
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
File: rdlBjw-bVfO3N2oJPbEdutOu_sg.mft (raw, json)
Hash identifier: ebC2ahacyf3ZabcAdNQV7KpIqF5h0sSNKUZIG48/W60=
Subject key identifier: 55:3E:35:B4:AD:87:78:64:03:91:3C:25:97:BA:E5:5F:C0:D1:44:68
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 1070
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
Manifest number: 0F02
Signing time: Wed 22 Jul 2026 18:02:35 +0000
Manifest this update: Wed 22 Jul 2026 18:02:35 +0000
Manifest next update: Wed 29 Jul 2026 18:02:35 +0000
Files and hashes: 1: rdlBjw-bVfO3N2oJPbEdutOu_sg.crl (hash: nC3T4gGjw8n7KmGCiaqhFSVH7q/TpZXPFbLuEeCrvec=)
2: 624A8CB0A75211EDB46F8967C4F9AE02.roa (hash: dVJcEiWpRACJoxXp8/joMlNohcH1dI43ijkAQVDDM3A=)
3: 54AB633219D211F09C581262C4F9AE02.roa (hash: ikTD47sskq5df7NdzOni7LQ2W1ieiVdSgEvZGRAxZUk=)
4: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (hash: PWWAioFjbRD0RZ1JKf4EHHtcijyh9iQZXrsCU9Myabg=)
5: 311A2FEC1C5211F1B3DBB984083D8C67.roa (hash: m7EA9YN6gM2op3eUFv5aj91vry2yyxwg737y41tqfBY=)
6: E79C4936420D11EC89D7C163C4F9AE02.roa (hash: b6TojMyMXKNeDAeMFbGHIUBMHFzUnaz4LVGCT3m/S4A=)
7: C735E33E1CB511EAB25B4768C4F9AE02.roa (hash: lgr8DtsUKJkJkisCQuG7lau3AEMsxOnGwC/QoSLAc10=)
8: 598351E2476011F097E14360C4F9AE02.roa (hash: qAy1pty8d3DwYn+MfzlGLyg2MOZZ+erLpBFe5d2Q6G0=)
9: 849EBBA60CCA11ED97820077C4F9AE02.roa (hash: N7H8CuDSaYksR8khjOJr1UXk6vfcW5UBc+CFb8pWBmE=)
10: DA05FC5C58A311EC952D4D56C4F9AE02.roa (hash: WEd99p8XgDs4oIAywYRjIjywMg7MVFztWsJ0F9O4Sw0=)
11: B86FBE4A2E3611EB84E66039C4F9AE02.roa (hash: MEq/zqDiqJp2Uun6AMM0CPmEDIvnRItUAgVmjrZYsak=)
12: 640C18A214AD11EEAA685687C4F9AE02.roa (hash: pCka02VxJIV+WttfZAmOjkT4DnDYrY/FXrYiBj08AC4=)
13: 6ACBF170CC4C11ED8B54A36FC4F9AE02.roa (hash: 509Uw4hnR6dD95p8suHp5mpSSFDb/NkiCjgNz2u/x+U=)
14: AE9742429B5711EB8E3BEB19C4F9AE02.roa (hash: VlH0/M10psNcoKdtlUVIV48oyOy9vP9GgGbLgRdGLG4=)
15: 27F85F401B0811EEA3313C43C4F9AE02.roa (hash: m7XS9I2yi5BoAseIr1qQouVhNxYJIXGHAhyd9kVBdpk=)
16: 706D3EA4140211EB87D7320FC4F9AE02.roa (hash: PUlbILDrA0CkgAjnlfjXmrs6S6DfL1lysnF6FndUbHk=)
17: 3949DB48056711F09B0C9329C4F9AE02.roa (hash: o32k24j0rnFW8klwuhTjj7MDxut4TW9Jvizc+18xCeo=)
18: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (hash: o/o66p/U3D3MQGtDRIKgSC/dUgJBKahXAPkNnwuL3l4=)
19: AB2FDD4CA56911EA8F159D7BC4F9AE02.roa (hash: kghpmYNXyuOKorvN1DMiDeZtpzpyQy6xHLKDlrlnfWQ=)
20: 59C7E67C77CC11EAB764ED34C4F9AE02.roa (hash: /4tH1s4E8T8qHYZPc5ySE0CZ+VDXgEbcfRTcKTtPG/U=)
21: 8B0EC9621D0611EDBAB65333C4F9AE02.roa (hash: VHM6rMMweW28yfcnqNvVN6J55SAjeCrjdEdS+4wbH6I=)
22: B3B97C46510311EDA562C34DC4F9AE02.roa (hash: /JsF3Ytb5dsjMRIl/BDQBfl1TUa4uH0JLhF3rn+v5BQ=)
23: 5D364EA2C5DC11F0B2B11B60C4F9AE02.roa (hash: PpeyWD14dKt8E9ZSNOJae92lNZw77a7W5KBVkuT5Dak=)
24: 1B88FC66823D11EC8E3CB427C4F9AE02.roa (hash: ac+aodcf7CV859BIQKT57PwHWz/3vXPzuwLxjQlMsmo=)
25: 0134DE8CC77211EC9B377B2DC4F9AE02.roa (hash: msTMJE6mBxD5mA2gV0ptJywyNL3ivHirT04vALlCZ80=)
26: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (hash: RZg0gpmdXTOMxiQZM8/sa1zNNrDaJ9Ayd3Yfhg6mOsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4208 (0x1070)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Jul 22 18:02:35 2026 GMT
Not After : Jul 29 18:02:35 2026 GMT
Subject: CN=6a6105bb-31d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:4e:4f:99:d0:87:cd:09:ca:82:9e:f2:dd:
d1:36:24:c4:dc:d2:e0:29:68:80:73:e3:6c:1d:38:
10:c9:ea:65:14:05:fa:26:79:24:ed:e6:8f:6b:6e:
b0:55:a3:7e:89:e5:fe:2b:77:33:ca:7f:6c:db:a0:
96:7b:ee:0e:3a:2c:c5:55:f0:42:35:5e:22:ca:8d:
3d:23:ea:ec:f4:7d:d2:d7:76:3c:36:f7:e6:12:cb:
b9:ff:37:2e:17:e4:e5:96:56:20:01:03:72:b0:b2:
90:03:d8:b4:27:4f:d2:db:47:c6:71:29:d2:39:11:
fa:10:4e:fd:26:bc:cc:bf:d5:83:8f:da:6a:19:69:
31:c2:49:ea:21:27:15:8f:b9:f0:06:10:fc:83:d7:
cb:ef:4a:64:f1:b5:63:be:f3:18:67:36:df:66:70:
c1:dd:6b:0b:ba:b1:ae:96:d2:c0:23:84:bc:ad:eb:
99:e9:72:2c:95:75:92:00:6f:4b:61:44:6c:b6:c7:
1a:c5:d5:b7:c3:3b:5c:4e:44:4e:02:f2:64:df:b3:
0f:3e:9c:c0:ce:03:55:c5:4f:89:0e:06:dd:78:ae:
17:da:18:ce:a5:e3:46:e9:4c:ce:10:fc:d4:49:89:
9b:c9:c6:09:e5:40:b3:f4:de:0a:d2:20:38:bf:2c:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3E:35:B4:AD:87:78:64:03:91:3C:25:97:BA:E5:5F:C0:D1:44:68
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:16:aa:bf:c7:f0:59:35:02:4b:f7:fd:b2:36:3a:e2:c5:ff:
0c:38:07:db:22:a6:ed:0f:f4:10:64:dc:b5:bc:c9:0e:e3:c5:
a5:f2:7e:ae:1f:6e:6a:31:49:fa:27:cd:98:28:4d:74:9f:4b:
d5:b8:8e:9b:4c:55:7d:e4:f2:66:d6:52:4a:e1:f2:12:39:02:
b1:d9:d2:fe:5d:70:5d:35:25:3f:b7:1d:c3:ec:6a:08:76:d3:
19:35:dc:87:b0:7b:ed:8b:03:e1:47:40:2b:87:ff:ce:00:cf:
18:1e:be:20:df:97:33:56:03:65:a4:8b:55:85:cb:fa:5a:e8:
41:64:66:fd:7a:bc:a6:66:f5:d5:b0:15:6c:ef:54:95:fe:10:
8a:e7:48:ba:bd:62:b3:50:98:05:d4:27:87:69:eb:02:78:02:
f9:67:99:fc:3f:fb:88:19:8a:7f:e5:9b:24:22:fe:88:c3:47:
53:72:10:21:64:25:42:a8:2e:29:3b:a9:73:74:1b:fa:e9:98:
4e:fe:4e:cb:5b:01:75:56:3b:ac:29:25:49:80:d6:ad:70:2a:
5a:8f:48:95:92:c5:10:e9:2b:6a:56:24:0a:37:6b:84:3e:1b:
c5:72:3d:33:06:57:87:8e:99:bc:f4:8b:a5:8a:7b:58:41:43:
ab:56:a5:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB
RDNBRUZFQzgwHhcNMjYwNzIyMTgwMjM1WhcNMjYwNzI5MTgwMjM1WjAYMRYwFAYD
VQQDEw02YTYxMDViYi0zMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy/9OT5nQh80JyoKe8t3RNiTE3NLgKWiAc+NsHTgQyeplFAX6Jnkk7eaPa26w
VaN+ieX+K3czyn9s26CWe+4OOizFVfBCNV4iyo09I+rs9H3S13Y8NvfmEsu5/zcu
F+TlllYgAQNysLKQA9i0J0/S20fGcSnSORH6EE79JrzMv9WDj9pqGWkxwknqIScV
j7nwBhD8g9fL70pk8bVjvvMYZzbfZnDB3WsLurGultLAI4S8reuZ6XIslXWSAG9L
YURstscaxdW3wztcTkROAvJk37MPPpzAzgNVxU+JDgbdeK4X2hjOpeNG6UzOEPzU
SYmbycYJ5UCz9N4K0iA4vyxADwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFU+NbSt
h3hkA5E8JZe65V/A0URoMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4
Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkZBMC8xRDY2RDQ4NkQ4Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZm
TzNOMm9KUGJFZHV0T3Vfc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYRaqv8fwWTUCS/f9sjY64sX/DDgH2yKm7Q/0EGTctbzJDuPFpfJ+rh9uajFJ
+ifNmChNdJ9L1biOm0xVfeTyZtZSSuHyEjkCsdnS/l1wXTUlP7cdw+xqCHbTGTXc
h7B77YsD4UdAK4f/zgDPGB6+IN+XM1YDZaSLVYXL+lroQWRm/Xq8pmb11bAVbO9U
lf4QiudIur1is1CYBdQnh2nrAngC+WeZ/D/7iBmKf+WbJCL+iMNHU3IQIWQlQqgu
KTupc3Qb+umYTv5Oy1sBdVY7rCklSYDWrXAqWo9IlZLFEOkralYkCjdrhD4bxXI9
MwZXh46ZvPSLpYp7WEFDq1alVA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:26:06 2026 by rpki-client