
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
File: rdlBjw-bVfO3N2oJPbEdutOu_sg.mft (raw, json)
Hash identifier: FDtXzdRlxObzfbmkN8hjyGN7a8SILR7zwBCdrvH4eE4=
Subject key identifier: 8D:27:03:08:5E:EC:DA:CC:2C:F1:26:BF:FE:B3:93:BA:53:24:37:6C
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 106F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
Manifest number: 0F01
Signing time: Mon 20 Jul 2026 18:03:25 +0000
Manifest this update: Mon 20 Jul 2026 18:03:25 +0000
Manifest next update: Mon 27 Jul 2026 18:03:25 +0000
Files and hashes: 1: rdlBjw-bVfO3N2oJPbEdutOu_sg.crl (hash: Z5U/RnkocjDHf1vuyTUXVHeuIMTOEEi2c4mKqPRU3+M=)
2: DA05FC5C58A311EC952D4D56C4F9AE02.roa (hash: WEd99p8XgDs4oIAywYRjIjywMg7MVFztWsJ0F9O4Sw0=)
3: C735E33E1CB511EAB25B4768C4F9AE02.roa (hash: lgr8DtsUKJkJkisCQuG7lau3AEMsxOnGwC/QoSLAc10=)
4: 27F85F401B0811EEA3313C43C4F9AE02.roa (hash: m7XS9I2yi5BoAseIr1qQouVhNxYJIXGHAhyd9kVBdpk=)
5: 1B88FC66823D11EC8E3CB427C4F9AE02.roa (hash: ac+aodcf7CV859BIQKT57PwHWz/3vXPzuwLxjQlMsmo=)
6: 311A2FEC1C5211F1B3DBB984083D8C67.roa (hash: m7EA9YN6gM2op3eUFv5aj91vry2yyxwg737y41tqfBY=)
7: 3949DB48056711F09B0C9329C4F9AE02.roa (hash: o32k24j0rnFW8klwuhTjj7MDxut4TW9Jvizc+18xCeo=)
8: AB2FDD4CA56911EA8F159D7BC4F9AE02.roa (hash: kghpmYNXyuOKorvN1DMiDeZtpzpyQy6xHLKDlrlnfWQ=)
9: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (hash: PWWAioFjbRD0RZ1JKf4EHHtcijyh9iQZXrsCU9Myabg=)
10: B86FBE4A2E3611EB84E66039C4F9AE02.roa (hash: MEq/zqDiqJp2Uun6AMM0CPmEDIvnRItUAgVmjrZYsak=)
11: B3B97C46510311EDA562C34DC4F9AE02.roa (hash: /JsF3Ytb5dsjMRIl/BDQBfl1TUa4uH0JLhF3rn+v5BQ=)
12: 640C18A214AD11EEAA685687C4F9AE02.roa (hash: pCka02VxJIV+WttfZAmOjkT4DnDYrY/FXrYiBj08AC4=)
13: 624A8CB0A75211EDB46F8967C4F9AE02.roa (hash: dVJcEiWpRACJoxXp8/joMlNohcH1dI43ijkAQVDDM3A=)
14: 598351E2476011F097E14360C4F9AE02.roa (hash: qAy1pty8d3DwYn+MfzlGLyg2MOZZ+erLpBFe5d2Q6G0=)
15: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (hash: RZg0gpmdXTOMxiQZM8/sa1zNNrDaJ9Ayd3Yfhg6mOsA=)
16: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (hash: o/o66p/U3D3MQGtDRIKgSC/dUgJBKahXAPkNnwuL3l4=)
17: 59C7E67C77CC11EAB764ED34C4F9AE02.roa (hash: /4tH1s4E8T8qHYZPc5ySE0CZ+VDXgEbcfRTcKTtPG/U=)
18: 8B0EC9621D0611EDBAB65333C4F9AE02.roa (hash: VHM6rMMweW28yfcnqNvVN6J55SAjeCrjdEdS+4wbH6I=)
19: 0134DE8CC77211EC9B377B2DC4F9AE02.roa (hash: msTMJE6mBxD5mA2gV0ptJywyNL3ivHirT04vALlCZ80=)
20: 6ACBF170CC4C11ED8B54A36FC4F9AE02.roa (hash: 509Uw4hnR6dD95p8suHp5mpSSFDb/NkiCjgNz2u/x+U=)
21: 54AB633219D211F09C581262C4F9AE02.roa (hash: ikTD47sskq5df7NdzOni7LQ2W1ieiVdSgEvZGRAxZUk=)
22: 5D364EA2C5DC11F0B2B11B60C4F9AE02.roa (hash: PpeyWD14dKt8E9ZSNOJae92lNZw77a7W5KBVkuT5Dak=)
23: E79C4936420D11EC89D7C163C4F9AE02.roa (hash: b6TojMyMXKNeDAeMFbGHIUBMHFzUnaz4LVGCT3m/S4A=)
24: 849EBBA60CCA11ED97820077C4F9AE02.roa (hash: N7H8CuDSaYksR8khjOJr1UXk6vfcW5UBc+CFb8pWBmE=)
25: AE9742429B5711EB8E3BEB19C4F9AE02.roa (hash: VlH0/M10psNcoKdtlUVIV48oyOy9vP9GgGbLgRdGLG4=)
26: 706D3EA4140211EB87D7320FC4F9AE02.roa (hash: PUlbILDrA0CkgAjnlfjXmrs6S6DfL1lysnF6FndUbHk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 18:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4207 (0x106f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Jul 20 18:03:25 2026 GMT
Not After : Jul 27 18:03:25 2026 GMT
Subject: CN=6a5e62ed-b039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:8d:4c:66:bd:df:70:bf:4c:c5:71:66:6c:
84:be:d9:5d:c8:40:d4:9b:bd:8a:9a:e6:f5:ee:f1:
60:61:7a:f9:1b:87:c2:34:64:36:d3:0c:2f:c8:6c:
36:17:64:83:d3:aa:0d:90:cf:a3:48:61:2d:f2:4f:
60:b3:7d:25:94:4f:19:3a:a9:a3:ad:34:76:5e:48:
0e:0d:ba:da:6f:8c:a1:e4:75:58:3c:b6:98:95:77:
3c:75:ae:23:be:5a:f2:58:a3:4c:1a:df:dc:02:a1:
9d:11:d3:33:07:ab:e9:54:b4:61:3a:2f:a7:a4:0f:
d4:07:1a:79:e1:68:3a:26:e9:7a:0c:f8:f5:39:7d:
5a:6c:f4:8e:9c:b3:fc:b5:be:cb:e5:9a:09:3f:5b:
ef:08:8b:ca:99:4e:b2:99:06:94:ca:7d:d1:61:d5:
43:77:97:42:14:e8:88:b7:cc:8e:2d:13:2e:a5:5d:
46:74:3e:22:ea:72:8c:07:84:7a:16:7b:bc:af:8d:
3f:76:1c:a8:21:94:94:3e:3f:7d:f6:16:38:a3:1f:
e5:48:c9:13:b9:aa:04:72:7b:79:f2:22:6e:d2:0d:
5d:bb:26:aa:a9:e9:42:0f:90:17:db:58:28:5a:56:
44:3c:8d:28:ad:33:bc:3b:d6:c6:9c:90:4d:44:9f:
9a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:27:03:08:5E:EC:DA:CC:2C:F1:26:BF:FE:B3:93:BA:53:24:37:6C
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b6:bc:48:0c:9d:e4:1b:9a:26:b5:e8:56:af:df:52:bf:da:
af:d8:9f:d9:0c:19:b3:9c:30:f2:7e:95:70:66:74:c3:7a:c2:
d2:b5:f9:de:39:69:54:3f:b3:cc:00:36:36:38:7d:3d:82:49:
70:9f:5d:d4:f6:69:56:4b:b3:78:c9:4e:fd:fc:f3:9d:1f:4c:
5d:08:20:3a:16:67:ca:b0:9d:51:a3:42:4b:94:80:e2:e8:fa:
c6:57:0d:c2:54:70:fe:0e:8b:5a:ab:c9:44:1f:7b:9c:7b:53:
b6:61:15:3e:52:a2:83:62:de:da:53:19:9c:05:b0:60:4c:22:
39:b4:10:c9:26:8d:3c:ad:e6:b5:06:6f:29:bc:5d:45:c0:f6:
5b:46:6d:88:a8:cf:25:90:96:7f:52:37:72:07:29:cb:12:40:
0e:ab:10:11:6f:fb:7d:4d:5c:15:28:e3:46:3a:93:88:be:b0:
fb:2e:75:e3:14:9c:5f:13:20:f8:8a:29:c1:f9:35:d5:63:5c:
d1:31:75:00:14:c0:4c:8d:70:95:27:86:cd:b3:b8:de:e0:ed:
5e:99:59:89:d8:83:d6:69:c3:da:1f:cf:df:e7:9f:cd:32:b4:
0e:dd:bf:35:91:e8:58:87:63:9d:09:ee:ff:61:43:b9:bd:c9:
e9:7a:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:18:26 2026 by rpki-client