
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
File: RRIms-l3zxGWF1WwaTfB9-c13F4.mft (raw, json)
Hash identifier: d2K6LzTxwTkbO+xkWAGwJ3qrWFBTVQMNDwL892xYoDM=
Subject key identifier: 17:C4:21:4A:04:EF:09:05:91:54:E0:D7:24:B2:3E:DA:E6:09:E5:5A
Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
Certificate issuer: /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Certificate serial: 07B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
Manifest number: 079A
Signing time: Mon 20 Jul 2026 22:08:22 +0000
Manifest this update: Mon 20 Jul 2026 22:08:21 +0000
Manifest next update: Mon 27 Jul 2026 22:08:21 +0000
Files and hashes: 1: RRIms-l3zxGWF1WwaTfB9-c13F4.crl (hash: V0Fndg1dFwpad0RD/TjT7moS0ZidTU03Gu3XMLbZodM=)
2: 4D5AE9DC5EEB11EB9D80C03EC4F9AE02.roa (hash: GqsC6Ge+gD7nTu8b5i+ZXnPVlYacVSUVEyTDyShEzcM=)
3: 277A0A5A642B11EBBB477E4EC4F9AE02.roa (hash: v4sDCUKnv2BnKwWZZntB42yWo+d6v7PhXXuwp/K2Zm8=)
4: 76A8A3E460F111EBBA7FFA79C4F9AE02.roa (hash: NCexluo2CBWRIwlG04qfuByfMYwesbUBTQc99Uh7xr0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 22:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1973 (0x7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D18DA, serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Validity
Not Before: Jul 20 22:08:21 2026 GMT
Not After : Jul 27 22:08:21 2026 GMT
Subject: CN=6a5e9c56-06db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:72:a6:09:d3:51:ee:3a:25:66:db:50:c0:
bb:bc:13:f0:10:08:9a:f4:e3:5a:ce:96:52:0f:16:
ba:b3:77:52:69:50:7f:e3:e4:fe:b7:f0:0b:51:fc:
de:0b:81:20:c9:21:a6:fb:d9:ae:8a:b7:67:c4:9c:
de:c6:cd:ef:08:5d:8f:f3:7c:11:b9:3d:c1:e7:c5:
3d:bd:6a:31:c9:a7:23:fd:15:21:7e:ba:6b:64:67:
61:a3:5c:9a:d4:b1:a9:81:d9:cd:92:a2:20:d9:ce:
e7:75:9b:8a:07:7a:fc:92:73:82:ad:9b:8d:13:1b:
d2:0a:29:13:eb:cb:08:0a:32:b2:5f:f7:97:54:0a:
ad:20:0e:6c:d3:14:80:9f:17:83:77:af:63:e6:30:
9d:ab:c9:2b:5d:73:4e:b3:a9:e2:7d:47:03:ed:69:
65:98:94:ba:08:c7:42:87:68:9a:83:39:36:3e:14:
fb:73:6b:0a:f4:ed:1f:a9:fe:0c:b9:eb:2d:a5:b9:
96:d8:90:cc:57:94:99:0b:34:14:7d:1e:f8:99:1c:
28:34:6d:07:cb:ec:52:76:30:6b:6e:74:64:7c:b1:
13:ac:db:3f:1b:45:86:a3:87:68:aa:9e:b4:57:e4:
db:75:b4:d1:13:a3:af:5d:27:bd:5c:88:af:63:06:
2f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C4:21:4A:04:EF:09:05:91:54:E0:D7:24:B2:3E:DA:E6:09:E5:5A
X509v3 Authority Key Identifier:
keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4a:97:ff:d5:e0:05:60:b4:34:5b:ad:97:44:bc:65:c3:2a:
b1:d9:41:4d:7f:66:8e:30:5f:40:39:6e:87:14:8f:5d:cf:84:
f3:62:05:21:e0:01:0f:e1:3c:f9:6f:7c:66:29:3b:01:ad:b4:
b7:ac:e4:dd:83:a1:a6:c0:3f:69:be:35:6c:36:6c:83:d8:a5:
fb:a4:1c:a6:e4:f2:77:b1:1a:26:db:61:a9:d2:e7:ef:ee:d2:
fb:77:ec:ce:bd:ed:9e:f7:53:7d:20:20:bb:1b:e6:95:3a:a2:
3f:3c:a4:7a:32:22:df:99:82:46:72:f5:1d:60:ae:aa:19:4c:
e9:4f:02:50:3f:85:d8:b2:6c:09:ca:a3:b9:e4:2c:85:4c:b2:
55:a1:42:ee:06:c6:0b:68:4c:2a:dd:32:0f:ed:90:bd:76:89:
66:48:00:84:82:d3:13:63:a5:9d:85:45:d5:04:49:3e:a8:9b:
51:be:5e:f5:92:4f:fd:a6:7d:fa:8c:3a:ca:45:b8:32:24:71:
5d:dc:d9:99:83:15:02:aa:44:fe:2a:80:a9:42:77:38:43:88:
6d:e7:f5:74:c1:75:60:2e:4e:f9:51:e6:0d:5f:4f:ed:dd:9b:
09:1d:5e:9d:6b:12:75:1a:4a:ae:21:db:1b:5e:af:42:a7:e0:
6c:79:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:29 2026 by rpki-client