
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json)
Hash identifier: Rv/rK2JeI2eeFks9zUGZ5jbyZw7c7ebcK7KwrNyQ4n8=
Subject key identifier: 8E:42:47:B5:90:4C:05:53:9F:B2:E2:11:6E:1E:E3:2F:F5:77:CE:9F
Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
Certificate serial: 028F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
Manifest number: 0287
Signing time: Wed 25 Mar 2026 01:12:47 +0000
Manifest this update: Wed 25 Mar 2026 01:12:46 +0000
Manifest next update: Wed 01 Apr 2026 01:12:46 +0000
Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: hI7Y9iTwJUDCy+aL5KEzuFRnL/LBigTjbQFL/+PPD6g=)
2: 503A946E030411F1912A5FB1133D8C67.roa (hash: N78bhLKiQ6NqwKCCMvKdviHe1oCvwXkwNvHkLZkzudo=)
3: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fuU1wzFAik7IbNhPKdo3Uv+askPxbppv3V474lR1Znc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl
rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
Validity
Not Before: Mar 25 01:12:46 2026 GMT
Not After : Apr 1 01:12:46 2026 GMT
Subject: CN=69c3368e-d1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:f5:c7:2b:dd:36:14:36:b0:ed:08:12:1a:
75:b2:d6:a3:6f:80:c3:56:9c:0d:e6:b6:8c:f4:81:
40:ae:a7:93:63:9e:3d:09:69:36:98:71:35:15:fe:
3d:80:ce:bb:88:c5:ca:f9:19:2b:a2:42:a2:76:cb:
54:0c:f9:ac:67:0d:ab:df:35:07:e4:77:ef:1b:6e:
a8:d6:13:13:01:0a:4b:cf:43:0f:d6:20:5f:7b:73:
7e:6b:9c:66:2a:e3:88:11:66:26:31:d3:63:8d:14:
02:49:c9:8d:fc:1c:83:f3:52:72:b1:4e:cd:e7:56:
c3:ce:fa:3f:dc:92:e2:d6:54:13:4f:93:e5:03:e3:
60:9a:89:d4:79:f9:d8:30:bc:67:17:0b:1c:60:1c:
5f:54:82:8c:df:04:c9:70:81:e2:27:a9:4e:f8:ef:
39:fd:d1:58:13:9d:52:40:25:20:f5:84:1c:24:61:
d8:51:f6:a0:46:60:29:c0:ee:c4:0d:07:43:3f:30:
af:cb:1a:fc:07:22:f6:51:d0:43:e8:13:84:cc:d3:
c2:e5:85:11:9b:07:85:38:76:bf:09:09:df:f5:b8:
9d:e6:40:5f:82:b6:fa:8c:98:64:d7:24:b9:6a:a4:
3e:55:06:ce:36:f5:7f:56:f5:a5:46:04:b7:2f:c8:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:42:47:B5:90:4C:05:53:9F:B2:E2:11:6E:1E:E3:2F:F5:77:CE:9F
X509v3 Authority Key Identifier:
keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:1e:ad:49:d0:e3:17:28:50:80:51:53:18:25:03:34:79:1b:
52:2f:68:0f:a5:90:a6:49:14:4e:9b:d5:17:77:4a:b0:ea:01:
7b:0f:a8:7b:d6:38:8f:05:e1:26:c3:b5:ce:3d:a9:e2:9e:41:
3a:c8:41:42:0a:f0:5c:8a:1a:d1:fa:ec:27:9b:c1:1b:56:4b:
d2:b3:8c:2f:ae:21:0f:41:33:13:51:37:d7:5c:8d:95:84:41:
d0:47:0c:c6:62:e3:86:cd:db:92:24:b2:5b:6b:fb:d9:38:5f:
cf:ee:f6:54:a3:a9:6f:eb:c2:29:d9:f9:3b:e4:36:81:cc:bf:
3d:9a:5e:8e:49:58:cd:3b:67:f4:8e:44:b4:bb:08:82:aa:b7:
44:e3:d5:38:48:97:c0:93:2b:47:2e:79:d0:28:71:3f:ef:12:
0d:7b:1e:d6:61:1a:51:89:5a:10:dc:1a:ce:3e:3f:b1:fd:c8:
03:11:bd:92:5f:99:ad:23:99:de:e6:bc:26:74:c1:78:47:7f:
63:b2:65:27:16:39:e4:94:bf:4a:36:5b:40:48:49:5d:80:eb:
08:9a:df:85:57:af:ce:26:7d:2a:d1:02:0a:b6:7b:6f:d3:8e:
bb:79:f4:05:5f:55:d7:02:c0:23:eb:86:7a:5a:9b:37:3a:06:
01:3b:73:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:30 2026 by rpki-client