
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json)
Hash identifier: rAL7njp8/4tjjgNpyuhG82G8Tm9vtBgnlakUtFAxaQM=
Subject key identifier: C7:1C:D0:E2:32:3A:D4:36:7A:21:72:66:95:1A:08:3C:C1:C1:06:6E
Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
Certificate serial: 02CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
Manifest number: 02C5
Signing time: Mon 27 Jul 2026 02:32:12 +0000
Manifest this update: Mon 27 Jul 2026 02:32:12 +0000
Manifest next update: Mon 03 Aug 2026 02:32:12 +0000
Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: iqerX/WZMZUgqd0QrpbBx8Ni3/QdmpkrllxhG5kgerc=)
2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fuU1wzFAik7IbNhPKdo3Uv+askPxbppv3V474lR1Znc=)
3: 503A946E030411F1912A5FB1133D8C67.roa (hash: N78bhLKiQ6NqwKCCMvKdviHe1oCvwXkwNvHkLZkzudo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl
rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
Validity
Not Before: Jul 27 02:32:12 2026 GMT
Not After : Aug 3 02:32:12 2026 GMT
Subject: CN=6a66c32c-cfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5a:d7:af:cb:ae:28:3b:5c:22:b4:81:a4:33:
0e:99:0f:0a:dc:2d:4e:90:8d:fd:a0:15:d6:35:04:
9f:31:9b:24:c7:52:22:f5:93:37:86:0e:54:84:f3:
7b:7d:7a:e1:5a:84:43:f1:6d:cb:96:bf:bd:ea:14:
d9:2c:b7:e4:6c:73:0d:5a:1c:b8:ff:b9:ae:24:33:
64:be:ee:08:1f:d6:5f:38:c8:70:f7:31:5d:66:54:
40:3b:9d:d1:6b:9c:38:12:5b:60:06:99:55:33:9f:
9b:11:99:ad:03:fe:17:a1:02:8e:3e:c1:63:85:bf:
a2:cb:31:39:21:32:f2:ad:ba:67:45:1a:77:39:48:
da:72:5b:1a:b8:df:4b:a9:a2:b8:96:5f:59:c9:0b:
20:44:52:ac:65:11:e9:95:02:27:5a:74:95:f5:86:
21:98:0b:69:02:80:12:98:17:bd:7a:fe:fb:41:a2:
81:0d:24:d3:00:3e:7f:74:e7:2c:dc:1f:65:c2:84:
1a:03:f7:5b:c9:af:3c:d2:d8:c0:15:d9:c8:92:26:
5f:c2:c5:10:fe:f1:0a:b9:66:42:9c:ed:32:c9:e4:
fa:e9:e5:50:05:07:30:d1:8c:5e:79:ba:bd:b0:ad:
c0:36:22:30:10:be:63:6f:04:82:72:2d:1f:d5:cc:
52:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1C:D0:E2:32:3A:D4:36:7A:21:72:66:95:1A:08:3C:C1:C1:06:6E
X509v3 Authority Key Identifier:
keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c1:f0:1c:58:17:91:96:bf:4e:f6:3f:a7:8a:41:e5:15:08:
a0:eb:2e:53:32:92:b0:5c:07:95:0f:1b:78:57:66:54:18:83:
7a:e2:35:6e:cb:b8:9b:dd:65:1e:97:01:a2:c7:2e:f3:f5:8c:
b4:6b:92:d7:48:d5:8c:4c:2f:0f:42:45:87:46:61:fd:16:8b:
37:dc:78:9d:60:c8:bb:2e:6a:48:33:e8:23:ac:af:0f:77:7f:
b2:9b:01:97:fe:e1:a8:2f:ad:f5:cf:57:40:81:79:87:6e:d4:
94:05:79:7c:0c:16:36:19:ae:0a:d9:df:81:f3:b4:39:13:ef:
d6:64:17:60:8f:4a:af:53:32:70:73:0d:a0:fa:0e:a6:10:09:
25:a7:c3:cf:2b:0f:80:88:ed:00:67:a9:b3:2c:e3:75:f0:64:
e6:05:d9:c8:14:65:58:ef:25:d6:a2:6d:a7:f3:12:c6:bc:cd:
21:13:f4:d6:be:08:da:d4:68:4b:2f:ac:6b:ed:5b:66:08:8e:
df:6e:c4:1e:8a:4d:8e:b0:b2:ab:42:48:3f:60:73:e0:ec:30:
29:f7:21:1e:dc:eb:50:58:df:75:a7:45:b5:d1:7b:25:41:27:
ba:8a:6f:81:2d:1c:d6:a9:3e:0e:34:6e:f1:5b:a0:4e:50:c2:
a4:05:a7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:18 2026 by rpki-client