
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
File: rdlBjw-bVfO3N2oJPbEdutOu_sg.mft (raw, json)
Hash identifier: OHVNHFa0DyNbkwh/UesHpwKne6cAw1F0UaQTm5H0BXU=
Subject key identifier: 4F:43:59:29:DC:8C:D5:16:52:11:E2:0B:2E:78:7F:F8:91:73:AC:21
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 101C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
Manifest number: 0EBA
Signing time: Tue 24 Mar 2026 17:45:27 +0000
Manifest this update: Tue 24 Mar 2026 17:45:26 +0000
Manifest next update: Tue 31 Mar 2026 17:45:26 +0000
Files and hashes: 1: rdlBjw-bVfO3N2oJPbEdutOu_sg.crl (hash: JrJ1KKJ6uEJhibB78xFZYS/76/GGpU3yqtVhiaPS8xA=)
2: C735E33E1CB511EAB25B4768C4F9AE02.roa (hash: lgr8DtsUKJkJkisCQuG7lau3AEMsxOnGwC/QoSLAc10=)
3: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (hash: o/o66p/U3D3MQGtDRIKgSC/dUgJBKahXAPkNnwuL3l4=)
4: 5D364EA2C5DC11F0B2B11B60C4F9AE02.roa (hash: WXrkffcsPWLlWhyJc9ZnGKRdWxZGzBWuLOdC3IHK6S0=)
5: DA05FC5C58A311EC952D4D56C4F9AE02.roa (hash: WEd99p8XgDs4oIAywYRjIjywMg7MVFztWsJ0F9O4Sw0=)
6: E79C4936420D11EC89D7C163C4F9AE02.roa (hash: b6TojMyMXKNeDAeMFbGHIUBMHFzUnaz4LVGCT3m/S4A=)
7: AE9742429B5711EB8E3BEB19C4F9AE02.roa (hash: VlH0/M10psNcoKdtlUVIV48oyOy9vP9GgGbLgRdGLG4=)
8: 640C18A214AD11EEAA685687C4F9AE02.roa (hash: pCka02VxJIV+WttfZAmOjkT4DnDYrY/FXrYiBj08AC4=)
9: 311A2FEC1C5211F1B3DBB984083D8C67.roa (hash: 47zKFGCD/DeclqnhTijGbM9OZEUPBef5RfDJAaFo6jo=)
10: B86FBE4A2E3611EB84E66039C4F9AE02.roa (hash: MEq/zqDiqJp2Uun6AMM0CPmEDIvnRItUAgVmjrZYsak=)
11: 6ACBF170CC4C11ED8B54A36FC4F9AE02.roa (hash: 509Uw4hnR6dD95p8suHp5mpSSFDb/NkiCjgNz2u/x+U=)
12: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (hash: RZg0gpmdXTOMxiQZM8/sa1zNNrDaJ9Ayd3Yfhg6mOsA=)
13: 0134DE8CC77211EC9B377B2DC4F9AE02.roa (hash: JkcuuEA3HJcOXsAtpW1A448oG1rvXao+yzD5319lzLs=)
14: 3949DB48056711F09B0C9329C4F9AE02.roa (hash: o32k24j0rnFW8klwuhTjj7MDxut4TW9Jvizc+18xCeo=)
15: 54AB633219D211F09C581262C4F9AE02.roa (hash: ikTD47sskq5df7NdzOni7LQ2W1ieiVdSgEvZGRAxZUk=)
16: 8B0EC9621D0611EDBAB65333C4F9AE02.roa (hash: VHM6rMMweW28yfcnqNvVN6J55SAjeCrjdEdS+4wbH6I=)
17: AB2FDD4CA56911EA8F159D7BC4F9AE02.roa (hash: kghpmYNXyuOKorvN1DMiDeZtpzpyQy6xHLKDlrlnfWQ=)
18: 598351E2476011F097E14360C4F9AE02.roa (hash: qAy1pty8d3DwYn+MfzlGLyg2MOZZ+erLpBFe5d2Q6G0=)
19: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (hash: PWWAioFjbRD0RZ1JKf4EHHtcijyh9iQZXrsCU9Myabg=)
20: 849EBBA60CCA11ED97820077C4F9AE02.roa (hash: N7H8CuDSaYksR8khjOJr1UXk6vfcW5UBc+CFb8pWBmE=)
21: B3B97C46510311EDA562C34DC4F9AE02.roa (hash: /JsF3Ytb5dsjMRIl/BDQBfl1TUa4uH0JLhF3rn+v5BQ=)
22: 27F85F401B0811EEA3313C43C4F9AE02.roa (hash: m7XS9I2yi5BoAseIr1qQouVhNxYJIXGHAhyd9kVBdpk=)
23: 59C7E67C77CC11EAB764ED34C4F9AE02.roa (hash: /4tH1s4E8T8qHYZPc5ySE0CZ+VDXgEbcfRTcKTtPG/U=)
24: 706D3EA4140211EB87D7320FC4F9AE02.roa (hash: PUlbILDrA0CkgAjnlfjXmrs6S6DfL1lysnF6FndUbHk=)
25: 1B88FC66823D11EC8E3CB427C4F9AE02.roa (hash: ac+aodcf7CV859BIQKT57PwHWz/3vXPzuwLxjQlMsmo=)
26: 624A8CB0A75211EDB46F8967C4F9AE02.roa (hash: dVJcEiWpRACJoxXp8/joMlNohcH1dI43ijkAQVDDM3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4124 (0x101c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Mar 24 17:45:26 2026 GMT
Not After : Mar 31 17:45:26 2026 GMT
Subject: CN=69c2cdb7-ca28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:54:33:0b:79:20:b4:49:8d:d0:f7:22:0b:
8c:23:7a:16:1e:d2:15:a8:99:ce:99:40:0b:c8:0c:
b0:cb:aa:39:e7:d2:7a:6f:a5:ed:8f:64:19:89:f5:
3e:ca:f0:85:12:b1:e8:61:e1:53:f9:3d:be:63:8a:
37:58:72:45:5e:e9:de:05:bf:14:53:18:27:ce:4d:
e8:24:aa:84:81:66:57:f8:54:4d:51:48:d7:2b:c6:
a4:46:e8:a4:ab:a8:da:03:74:90:91:97:1c:9a:f3:
3d:49:76:8e:57:54:90:c3:56:ac:15:ee:0c:82:6f:
99:da:d6:27:00:29:99:87:86:74:ac:80:c4:e8:d5:
0c:43:11:7c:4c:cd:a0:e1:70:69:f8:17:36:6e:85:
04:8d:0d:e3:22:ea:cb:8d:ee:c2:ff:75:08:ff:90:
11:88:b8:5d:41:83:85:e9:33:66:b8:b5:aa:b3:eb:
d7:6e:23:3f:ce:e5:22:28:e6:d6:70:dc:10:2a:f6:
07:89:73:92:61:52:3c:d7:69:41:da:49:42:be:e7:
4b:47:40:a9:83:37:29:78:ae:fd:e7:8a:1e:d1:dd:
83:f7:9b:89:a9:32:13:f1:cf:d8:a8:60:6c:c7:4d:
2e:cb:e7:47:76:38:99:5f:09:d2:97:bb:42:9a:d2:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:43:59:29:DC:8C:D5:16:52:11:E2:0B:2E:78:7F:F8:91:73:AC:21
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0f:d9:2c:a2:c6:fd:80:37:3a:d7:d3:00:5f:cd:f7:35:39:
1d:8c:25:c7:3a:4e:95:61:15:08:6b:a8:f5:02:ba:e2:36:94:
c1:5b:66:bb:39:5c:86:68:af:ea:4f:a7:c4:21:e1:ab:30:cc:
e2:9e:87:9e:ba:ce:2a:70:4e:7d:27:aa:ce:cc:ba:d7:ad:49:
39:c5:e7:52:de:3b:4f:09:da:61:8c:bd:09:a2:5f:53:04:3d:
96:55:3d:b5:16:40:81:75:03:83:a5:54:14:44:14:3e:47:59:
07:96:2e:44:03:96:2f:4b:15:c7:68:74:39:1e:b1:43:21:71:
41:ca:5f:26:0a:58:31:a6:c8:36:45:e4:1d:e0:98:75:2b:ff:
83:e6:89:02:50:26:19:aa:41:db:37:cc:22:49:21:41:df:a5:
e8:0b:18:ea:27:5e:19:4d:16:ca:9f:db:ef:d8:b6:14:df:c0:
f7:8f:3f:64:01:a4:a3:b4:3f:15:77:26:3b:6c:07:69:5f:b4:
00:1f:ef:d7:57:8d:1a:4b:6e:20:dd:b8:d7:da:38:53:92:73:
00:16:04:8a:e3:e6:25:4c:68:43:3b:60:20:5c:18:2e:1e:f1:
bc:dc:5d:9c:5f:50:17:b9:69:3d:26:61:cb:cf:36:4b:3d:aa:
0f:72:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:33 2026 by rpki-client