$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft File: gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json) Hash identifier: O+rXV+Kx3yLUuswORaXqjHYZgiaMQZ76pCDyQGZM7Yk= Subject key identifier: 8F:D6:5B:E9:F3:98:B0:D2:8C:3B:97:65:BF:AA:C6:5D:93:0A:92:3C Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 Certificate issuer: /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft Manifest number: 028D Signing time: Sun 05 Apr 2026 01:18:24 +0000 Manifest this update: Sun 05 Apr 2026 01:18:24 +0000 Manifest next update: Sun 12 Apr 2026 01:18:24 +0000 Files and hashes: 1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: DWhZiL01kNKsq7hKLWyWVDLUSfeQaME1tzSE1cWmtK8=) 2: 503A946E030411F1912A5FB1133D8C67.roa (hash: N78bhLKiQ6NqwKCCMvKdviHe1oCvwXkwNvHkLZkzudo=) 3: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fuU1wzFAik7IbNhPKdo3Uv+askPxbppv3V474lR1Znc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065 Validity Not Before: Apr 5 01:18:24 2026 GMT Not After : Apr 12 01:18:24 2026 GMT Subject: CN=69d1b860-7e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:a6:c0:c5:ec:f6:24:f9:11:80:3d:97:86: 2e:f3:2f:3f:87:56:9e:2a:99:37:1b:0e:72:cf:cb: d7:b6:ff:1c:dd:62:b9:79:4a:8b:2d:be:5b:89:a6: 6a:28:c5:e2:e5:f9:a0:b5:45:55:ac:9c:ad:77:1c: 34:9c:87:ca:be:49:6e:ab:64:c8:d3:94:f0:f3:fb: 7e:a4:47:5f:d2:48:0f:2d:86:0e:d7:6b:15:34:71: 0b:45:7b:06:13:7e:79:02:7f:8b:dc:18:55:80:f3: 5e:e5:f4:23:5a:ca:d8:13:44:44:2c:2e:2a:f4:80: cc:ea:18:0b:e4:36:88:a8:3d:ef:31:52:25:b5:3d: 53:57:02:59:24:4b:a3:b8:e8:21:3e:48:63:4b:ff: 71:7d:e1:66:df:06:bb:59:98:6b:df:fd:e8:d6:e5: 8d:6d:d9:16:26:a0:aa:89:84:b9:0d:3b:4e:fb:d9: 92:4b:81:0b:aa:fb:bc:6f:b1:65:0b:07:9e:e7:7d: 08:b7:16:4d:80:d4:51:d4:a0:d6:fd:2b:13:d5:23: e1:75:88:65:53:1f:87:1f:e7:a7:47:d4:29:5b:7e: 2d:80:7d:c7:d9:fc:90:74:be:00:09:f7:76:c9:b9: d2:ac:dd:9f:ee:27:da:c1:a4:ce:45:a0:80:b5:ea: 85:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D6:5B:E9:F3:98:B0:D2:8C:3B:97:65:BF:AA:C6:5D:93:0A:92:3C X509v3 Authority Key Identifier: keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4c:3a:86:d6:df:81:bf:61:e0:4a:6b:f2:07:7a:fe:24:5d: 71:58:71:76:f0:e7:aa:07:48:89:85:81:85:95:f2:10:bb:7e: 3d:fa:27:10:cc:4b:5f:bc:7f:e4:84:31:e5:ca:23:77:13:80: 6b:13:6c:52:8f:5b:54:6b:65:6d:49:01:eb:33:ae:44:a9:89: c7:f1:80:27:9a:c9:f3:61:42:45:4f:ed:f2:97:5c:cf:ea:95: 63:dd:ae:e2:1a:56:7b:b1:71:e0:36:e1:5d:61:b8:05:5e:71: 5e:29:97:11:50:26:ab:62:8c:8b:1a:7f:30:b7:24:5b:f7:1d: 7e:5e:86:d8:d1:bc:d9:3d:9a:cc:de:c8:9f:22:2f:26:f1:ab: e5:fb:82:8f:0a:ac:04:4f:ce:14:c1:93:5e:fe:34:5a:ea:c4: 7e:67:cf:e1:ce:2a:f4:1d:15:39:20:07:f7:99:bd:a2:69:3b: d8:e4:eb:36:cf:d9:f9:b0:8c:d5:1b:13:90:ed:97:fc:6b:0f: 85:0f:05:1e:52:19:c5:4a:11:82:5b:11:7b:22:05:8f:cb:ba: b9:c9:a3:b5:92:af:c7:70:35:14:ec:29:81:0e:9e:d9:fa:39: e2:09:42:21:5b:a1:c3:7e:e1:68:18:c4:62:be:f9:47:8a:ed: 17:94:51:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy ODZCQTkwNjUwHhcNMjYwNDA1MDExODI0WhcNMjYwNDEyMDExODI0WjAYMRYwFAYD VQQDEw02OWQxYjg2MC03ZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrmmwMXs9iT5EYA9l4Yu8y8/h1aeKpk3Gw5yz8vXtv8c3WK5eUqLLb5biaZq KMXi5fmgtUVVrJytdxw0nIfKvkluq2TI05Tw8/t+pEdf0kgPLYYO12sVNHELRXsG E355An+L3BhVgPNe5fQjWsrYE0RELC4q9IDM6hgL5DaIqD3vMVIltT1TVwJZJEuj uOghPkhjS/9xfeFm3wa7WZhr3/3o1uWNbdkWJqCqiYS5DTtO+9mSS4ELqvu8b7Fl Cwee530ItxZNgNRR1KDW/SsT1SPhdYhlUx+HH+enR9QpW34tgH3H2fyQdL4ACfd2 ybnSrN2f7ifawaTORaCAteqF3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/WW+nz mLDSjDuXZb+qxl2TCpI8MB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVENC9FNEZCMkJFNDRCMDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1U ODlJaS04aGszdUlvYTZrR1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB0w6htbfgb9h4Epr8gd6/iRdcVhxdvDnqgdIiYWBhZXyELt+PfonEMxLX7x/ 5IQx5cojdxOAaxNsUo9bVGtlbUkB6zOuRKmJx/GAJ5rJ82FCRU/t8pdcz+qVY92u 4hpWe7Fx4DbhXWG4BV5xXimXEVAmq2KMixp/MLckW/cdfl6G2NG82T2azN7InyIv JvGr5fuCjwqsBE/OFMGTXv40WurEfmfP4c4q9B0VOSAH95m9omk72OTrNs/Z+bCM 1RsTkO2X/GsPhQ8FHlIZxUoRglsReyIFj8u6ucmjtZKvx3A1FOwpgQ6e2fo54glC IVuhw37haBjEYr75R4rtF5RRFA== -----END CERTIFICATE-----Generated at Mon Apr 6 11:34:46 2026 by rpki-client