
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
File: RRIms-l3zxGWF1WwaTfB9-c13F4.mft (raw, json)
Hash identifier: qjU5aly3mdtqWMG+sBPa7cc0z8ghAkpwVrHrTpIHlbk=
Subject key identifier: 4C:DD:84:84:84:29:0C:2D:94:E1:B7:17:92:41:A3:4D:ED:0D:C8:83
Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
Certificate issuer: /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Certificate serial: 0779
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
Manifest number: 075E
Signing time: Tue 24 Mar 2026 21:25:15 +0000
Manifest this update: Tue 24 Mar 2026 21:25:15 +0000
Manifest next update: Tue 31 Mar 2026 21:25:15 +0000
Files and hashes: 1: RRIms-l3zxGWF1WwaTfB9-c13F4.crl (hash: 4lkZQ3YQ67bEGUqzrFVZ5+qsMahRlU81VZFDIDrEpVs=)
2: 76A8A3E460F111EBBA7FFA79C4F9AE02.roa (hash: NCexluo2CBWRIwlG04qfuByfMYwesbUBTQc99Uh7xr0=)
3: 4D5AE9DC5EEB11EB9D80C03EC4F9AE02.roa (hash: GqsC6Ge+gD7nTu8b5i+ZXnPVlYacVSUVEyTDyShEzcM=)
4: 277A0A5A642B11EBBB477E4EC4F9AE02.roa (hash: v4sDCUKnv2BnKwWZZntB42yWo+d6v7PhXXuwp/K2Zm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1913 (0x779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D18DA, serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Validity
Not Before: Mar 24 21:25:15 2026 GMT
Not After : Mar 31 21:25:15 2026 GMT
Subject: CN=69c3013b-ad66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:4f:98:81:f3:16:46:34:10:10:15:82:38:
31:7c:e2:d4:c1:f3:46:a7:f2:f1:7d:64:d3:01:51:
00:d7:44:e1:21:0f:18:a9:6d:b6:02:68:97:a1:d4:
cd:7c:fb:70:74:c6:d6:9d:ff:d9:0b:72:be:bb:ec:
79:87:78:d1:a0:0b:60:05:20:58:07:5e:a8:a6:dc:
30:07:7f:a2:5b:11:ee:f2:1e:58:f8:80:ed:df:57:
d8:5e:f2:f9:88:fc:75:51:42:43:0e:d3:6d:16:a7:
32:41:6b:5a:53:7e:d4:ec:a4:29:88:0f:72:54:d4:
e7:ca:99:a8:b3:42:93:9c:fa:54:42:6e:fa:9f:60:
8e:4b:8a:f5:42:21:90:f1:43:d9:a0:11:18:ad:7f:
3b:9e:77:7c:1b:1f:0d:0d:75:af:02:8f:24:22:f1:
40:45:82:53:4a:08:77:ec:69:c4:6d:49:f0:0b:17:
36:1b:ff:73:aa:ab:c8:9e:7a:4d:21:c5:68:75:8a:
09:87:95:9f:ac:f0:a8:71:12:2a:40:96:3d:87:09:
46:fb:60:db:07:0c:20:d8:a8:42:35:bc:20:b8:fa:
ca:9a:e9:f1:c6:1d:a8:84:1d:a3:fb:c9:09:77:43:
9d:3c:dd:cb:8e:f6:e1:35:01:8d:71:3a:c0:6e:2a:
80:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DD:84:84:84:29:0C:2D:94:E1:B7:17:92:41:A3:4D:ED:0D:C8:83
X509v3 Authority Key Identifier:
keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:99:56:6d:a4:44:d8:44:c1:45:9f:36:7f:69:17:eb:70:8e:
c1:ce:ed:bc:73:0f:7b:a8:fe:bc:42:4d:81:bd:17:d9:9c:69:
34:3b:1a:c8:26:78:3d:97:58:fc:6c:19:0e:2b:c4:23:30:8b:
7f:a2:13:2c:86:f5:73:59:86:08:9b:1d:d9:fb:d2:a3:6c:84:
54:a2:88:03:e2:d7:78:d1:b7:41:12:db:33:79:fc:d0:c9:b3:
d5:34:d9:ca:54:7c:ef:09:81:57:31:56:45:75:41:89:73:b5:
93:fa:ee:38:a0:bd:9f:a9:42:b0:c1:8a:27:d7:a7:20:d3:7c:
65:0b:81:f8:e5:dc:c0:7c:32:56:a3:e6:4c:d9:61:93:cc:92:
37:bf:01:a7:a3:a7:9e:44:ad:fb:64:72:31:f6:81:1a:31:b8:
3a:b5:97:33:85:75:fb:58:4d:4f:1a:98:d2:fc:54:55:97:62:
87:0f:0a:f7:57:50:f5:9a:85:70:71:b4:09:d0:59:f9:11:c2:
df:f9:22:bf:21:a2:30:0f:17:09:4e:e6:99:29:04:c3:8a:4e:
f8:69:14:98:29:92:dc:ec:f9:ee:3e:72:38:92:6d:f9:4b:e6:
a1:f7:1b:71:de:08:c4:f3:84:13:75:e9:25:ea:40:37:32:1b:
81:60:6b:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE4REExMTAvBgNVBAUTKDQ1MTIyNkIzRTk3N0NGMTE5NjE3NTVCMDY5MzdDMUY3
RTczNURDNUUwHhcNMjYwMzI0MjEyNTE1WhcNMjYwMzMxMjEyNTE1WjAYMRYwFAYD
VQQDEw02OWMzMDEzYi1hZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuHdPmIHzFkY0EBAVgjgxfOLUwfNGp/LxfWTTAVEA10ThIQ8YqW22AmiXodTN
fPtwdMbWnf/ZC3K+u+x5h3jRoAtgBSBYB16optwwB3+iWxHu8h5Y+IDt31fYXvL5
iPx1UUJDDtNtFqcyQWtaU37U7KQpiA9yVNTnypmos0KTnPpUQm76n2COS4r1QiGQ
8UPZoBEYrX87nnd8Gx8NDXWvAo8kIvFARYJTSgh37GnEbUnwCxc2G/9zqqvInnpN
IcVodYoJh5WfrPCocRIqQJY9hwlG+2DbBwwg2KhCNbwguPrKmunxxh2ohB2j+8kJ
d0OdPN3LjvbhNQGNcTrAbiqA3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzdhISE
KQwtlOG3F5JBo03tDciDMB8GA1UdIwQYMBaAFEUSJrPpd88RlhdVsGk3wffnNdxe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMThEQS9ERTM4OTRFQzVF
RTkxMUVCOUYzQjdGM0RDNEY5QUUwMi9SUkltcy1sM3p4R1dGMVd3YVRmQjktYzEz
RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JSSW1zLWwzenhHV0YxV3dhVGZCOS1jMTNGNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MThEQS9ERTM4OTRFQzVFRTkxMUVCOUYzQjdGM0RDNEY5QUUwMi9SUkltcy1sM3p4
R1dGMVd3YVRmQjktYzEzRjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ5lWbaRE2ETBRZ82f2kX63COwc7tvHMPe6j+vEJNgb0X2ZxpNDsayCZ4PZdY
/GwZDivEIzCLf6ITLIb1c1mGCJsd2fvSo2yEVKKIA+LXeNG3QRLbM3n80Mmz1TTZ
ylR87wmBVzFWRXVBiXO1k/ruOKC9n6lCsMGKJ9enINN8ZQuB+OXcwHwyVqPmTNlh
k8ySN78Bp6OnnkSt+2RyMfaBGjG4OrWXM4V1+1hNTxqY0vxUVZdihw8K91dQ9ZqF
cHG0CdBZ+RHC3/kivyGiMA8XCU7mmSkEw4pO+GkUmCmS3Oz57j5yOJJt+Uvmofcb
cd4IxPOEE3XpJepANzIbgWBrTw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:14 2026 by rpki-client