
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
File: rdlBjw-bVfO3N2oJPbEdutOu_sg.mft (raw, json)
Hash identifier: 8E2bA9+dg8en+edZjMbxW1I6yzeODBL1lvwJYVZqMAk=
Subject key identifier: B6:9D:29:0E:96:B0:3D:49:8A:2E:64:27:72:EE:17:EF:38:20:A5:0E
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 102C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
Manifest number: 0EC9
Signing time: Mon 20 Apr 2026 17:49:14 +0000
Manifest this update: Mon 20 Apr 2026 17:49:13 +0000
Manifest next update: Mon 27 Apr 2026 17:49:13 +0000
Files and hashes: 1: rdlBjw-bVfO3N2oJPbEdutOu_sg.crl (hash: /GcYhpT5wC2KIrtpA2BZ+rqRU+yj6U5AMXgCyhet3B0=)
2: AE9742429B5711EB8E3BEB19C4F9AE02.roa (hash: VlH0/M10psNcoKdtlUVIV48oyOy9vP9GgGbLgRdGLG4=)
3: AB2FDD4CA56911EA8F159D7BC4F9AE02.roa (hash: kghpmYNXyuOKorvN1DMiDeZtpzpyQy6xHLKDlrlnfWQ=)
4: 0134DE8CC77211EC9B377B2DC4F9AE02.roa (hash: JkcuuEA3HJcOXsAtpW1A448oG1rvXao+yzD5319lzLs=)
5: C735E33E1CB511EAB25B4768C4F9AE02.roa (hash: lgr8DtsUKJkJkisCQuG7lau3AEMsxOnGwC/QoSLAc10=)
6: 54AB633219D211F09C581262C4F9AE02.roa (hash: ikTD47sskq5df7NdzOni7LQ2W1ieiVdSgEvZGRAxZUk=)
7: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (hash: RZg0gpmdXTOMxiQZM8/sa1zNNrDaJ9Ayd3Yfhg6mOsA=)
8: E79C4936420D11EC89D7C163C4F9AE02.roa (hash: b6TojMyMXKNeDAeMFbGHIUBMHFzUnaz4LVGCT3m/S4A=)
9: 5D364EA2C5DC11F0B2B11B60C4F9AE02.roa (hash: WXrkffcsPWLlWhyJc9ZnGKRdWxZGzBWuLOdC3IHK6S0=)
10: 706D3EA4140211EB87D7320FC4F9AE02.roa (hash: PUlbILDrA0CkgAjnlfjXmrs6S6DfL1lysnF6FndUbHk=)
11: 6ACBF170CC4C11ED8B54A36FC4F9AE02.roa (hash: 509Uw4hnR6dD95p8suHp5mpSSFDb/NkiCjgNz2u/x+U=)
12: 640C18A214AD11EEAA685687C4F9AE02.roa (hash: pCka02VxJIV+WttfZAmOjkT4DnDYrY/FXrYiBj08AC4=)
13: B3B97C46510311EDA562C34DC4F9AE02.roa (hash: /JsF3Ytb5dsjMRIl/BDQBfl1TUa4uH0JLhF3rn+v5BQ=)
14: 8B0EC9621D0611EDBAB65333C4F9AE02.roa (hash: VHM6rMMweW28yfcnqNvVN6J55SAjeCrjdEdS+4wbH6I=)
15: B86FBE4A2E3611EB84E66039C4F9AE02.roa (hash: MEq/zqDiqJp2Uun6AMM0CPmEDIvnRItUAgVmjrZYsak=)
16: 27F85F401B0811EEA3313C43C4F9AE02.roa (hash: m7XS9I2yi5BoAseIr1qQouVhNxYJIXGHAhyd9kVBdpk=)
17: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (hash: o/o66p/U3D3MQGtDRIKgSC/dUgJBKahXAPkNnwuL3l4=)
18: 3949DB48056711F09B0C9329C4F9AE02.roa (hash: o32k24j0rnFW8klwuhTjj7MDxut4TW9Jvizc+18xCeo=)
19: 624A8CB0A75211EDB46F8967C4F9AE02.roa (hash: dVJcEiWpRACJoxXp8/joMlNohcH1dI43ijkAQVDDM3A=)
20: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (hash: PWWAioFjbRD0RZ1JKf4EHHtcijyh9iQZXrsCU9Myabg=)
21: 59C7E67C77CC11EAB764ED34C4F9AE02.roa (hash: /4tH1s4E8T8qHYZPc5ySE0CZ+VDXgEbcfRTcKTtPG/U=)
22: 849EBBA60CCA11ED97820077C4F9AE02.roa (hash: N7H8CuDSaYksR8khjOJr1UXk6vfcW5UBc+CFb8pWBmE=)
23: 311A2FEC1C5211F1B3DBB984083D8C67.roa (hash: A7jnVn3qw0yuPW3mD5u4hPnJBijrX2IlDdxBQ2AT2g8=)
24: DA05FC5C58A311EC952D4D56C4F9AE02.roa (hash: WEd99p8XgDs4oIAywYRjIjywMg7MVFztWsJ0F9O4Sw0=)
25: 1B88FC66823D11EC8E3CB427C4F9AE02.roa (hash: ac+aodcf7CV859BIQKT57PwHWz/3vXPzuwLxjQlMsmo=)
26: 598351E2476011F097E14360C4F9AE02.roa (hash: qAy1pty8d3DwYn+MfzlGLyg2MOZZ+erLpBFe5d2Q6G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 17:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4140 (0x102c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Apr 20 17:49:13 2026 GMT
Not After : Apr 27 17:49:13 2026 GMT
Subject: CN=69e6671a-adc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:77:4d:4f:03:fb:3f:67:33:a5:9f:64:9a:
d4:36:a1:04:a9:ae:37:e5:37:bc:61:ed:de:7a:65:
cd:15:d1:9a:15:e9:ab:21:a7:5e:d2:f3:7e:6f:56:
13:5c:88:24:57:2d:6a:44:c5:89:0d:9c:cb:f5:47:
0b:d4:62:51:e9:d4:e6:3e:0c:25:41:c4:f7:8d:e8:
e0:0e:2f:b1:23:d3:cf:65:20:de:5b:1a:86:13:08:
f0:a9:fa:1e:42:e5:34:05:fe:95:f9:35:62:f3:8a:
59:8a:25:8f:de:f9:60:0e:af:e6:50:6b:c2:91:46:
ba:53:0a:ac:f7:e5:7b:be:c0:d6:c0:f6:15:54:15:
b8:d9:1a:bb:cb:96:34:25:67:40:6d:f3:6f:2f:8b:
46:e1:0c:6b:54:66:b9:a9:2c:ab:ae:49:d8:45:71:
56:38:99:51:e6:09:b2:14:40:22:e5:bb:e7:7f:87:
01:b1:97:49:84:d3:3a:2b:19:bc:07:09:bd:10:88:
48:0a:38:9e:b6:14:3d:05:86:fe:39:50:3a:53:e6:
06:05:63:b8:45:d5:d3:52:1c:70:91:51:5f:da:c6:
3b:c5:f1:1e:c2:3f:d7:8f:0b:9a:2c:3a:83:f8:a3:
81:8f:a8:87:f0:e9:b7:b1:1e:11:fa:60:d7:fb:e7:
77:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9D:29:0E:96:B0:3D:49:8A:2E:64:27:72:EE:17:EF:38:20:A5:0E
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:c5:f9:5e:c8:ee:57:89:19:37:ea:c8:54:d6:a9:77:80:9a:
40:8b:48:41:0e:6b:dc:7f:70:76:79:4d:c5:09:13:d4:6d:8b:
c5:c0:f5:64:6c:04:81:75:6a:6e:4a:e7:7e:ac:b0:c6:79:c3:
60:0e:d0:3c:41:ea:07:02:ad:d9:0f:a4:ee:c8:d5:df:b1:2d:
50:88:2e:59:59:ad:92:b1:1b:e5:ca:85:62:a2:0f:73:b0:d5:
7a:79:60:ec:b6:8b:70:04:e2:65:d6:de:e0:57:fc:db:48:ee:
db:fe:cf:59:6c:11:40:5b:4b:19:fe:79:df:af:09:f9:5a:57:
64:c3:6d:a6:7f:dc:e2:a9:19:ad:1e:7e:fb:d1:8f:1d:62:97:
57:95:2e:f5:c6:53:ba:22:20:bd:10:a9:d6:ff:07:f3:bf:6a:
55:67:98:63:b2:5f:b0:86:49:1b:6c:91:25:62:c1:84:04:3e:
ca:d4:be:9d:d2:f9:d3:f9:ca:dc:e5:f1:ea:69:e6:ad:c7:e5:
37:35:e1:b9:8e:bd:b0:86:89:d3:af:c9:e0:8a:02:65:fe:26:
dd:c6:20:2b:0a:a5:e0:29:37:56:4b:4c:23:bd:25:80:37:dd:
37:32:1f:96:04:d1:a0:d1:cc:a2:de:61:7c:2f:66:a5:9e:b2:
63:23:9f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:32:36 2026 by rpki-client