
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
File: RRIms-l3zxGWF1WwaTfB9-c13F4.mft (raw, json)
Hash identifier: Zyufzw7x9UE+mW81ZtEVLCGhODUdNiSnA6eyUvcZz1E=
Subject key identifier: E0:EC:38:68:DC:1D:34:92:DF:28:FA:E7:FC:2C:CF:38:61:AB:93:B9
Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
Certificate issuer: /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Certificate serial: 07A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
Manifest number: 0787
Signing time: Fri 12 Jun 2026 21:37:33 +0000
Manifest this update: Fri 12 Jun 2026 21:37:32 +0000
Manifest next update: Fri 19 Jun 2026 21:37:32 +0000
Files and hashes: 1: RRIms-l3zxGWF1WwaTfB9-c13F4.crl (hash: wCV2Y1adEZ8/xCovOauHrTXKuy9WdKr7yZvOk267aFc=)
2: 4D5AE9DC5EEB11EB9D80C03EC4F9AE02.roa (hash: GqsC6Ge+gD7nTu8b5i+ZXnPVlYacVSUVEyTDyShEzcM=)
3: 277A0A5A642B11EBBB477E4EC4F9AE02.roa (hash: v4sDCUKnv2BnKwWZZntB42yWo+d6v7PhXXuwp/K2Zm8=)
4: 76A8A3E460F111EBBA7FFA79C4F9AE02.roa (hash: NCexluo2CBWRIwlG04qfuByfMYwesbUBTQc99Uh7xr0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1954 (0x7a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D18DA, serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Validity
Not Before: Jun 12 21:37:32 2026 GMT
Not After : Jun 19 21:37:32 2026 GMT
Subject: CN=6a2c7c1d-0d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:82:8c:47:e7:46:a3:58:a6:46:1d:ef:ff:
6d:1c:da:19:97:37:a8:27:0a:db:ab:65:8a:79:0b:
07:c8:5a:13:92:cf:0d:c9:c3:aa:34:7c:3d:5f:00:
a7:59:e4:8e:c8:f4:b4:c1:e4:44:52:16:38:e6:18:
af:6b:c2:20:db:49:3f:ea:9e:16:8a:29:24:f9:c6:
56:b5:1c:a9:9b:09:ad:57:a4:d2:1f:1a:1f:16:3b:
8d:d3:68:00:b2:56:68:fd:8c:56:44:bf:18:b1:e9:
bd:ee:1f:dd:27:47:05:ed:76:38:18:e1:ce:53:66:
1b:d4:ba:94:04:b2:fb:79:61:73:ec:e1:92:ec:a4:
96:0a:69:ec:7e:c3:a4:07:d9:02:f9:d9:f1:c5:0b:
b0:98:e6:67:ce:4d:c2:12:9f:1a:4d:b7:eb:a4:67:
54:2b:59:58:ac:67:ca:ad:8e:05:44:9c:cf:26:03:
b6:75:77:e9:09:12:d2:8f:0c:3f:31:eb:3b:37:f8:
a5:ff:02:92:57:c1:f1:d6:d8:49:a3:a3:b2:f7:78:
0e:3a:13:39:9d:b0:5c:7e:e3:d8:1f:20:1e:17:6a:
a8:7e:25:17:d2:a7:5b:44:a4:ea:dd:2c:07:cc:02:
d6:91:9e:ed:53:b3:a1:0e:3f:44:f7:b7:80:5a:cf:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EC:38:68:DC:1D:34:92:DF:28:FA:E7:FC:2C:CF:38:61:AB:93:B9
X509v3 Authority Key Identifier:
keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a9:3e:1d:96:ed:40:99:c2:53:8a:be:f8:8b:93:5b:38:59:
61:d2:9e:ca:8a:45:51:80:82:5d:dd:99:64:30:3b:20:b7:0d:
86:52:6e:56:3b:d8:a2:3f:28:ef:41:a4:6a:35:5e:d5:4b:01:
fc:49:b8:74:9f:c4:0d:d2:15:8e:25:60:6c:bf:68:d6:a8:a9:
7d:4d:9a:f4:9b:06:b2:d5:cb:0e:e3:4d:d4:7a:d0:35:c1:12:
0f:d8:6b:05:98:61:7e:a0:ab:8c:65:27:36:ca:b4:3f:32:e8:
e1:26:9e:ab:d8:c2:26:c5:4a:ac:87:71:e4:bd:aa:88:f2:2e:
fb:2f:6e:04:40:35:17:87:40:4b:e1:25:06:0e:a3:1b:31:9e:
47:c2:40:62:ed:82:46:b6:cd:3e:fa:b8:bb:5c:07:c9:d8:b8:
0e:4f:97:68:4f:52:c9:bc:52:73:56:06:03:50:29:65:dd:3b:
16:ea:6d:b9:30:47:33:1d:dc:65:6f:f2:bd:1b:27:2a:9b:b8:
1b:a3:ec:47:12:db:54:25:6d:a2:eb:f1:cd:57:d7:42:8f:bb:
74:14:0e:15:e6:50:8c:9f:15:fd:9a:7c:8e:2b:f7:f1:69:95:
f0:91:96:9e:49:9e:88:74:0a:5f:0e:87:b4:ab:69:0d:6b:61:
4e:92:71:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE4REExMTAvBgNVBAUTKDQ1MTIyNkIzRTk3N0NGMTE5NjE3NTVCMDY5MzdDMUY3
RTczNURDNUUwHhcNMjYwNjEyMjEzNzMyWhcNMjYwNjE5MjEzNzMyWjAYMRYwFAYD
VQQDEw02YTJjN2MxZC0wZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvd+CjEfnRqNYpkYd7/9tHNoZlzeoJwrbq2WKeQsHyFoTks8NycOqNHw9XwCn
WeSOyPS0weREUhY45hiva8Ig20k/6p4Wiikk+cZWtRypmwmtV6TSHxofFjuN02gA
slZo/YxWRL8Ysem97h/dJ0cF7XY4GOHOU2Yb1LqUBLL7eWFz7OGS7KSWCmnsfsOk
B9kC+dnxxQuwmOZnzk3CEp8aTbfrpGdUK1lYrGfKrY4FRJzPJgO2dXfpCRLSjww/
Mes7N/il/wKSV8Hx1thJo6Oy93gOOhM5nbBcfuPYHyAeF2qofiUX0qdbRKTq3SwH
zALWkZ7tU7OhDj9E97eAWs866QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODsOGjc
HTSS3yj65/wszzhhq5O5MB8GA1UdIwQYMBaAFEUSJrPpd88RlhdVsGk3wffnNdxe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMThEQS9ERTM4OTRFQzVF
RTkxMUVCOUYzQjdGM0RDNEY5QUUwMi9SUkltcy1sM3p4R1dGMVd3YVRmQjktYzEz
RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JSSW1zLWwzenhHV0YxV3dhVGZCOS1jMTNGNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MThEQS9ERTM4OTRFQzVFRTkxMUVCOUYzQjdGM0RDNEY5QUUwMi9SUkltcy1sM3p4
R1dGMVd3YVRmQjktYzEzRjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPKk+HZbtQJnCU4q++IuTWzhZYdKeyopFUYCCXd2ZZDA7ILcNhlJuVjvYoj8o
70GkajVe1UsB/Em4dJ/EDdIVjiVgbL9o1qipfU2a9JsGstXLDuNN1HrQNcESD9hr
BZhhfqCrjGUnNsq0PzLo4Saeq9jCJsVKrIdx5L2qiPIu+y9uBEA1F4dAS+ElBg6j
GzGeR8JAYu2CRrbNPvq4u1wHydi4Dk+XaE9SybxSc1YGA1ApZd07FuptuTBHMx3c
ZW/yvRsnKpu4G6PsRxLbVCVtouvxzVfXQo+7dBQOFeZQjJ8V/Zp8jiv38WmV8JGW
nkmeiHQKXw6HtKtpDWthTpJxLQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:56:13 2026 by rpki-client