
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
File: rdlBjw-bVfO3N2oJPbEdutOu_sg.mft (raw, json)
Hash identifier: HG6EqPyi7tV/TdHE0tl2z5uuwyPEqgLWif0jj+6HwFg=
Subject key identifier: A2:FC:09:67:76:D7:B4:5D:48:F0:A6:2C:64:EF:C2:40:EF:28:AB:91
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 1089
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
Manifest number: 0F1A
Signing time: Fri 04 Sep 2026 17:45:54 +0000
Manifest this update: Fri 04 Sep 2026 17:45:54 +0000
Manifest next update: Fri 11 Sep 2026 17:45:54 +0000
Files and hashes: 1: rdlBjw-bVfO3N2oJPbEdutOu_sg.crl (hash: ilUb2KumNtCShlYmqITBUEacpDAb2R+9I/OdaKfnGeA=)
2: 849EBBA60CCA11ED97820077C4F9AE02.roa (hash: N7H8CuDSaYksR8khjOJr1UXk6vfcW5UBc+CFb8pWBmE=)
3: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (hash: RZg0gpmdXTOMxiQZM8/sa1zNNrDaJ9Ayd3Yfhg6mOsA=)
4: C735E33E1CB511EAB25B4768C4F9AE02.roa (hash: lgr8DtsUKJkJkisCQuG7lau3AEMsxOnGwC/QoSLAc10=)
5: 624A8CB0A75211EDB46F8967C4F9AE02.roa (hash: dVJcEiWpRACJoxXp8/joMlNohcH1dI43ijkAQVDDM3A=)
6: AE9742429B5711EB8E3BEB19C4F9AE02.roa (hash: VlH0/M10psNcoKdtlUVIV48oyOy9vP9GgGbLgRdGLG4=)
7: 0134DE8CC77211EC9B377B2DC4F9AE02.roa (hash: msTMJE6mBxD5mA2gV0ptJywyNL3ivHirT04vALlCZ80=)
8: E79C4936420D11EC89D7C163C4F9AE02.roa (hash: b6TojMyMXKNeDAeMFbGHIUBMHFzUnaz4LVGCT3m/S4A=)
9: DA05FC5C58A311EC952D4D56C4F9AE02.roa (hash: WEd99p8XgDs4oIAywYRjIjywMg7MVFztWsJ0F9O4Sw0=)
10: 706D3EA4140211EB87D7320FC4F9AE02.roa (hash: PUlbILDrA0CkgAjnlfjXmrs6S6DfL1lysnF6FndUbHk=)
11: B3B97C46510311EDA562C34DC4F9AE02.roa (hash: /JsF3Ytb5dsjMRIl/BDQBfl1TUa4uH0JLhF3rn+v5BQ=)
12: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (hash: o/o66p/U3D3MQGtDRIKgSC/dUgJBKahXAPkNnwuL3l4=)
13: 5D364EA2C5DC11F0B2B11B60C4F9AE02.roa (hash: PpeyWD14dKt8E9ZSNOJae92lNZw77a7W5KBVkuT5Dak=)
14: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (hash: PWWAioFjbRD0RZ1JKf4EHHtcijyh9iQZXrsCU9Myabg=)
15: 54AB633219D211F09C581262C4F9AE02.roa (hash: ikTD47sskq5df7NdzOni7LQ2W1ieiVdSgEvZGRAxZUk=)
16: B86FBE4A2E3611EB84E66039C4F9AE02.roa (hash: MEq/zqDiqJp2Uun6AMM0CPmEDIvnRItUAgVmjrZYsak=)
17: 6ACBF170CC4C11ED8B54A36FC4F9AE02.roa (hash: 509Uw4hnR6dD95p8suHp5mpSSFDb/NkiCjgNz2u/x+U=)
18: AB2FDD4CA56911EA8F159D7BC4F9AE02.roa (hash: kghpmYNXyuOKorvN1DMiDeZtpzpyQy6xHLKDlrlnfWQ=)
19: 640C18A214AD11EEAA685687C4F9AE02.roa (hash: pCka02VxJIV+WttfZAmOjkT4DnDYrY/FXrYiBj08AC4=)
20: 311A2FEC1C5211F1B3DBB984083D8C67.roa (hash: dyqTEEIYeVtAZsmLmyq/Ta6O55/TMespZiFQ7vBszY8=)
21: 27F85F401B0811EEA3313C43C4F9AE02.roa (hash: m7XS9I2yi5BoAseIr1qQouVhNxYJIXGHAhyd9kVBdpk=)
22: 8B0EC9621D0611EDBAB65333C4F9AE02.roa (hash: VHM6rMMweW28yfcnqNvVN6J55SAjeCrjdEdS+4wbH6I=)
23: 59C7E67C77CC11EAB764ED34C4F9AE02.roa (hash: /4tH1s4E8T8qHYZPc5ySE0CZ+VDXgEbcfRTcKTtPG/U=)
24: 3949DB48056711F09B0C9329C4F9AE02.roa (hash: o32k24j0rnFW8klwuhTjj7MDxut4TW9Jvizc+18xCeo=)
25: 1B88FC66823D11EC8E3CB427C4F9AE02.roa (hash: ac+aodcf7CV859BIQKT57PwHWz/3vXPzuwLxjQlMsmo=)
26: 598351E2476011F097E14360C4F9AE02.roa (hash: qAy1pty8d3DwYn+MfzlGLyg2MOZZ+erLpBFe5d2Q6G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4233 (0x1089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Sep 4 17:45:54 2026 GMT
Not After : Sep 11 17:45:54 2026 GMT
Subject: CN=6a9b03d2-9b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d0:f2:54:4a:99:55:9a:0c:0e:cc:44:a7:be:
9c:38:f7:d1:c0:34:ed:dd:1f:b1:83:3a:d3:c9:e1:
40:87:53:fe:13:c2:72:0c:3e:0f:b2:c9:ef:c3:ef:
14:b1:bf:3e:24:70:e6:c6:03:00:26:30:67:d4:7a:
b5:ba:cf:c3:a4:d9:87:07:31:9b:24:92:d2:9b:00:
91:0e:d8:93:bd:da:d5:2e:90:aa:8b:09:ce:f3:f7:
8b:e5:9e:f5:71:be:c6:56:23:8f:00:4a:ac:3e:61:
51:a1:7c:5b:77:73:f0:d6:60:cc:24:55:ce:c5:66:
91:da:46:2b:3c:a7:5c:80:2d:9b:0b:f4:11:30:b4:
fa:e5:9a:78:12:d7:56:f6:07:97:a0:19:02:a4:4d:
67:a8:fd:57:35:63:16:de:a2:de:94:fa:5f:45:ed:
d8:d9:85:3c:68:2b:a7:6f:b9:f1:b7:bc:aa:fe:06:
1a:21:8e:3c:3b:cb:21:98:fa:6b:4d:0c:d2:5e:d4:
d9:15:e8:5c:76:70:92:46:a1:3b:08:7d:53:24:99:
99:5b:cd:d5:49:e5:7c:70:b1:05:a8:e8:11:e7:c5:
70:5d:90:14:06:e3:3d:8a:d0:89:4e:d6:8b:92:9d:
68:cb:3d:17:b0:1a:8f:96:fd:b8:84:78:5a:92:3f:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FC:09:67:76:D7:B4:5D:48:F0:A6:2C:64:EF:C2:40:EF:28:AB:91
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6a:16:b6:04:d4:7a:fe:0a:6b:26:27:67:1c:7c:9b:fc:3c:
bd:55:db:37:45:1c:8e:f6:04:c1:75:3b:b7:ee:1c:ea:21:92:
50:af:a3:aa:8c:8c:49:d0:2f:b3:8a:9f:45:e8:4f:34:17:2f:
a7:27:9f:8d:38:a4:71:89:81:b6:e6:c2:3d:c6:ce:c5:80:51:
c3:10:82:85:89:4d:e2:3b:09:4b:f0:c0:36:b5:50:a4:85:e0:
fe:6c:b8:98:2f:1f:75:96:08:f5:2a:b0:3b:1c:24:28:c9:e6:
14:41:03:45:e5:4d:f5:0f:72:87:1c:51:7c:68:1e:80:0b:e9:
ac:ae:fb:61:e1:42:97:f8:ae:6f:db:a1:86:61:fa:15:c6:15:
e2:7e:77:0e:80:f8:59:25:c3:ea:a3:64:2f:c2:18:e9:d1:89:
8e:1e:4c:52:59:cd:ee:93:53:2b:07:fa:be:09:01:c8:89:0b:
98:b9:b3:69:26:52:2e:4d:37:e4:dd:49:21:51:4b:3d:4b:16:
ac:4e:ba:c0:1d:46:c7:17:be:50:69:3a:02:2a:a3:a0:8c:b1:
07:43:ab:ed:b5:89:d0:e0:ef:a9:86:fa:32:64:40:c3:bc:c6:
1d:6a:2a:0a:6a:3b:76:f0:e5:f7:6c:57:0f:0e:29:34:95:ae:
a7:c6:4f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:02:50 2026 by rpki-client