
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
File: RRIms-l3zxGWF1WwaTfB9-c13F4.mft (raw, json)
Hash identifier: 4g9xmW+Jstz8bepomX2vAtogUvdUHY76iClO+tAQplw=
Subject key identifier: 18:0B:A8:C8:63:41:53:FC:EB:AD:42:0E:A8:BE:FF:69:A8:47:09:DC
Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
Certificate issuer: /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Certificate serial: 0765
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
Manifest number: 0750
Signing time: Sat 28 Feb 2026 22:12:25 +0000
Manifest this update: Sat 28 Feb 2026 22:12:25 +0000
Manifest next update: Sat 07 Mar 2026 22:12:25 +0000
Files and hashes: 1: RRIms-l3zxGWF1WwaTfB9-c13F4.crl (hash: CkUO+GBcyNMV1kuJODGU7ObpVKdY4mzG24KRDYFd5SA=)
2: 4D5AE9DC5EEB11EB9D80C03EC4F9AE02.roa (hash: jYfZr7/iFVYF5J1j6a8BqeR3kIi6XvCYwk4AnIjqfgg=)
3: 76A8A3E460F111EBBA7FFA79C4F9AE02.roa (hash: g2lfXdwkotQXY9cMG0/cbM9bl8KUkelXULfBurO9D/A=)
4: 277A0A5A642B11EBBB477E4EC4F9AE02.roa (hash: i0LX5QdlbizZ0/uveNFuURibPjijIfLWLYK4vXt9/Xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1893 (0x765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D18DA, serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Validity
Not Before: Feb 28 22:12:25 2026 GMT
Not After : Mar 7 22:12:25 2026 GMT
Subject: CN=69a36849-81bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:c4:a3:ee:1b:1c:46:3e:17:73:94:a3:b8:
4d:23:3e:0d:0e:8f:41:e2:11:5e:a2:9c:05:0c:29:
a7:c2:b9:23:42:38:a7:21:ff:90:a7:6e:ab:f0:f6:
b4:ae:71:ca:47:8f:17:fa:b1:11:a0:9c:16:aa:c5:
46:cb:50:12:69:c6:a8:2e:f0:b4:ac:b3:b6:63:68:
ea:ce:9a:09:93:c8:1a:d2:6d:fb:db:f2:b5:9c:78:
0e:e7:8b:d1:bc:00:56:0e:be:df:20:b4:47:c7:33:
29:26:99:b3:9f:9e:ea:3e:e1:25:45:c4:55:45:43:
11:01:b9:58:5d:a5:64:3a:d5:74:62:00:2d:d5:31:
fc:c0:cb:e8:56:68:5d:02:d6:54:2b:7e:06:c2:1d:
17:ff:f4:31:25:bb:3a:33:3d:36:4e:3b:d6:06:79:
8a:0e:f9:af:17:23:bf:6a:15:a2:aa:36:0e:7f:80:
3d:8a:61:b4:db:f2:cd:9d:74:10:11:20:83:f2:63:
38:44:78:16:60:ec:4f:90:b3:f8:96:7f:5a:18:ae:
98:7b:5e:80:9f:8a:cd:e9:ec:9d:78:64:99:c9:4b:
b4:cd:23:e6:af:c7:cd:ce:88:b8:7a:ed:28:98:00:
f3:88:62:9f:2c:6c:de:1e:d8:91:5c:95:b8:66:3f:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0B:A8:C8:63:41:53:FC:EB:AD:42:0E:A8:BE:FF:69:A8:47:09:DC
X509v3 Authority Key Identifier:
keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fe:8d:e7:b7:b3:9a:77:ad:60:6a:86:91:38:8c:44:02:bf:
4e:5d:ed:16:ae:89:e4:45:44:28:73:aa:76:46:c7:2f:b0:15:
3b:8a:78:f1:f8:b2:c9:41:ab:6e:49:de:5f:ac:84:da:ed:db:
f9:d9:8b:22:f1:b9:bd:ae:49:eb:4f:12:2d:2b:ad:f7:ad:ee:
bf:e5:80:6b:f6:b3:41:48:57:09:f2:b7:3d:d6:98:8c:77:b6:
41:7e:8a:dc:a9:72:e6:f0:e5:e1:c6:78:95:5b:aa:de:10:d3:
08:21:a6:05:d8:d2:26:77:e3:01:89:f3:17:cf:34:ba:4a:e0:
7b:72:c4:6d:e8:58:e7:e4:06:c0:fd:e8:70:d4:5d:fc:e0:97:
ab:c7:fc:59:43:c1:d3:8b:1f:2c:ca:71:85:81:db:13:04:6e:
9d:86:36:b6:32:6f:09:4b:62:9c:39:93:f3:df:b9:c1:77:35:
78:51:ec:7a:22:62:32:4f:e2:7a:f2:ee:64:fa:2d:55:99:c9:
e9:a1:d9:62:31:7d:54:d2:f4:ea:69:ff:1e:6b:8a:44:0e:c7:
cb:86:cb:68:7a:69:22:01:25:29:18:ae:cf:eb:c0:6d:bf:f2:
16:f6:88:2b:77:2f:0f:26:33:0e:b6:ec:6e:2f:9c:20:9b:89:
30:8b:f2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:57 2026 by rpki-client