
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
File: rdlBjw-bVfO3N2oJPbEdutOu_sg.mft (raw, json)
Hash identifier: HUutQyn32j8STbk6+gfl55p08HAO3CCVtW6e1coyn/4=
Subject key identifier: FE:2B:0F:DF:F2:20:F4:6F:5A:57:23:45:55:67:A9:B6:C8:E5:E0:32
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 1043
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
Manifest number: 0EE0
Signing time: Thu 04 Jun 2026 17:52:09 +0000
Manifest this update: Thu 04 Jun 2026 17:52:08 +0000
Manifest next update: Thu 11 Jun 2026 17:52:08 +0000
Files and hashes: 1: rdlBjw-bVfO3N2oJPbEdutOu_sg.crl (hash: M4PoRnA4kMWnKCWmNf8qAcO+62gyv24E6QpGJINca2Q=)
2: B86FBE4A2E3611EB84E66039C4F9AE02.roa (hash: MEq/zqDiqJp2Uun6AMM0CPmEDIvnRItUAgVmjrZYsak=)
3: E79C4936420D11EC89D7C163C4F9AE02.roa (hash: b6TojMyMXKNeDAeMFbGHIUBMHFzUnaz4LVGCT3m/S4A=)
4: AE9742429B5711EB8E3BEB19C4F9AE02.roa (hash: VlH0/M10psNcoKdtlUVIV48oyOy9vP9GgGbLgRdGLG4=)
5: 311A2FEC1C5211F1B3DBB984083D8C67.roa (hash: A7jnVn3qw0yuPW3mD5u4hPnJBijrX2IlDdxBQ2AT2g8=)
6: 54AB633219D211F09C581262C4F9AE02.roa (hash: ikTD47sskq5df7NdzOni7LQ2W1ieiVdSgEvZGRAxZUk=)
7: 640C18A214AD11EEAA685687C4F9AE02.roa (hash: pCka02VxJIV+WttfZAmOjkT4DnDYrY/FXrYiBj08AC4=)
8: 27F85F401B0811EEA3313C43C4F9AE02.roa (hash: m7XS9I2yi5BoAseIr1qQouVhNxYJIXGHAhyd9kVBdpk=)
9: 5D364EA2C5DC11F0B2B11B60C4F9AE02.roa (hash: WXrkffcsPWLlWhyJc9ZnGKRdWxZGzBWuLOdC3IHK6S0=)
10: 706D3EA4140211EB87D7320FC4F9AE02.roa (hash: PUlbILDrA0CkgAjnlfjXmrs6S6DfL1lysnF6FndUbHk=)
11: 624A8CB0A75211EDB46F8967C4F9AE02.roa (hash: dVJcEiWpRACJoxXp8/joMlNohcH1dI43ijkAQVDDM3A=)
12: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (hash: RZg0gpmdXTOMxiQZM8/sa1zNNrDaJ9Ayd3Yfhg6mOsA=)
13: 6ACBF170CC4C11ED8B54A36FC4F9AE02.roa (hash: 509Uw4hnR6dD95p8suHp5mpSSFDb/NkiCjgNz2u/x+U=)
14: 59C7E67C77CC11EAB764ED34C4F9AE02.roa (hash: /4tH1s4E8T8qHYZPc5ySE0CZ+VDXgEbcfRTcKTtPG/U=)
15: 8B0EC9621D0611EDBAB65333C4F9AE02.roa (hash: VHM6rMMweW28yfcnqNvVN6J55SAjeCrjdEdS+4wbH6I=)
16: AB2FDD4CA56911EA8F159D7BC4F9AE02.roa (hash: kghpmYNXyuOKorvN1DMiDeZtpzpyQy6xHLKDlrlnfWQ=)
17: 849EBBA60CCA11ED97820077C4F9AE02.roa (hash: N7H8CuDSaYksR8khjOJr1UXk6vfcW5UBc+CFb8pWBmE=)
18: 598351E2476011F097E14360C4F9AE02.roa (hash: qAy1pty8d3DwYn+MfzlGLyg2MOZZ+erLpBFe5d2Q6G0=)
19: 3949DB48056711F09B0C9329C4F9AE02.roa (hash: o32k24j0rnFW8klwuhTjj7MDxut4TW9Jvizc+18xCeo=)
20: 0134DE8CC77211EC9B377B2DC4F9AE02.roa (hash: JkcuuEA3HJcOXsAtpW1A448oG1rvXao+yzD5319lzLs=)
21: DA05FC5C58A311EC952D4D56C4F9AE02.roa (hash: WEd99p8XgDs4oIAywYRjIjywMg7MVFztWsJ0F9O4Sw0=)
22: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (hash: o/o66p/U3D3MQGtDRIKgSC/dUgJBKahXAPkNnwuL3l4=)
23: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (hash: PWWAioFjbRD0RZ1JKf4EHHtcijyh9iQZXrsCU9Myabg=)
24: 1B88FC66823D11EC8E3CB427C4F9AE02.roa (hash: ac+aodcf7CV859BIQKT57PwHWz/3vXPzuwLxjQlMsmo=)
25: C735E33E1CB511EAB25B4768C4F9AE02.roa (hash: lgr8DtsUKJkJkisCQuG7lau3AEMsxOnGwC/QoSLAc10=)
26: B3B97C46510311EDA562C34DC4F9AE02.roa (hash: /JsF3Ytb5dsjMRIl/BDQBfl1TUa4uH0JLhF3rn+v5BQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 17:52:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4163 (0x1043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Jun 4 17:52:08 2026 GMT
Not After : Jun 11 17:52:08 2026 GMT
Subject: CN=6a21bb49-0ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:14:83:cc:39:77:da:2a:07:77:9a:27:00:
21:04:6c:ea:8b:65:b5:3b:75:e8:17:01:a7:50:be:
07:05:87:14:95:31:e4:c8:b9:4e:2b:41:38:e5:ee:
a1:75:1f:df:3b:ef:62:2b:ba:b4:e3:75:19:5c:4f:
24:f6:5a:39:76:6a:ab:29:08:d7:83:5a:4f:26:48:
80:33:5a:34:5c:46:03:e3:f3:0d:7a:ea:bb:90:4e:
e1:cf:47:b0:cd:3b:66:70:2b:7c:06:98:02:27:99:
1b:9e:56:18:2c:f7:90:6f:23:f4:53:76:e0:bb:08:
68:fa:f1:e7:94:82:db:20:fc:29:51:cf:76:bc:ff:
ed:24:bf:6f:c3:d9:07:3d:cc:a6:93:d1:4d:6c:e4:
b8:d9:44:4a:6c:ba:ee:1a:89:9b:bf:d6:57:b6:6f:
0b:27:3b:29:46:67:5c:e9:1a:0c:1a:08:fb:7e:75:
8e:ac:c5:3b:c4:e7:91:bd:a6:da:c2:46:14:f3:e1:
5d:52:bc:21:9f:56:f3:e4:8e:73:bd:84:2e:04:46:
86:06:5a:28:05:1d:1f:df:6b:da:57:77:ec:7c:13:
4c:76:20:d0:3b:99:19:17:69:91:6e:63:77:32:3a:
f7:6a:eb:14:82:dc:5b:f4:35:d8:4d:ab:43:a3:c3:
c9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2B:0F:DF:F2:20:F4:6F:5A:57:23:45:55:67:A9:B6:C8:E5:E0:32
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:8c:b0:90:1c:72:33:bb:a0:fb:9a:3c:0c:f3:1e:d9:df:c2:
34:5c:3c:84:fd:ae:a3:eb:c7:16:d1:38:ea:d6:c3:d4:4a:11:
41:98:af:38:4d:18:c9:7b:31:fb:a5:f8:82:0c:23:69:cc:4c:
b8:e8:12:58:90:bd:ee:9d:f0:5d:6e:bb:f7:6e:90:5e:fb:36:
d3:fa:3f:e9:e4:f0:ef:6b:3d:b0:f6:c7:f3:a7:ca:ce:69:6c:
7f:96:cf:25:94:0c:9f:ec:bc:ef:92:d7:d3:c4:da:f8:08:ff:
f1:7d:eb:b1:a1:71:cd:c4:b4:8b:ac:cc:5b:73:39:30:b3:27:
d4:0c:99:5b:0d:95:7d:c7:e2:8d:a0:98:68:61:eb:a3:e9:32:
fd:45:b7:9f:83:ad:ae:b5:62:92:4f:f6:e6:9b:a0:aa:1b:49:
4a:73:72:84:34:8c:46:e9:e3:24:85:96:69:29:f5:7c:9e:53:
c6:f2:fd:af:f5:75:72:47:24:9a:8a:de:a9:25:0b:f0:9a:91:
b1:cf:c7:cc:e4:f9:02:87:fd:e9:12:db:ba:e8:33:40:f6:bf:
0f:fa:97:e1:63:a0:bb:40:97:1d:5a:d8:ae:49:80:ce:6a:28:
2a:93:be:f3:9e:41:07:a1:47:b7:3f:ee:6a:a9:a5:07:cc:9e:
f9:74:35:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB
RDNBRUZFQzgwHhcNMjYwNjA0MTc1MjA4WhcNMjYwNjExMTc1MjA4WjAYMRYwFAYD
VQQDEw02YTIxYmI0OS0wYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqRAUg8w5d9oqB3eaJwAhBGzqi2W1O3XoFwGnUL4HBYcUlTHkyLlOK0E45e6h
dR/fO+9iK7q043UZXE8k9lo5dmqrKQjXg1pPJkiAM1o0XEYD4/MNeuq7kE7hz0ew
zTtmcCt8BpgCJ5kbnlYYLPeQbyP0U3bguwho+vHnlILbIPwpUc92vP/tJL9vw9kH
Pcymk9FNbOS42URKbLruGombv9ZXtm8LJzspRmdc6RoMGgj7fnWOrMU7xOeRvaba
wkYU8+FdUrwhn1bz5I5zvYQuBEaGBlooBR0f32vaV3fsfBNMdiDQO5kZF2mRbmN3
Mjr3ausUgtxb9DXYTatDo8PJEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4rD9/y
IPRvWlcjRVVnqbbI5eAyMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4
Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkZBMC8xRDY2RDQ4NkQ4Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZm
TzNOMm9KUGJFZHV0T3Vfc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmYywkBxyM7ug+5o8DPMe2d/CNFw8hP2uo+vHFtE46tbD1EoRQZivOE0YyXsx
+6X4ggwjacxMuOgSWJC97p3wXW67926QXvs20/o/6eTw72s9sPbH86fKzmlsf5bP
JZQMn+y875LX08Ta+Aj/8X3rsaFxzcS0i6zMW3M5MLMn1AyZWw2VfcfijaCYaGHr
o+ky/UW3n4OtrrVikk/25pugqhtJSnNyhDSMRunjJIWWaSn1fJ5TxvL9r/V1ckck
moreqSUL8JqRsc/HzOT5Aof96RLbuugzQPa/D/qX4WOgu0CXHVrYrkmAzmooKpO+
855BB6FHtz/uaqmlB8ye+XQ1vA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 16:59:17 2026 by rpki-client