c6:07:0a:74:b7:4a:
b3:1d:b2:e4:81:1c:85:86:4e:ab:f4:6e:b3:89:3a:dd:40:3e:
93:6b:f5:2a:8d:f5:e8:73:59:6c:04:7b:31:e1:c5:d5:91:41:
d4:2a:c3:1f:d3:57:86:66:5a:0b:55:90:ce:7c:0e:39:ab:02:
21:70:1e:02:9a:2f:dc:66:f3:8a:8a:d0:4a:c6:ac:d7:14:01:
d4:a3:52:5c:e5:17:95:d5:9f:1f:fe:d6:35:39:e6:bd:ca:d5:
ec:b6:67:1b:0c:10:9b:84:dc:5d:74:3c:b2:ca:ab:67:b3:74:
ab:fe:e9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:58:44 2026 by rpki-client