
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
File: RRIms-l3zxGWF1WwaTfB9-c13F4.mft (raw, json)
Hash identifier: Jg6OvJQACH/hALhPGUZcoB4KdWA+47Wvuvw7ZBe31Lc=
Subject key identifier: A6:8E:1B:EC:40:B1:E9:3A:C9:A9:7C:F8:7A:9C:DD:60:E3:EE:62:B6
Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
Certificate issuer: /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Certificate serial: 0796
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
Manifest number: 077B
Signing time: Wed 20 May 2026 21:39:03 +0000
Manifest this update: Wed 20 May 2026 21:39:03 +0000
Manifest next update: Wed 27 May 2026 21:39:03 +0000
Files and hashes: 1: RRIms-l3zxGWF1WwaTfB9-c13F4.crl (hash: 9hdFsCnU2iwC++KGIEP1zIXiEUjmzjwzFme9Tl4aft0=)
2: 76A8A3E460F111EBBA7FFA79C4F9AE02.roa (hash: NCexluo2CBWRIwlG04qfuByfMYwesbUBTQc99Uh7xr0=)
3: 277A0A5A642B11EBBB477E4EC4F9AE02.roa (hash: v4sDCUKnv2BnKwWZZntB42yWo+d6v7PhXXuwp/K2Zm8=)
4: 4D5AE9DC5EEB11EB9D80C03EC4F9AE02.roa (hash: GqsC6Ge+gD7nTu8b5i+ZXnPVlYacVSUVEyTDyShEzcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:39:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1942 (0x796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D18DA, serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Validity
Not Before: May 20 21:39:03 2026 GMT
Not After : May 27 21:39:03 2026 GMT
Subject: CN=6a0e29f7-5caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:5e:20:a4:88:85:62:a9:dd:0c:37:bc:dd:
63:40:25:aa:d0:8a:11:93:f6:90:dd:71:f3:37:94:
1e:98:4a:88:04:94:f6:bc:60:05:aa:87:cc:68:cf:
23:cf:23:c4:a5:ff:41:57:87:ef:47:88:e6:67:70:
cb:f7:66:55:bb:8b:e8:b0:75:b1:f7:90:f1:79:f0:
c6:e7:7f:d6:10:cf:ec:68:b2:78:17:3a:bc:d9:52:
bc:ce:14:3d:2e:8b:1d:2a:9d:36:d2:95:a4:3b:4e:
7a:bd:4f:c6:e4:ed:66:76:6b:b9:f3:d7:9e:15:cc:
bb:ea:43:79:16:a3:76:ae:00:1d:78:05:cd:ce:49:
e1:97:f7:60:ed:77:7a:66:54:e0:99:b7:e5:04:89:
f2:4f:9c:aa:1f:41:6d:e1:b1:0b:52:1b:08:fe:f4:
ac:eb:bf:09:5a:12:1e:52:35:20:cc:6a:0c:8e:75:
b3:5a:3d:bd:e4:14:79:e0:e1:d5:a3:42:7b:26:b7:
57:22:fc:f1:40:7c:b3:02:96:94:24:ab:9b:e5:8c:
dd:d9:9c:9f:28:52:a1:27:89:b6:51:c8:89:6d:d3:
1b:c2:aa:5f:20:ea:fb:22:c7:99:bf:e1:f6:f7:61:
ed:88:0a:94:15:5f:e8:95:b0:e0:d5:e9:8b:35:b4:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8E:1B:EC:40:B1:E9:3A:C9:A9:7C:F8:7A:9C:DD:60:E3:EE:62:B6
X509v3 Authority Key Identifier:
keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:af:ce:4c:22:9a:3d:31:9e:72:ad:ca:94:3b:ba:5a:2b:3a:
97:77:6a:26:ba:0b:d8:0f:11:b9:6e:0a:8f:84:63:66:85:43:
4a:44:a3:ae:92:64:dc:53:24:66:b7:c1:5e:28:0e:d9:73:1d:
74:0a:74:89:21:fe:47:47:98:21:eb:e1:15:f0:d1:dd:a1:94:
98:6f:2c:b0:3c:3e:3d:b7:97:37:77:34:85:a7:35:21:a3:aa:
36:0e:f4:79:9b:7d:52:55:00:5a:a1:ef:17:74:28:e6:1b:60:
85:da:61:56:06:6e:21:0c:ba:90:ed:07:a5:45:e7:40:97:c4:
d9:d4:8f:4d:19:d7:f7:b0:6d:f1:2c:50:88:e3:8d:94:98:bf:
3e:16:92:2f:3c:30:f5:4c:b4:59:27:7c:8b:d1:39:68:77:75:
cd:d7:c7:6c:2a:18:ef:ee:05:b8:62:72:54:aa:46:01:20:e9:
bb:a4:58:a7:2f:db:cb:c5:70:a0:f7:d4:93:a0:c4:b2:89:d0:
ac:d3:e6:bb:fa:5e:e2:0a:b7:9a:60:81:10:8b:41:5b:30:f1:
c3:fe:b3:bc:33:ce:17:53:14:3e:d0:0a:90:6d:29:d4:3a:30:
71:d2:d3:0a:2b:8e:fa:50:e2:83:9e:10:2e:69:93:eb:fd:12:
c2:5e:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:34 2026 by rpki-client