
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
File: rdlBjw-bVfO3N2oJPbEdutOu_sg.mft (raw, json)
Hash identifier: dVk3tuKI4W9urRRt5amLwxoyt6Trq9gZRd3b6g+ngcU=
Subject key identifier: 25:E8:09:5A:D5:C1:4D:0D:98:AB:C6:34:67:E3:1E:AD:A0:D9:B0:D5
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 0FD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
Manifest number: 0EA9
Signing time: Sat 28 Feb 2026 18:02:44 +0000
Manifest this update: Sat 28 Feb 2026 18:02:44 +0000
Manifest next update: Sat 07 Mar 2026 18:02:44 +0000
Files and hashes: 1: rdlBjw-bVfO3N2oJPbEdutOu_sg.crl (hash: jvBPFCtvTMecAd06ISVtMCnTAXWQPmc0wsktxMx+ijU=)
2: 706D3EA4140211EB87D7320FC4F9AE02.roa (hash: X1Um842R0rkbnkvtW5i4dXhagyn7Joy7SgVxIJHdrnM=)
3: 7FBDDAE21A9411F087D4BC86C4F9AE02.roa (hash: ECuCzlcHewxvBAzjJGaAUdTZfU7xRdWcUUQ63hb3o1w=)
4: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (hash: /vXiQXlJ2XjoaoqlCYxK4Jmfq/xVFyS/orb3vso2mww=)
5: 27F85F401B0811EEA3313C43C4F9AE02.roa (hash: byPMgbXff457sUSfXnlAKoKIrmpdSVkZ07eO7y9x0lY=)
6: 59C7E67C77CC11EAB764ED34C4F9AE02.roa (hash: NHP7YmzXvbtiTmaemnIKXJJ4ezTLaSJNHiaTdh9Q74U=)
7: 54AB633219D211F09C581262C4F9AE02.roa (hash: tHtlJJFncjw0dDXdFLyjtwDoS7Se78F4Ke14ju9EWwI=)
8: 3949DB48056711F09B0C9329C4F9AE02.roa (hash: b7nWTvwMcF+hjF4Bbfy/r9EubUG9gSmXulrB9jKm7d0=)
9: 5D364EA2C5DC11F0B2B11B60C4F9AE02.roa (hash: X8cLryL8cCVRW6phD4XuEIyt0oQsm107TzCq0gEIjcY=)
10: 640C18A214AD11EEAA685687C4F9AE02.roa (hash: P9DAsKO6A9xN7wtYkmYU6qosOiDe3MiHXp+U7yhWeEY=)
11: AE9742429B5711EB8E3BEB19C4F9AE02.roa (hash: 7AT1xkUpvaaOJjN8+ZzXz78spS2r8taLdHpzNRyBWLs=)
12: DA05FC5C58A311EC952D4D56C4F9AE02.roa (hash: RuWbEFgbtd70I2c9Uzx4/sHKDKZz2p/0Nraa5B51QH0=)
13: B3B97C46510311EDA562C34DC4F9AE02.roa (hash: qzofNUlRYnUmE3DAbm+DwF+S6nTkElm21Xng43rE3AE=)
14: 0134DE8CC77211EC9B377B2DC4F9AE02.roa (hash: OEn5E6mEmhX4OZk0ZQ6Gl1vTVics3LVEMP8WB/IMAEw=)
15: 8B0EC9621D0611EDBAB65333C4F9AE02.roa (hash: okBZC1FdQJKm7JIbAANvRrNSlETwEY25fkeRFAiYnoU=)
16: E79C4936420D11EC89D7C163C4F9AE02.roa (hash: 93/PTJ5AHY8pVPl8/LIZmIH9xno76Y0yNvmcI/u0FgY=)
17: 598351E2476011F097E14360C4F9AE02.roa (hash: SyGF3+GbDuziHMdUfpUp60VEmm1p65tBbfh1DU0atYg=)
18: 1B88FC66823D11EC8E3CB427C4F9AE02.roa (hash: Vz/yZ3uJknXVV4RRR0VGJRxhZubCyof4N6AcFnaH7rc=)
19: C735E33E1CB511EAB25B4768C4F9AE02.roa (hash: epZFB4O976E2LmMl4xHE4lDCk+Z1aRdiNSOYdb9klMs=)
20: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (hash: 2BIS7a6CnI7DPzP+DBSyU3VDfhBjgvCHYG2uMZJkeUE=)
21: B86FBE4A2E3611EB84E66039C4F9AE02.roa (hash: rvZwb3PuQKmb69c1ytlb4kiN4S41D1CerZhXmc5sn9M=)
22: AB2FDD4CA56911EA8F159D7BC4F9AE02.roa (hash: MtN/5UD4n04GgYQzy8DDCpmdaYSCAnDY7j9/j7wOUUE=)
23: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (hash: QLP1XvgVOdbsLfAXwYsdB0DquTkn3IvYBCeZ1bO46Ik=)
24: 624A8CB0A75211EDB46F8967C4F9AE02.roa (hash: fMG+PzW0yar5maIbdzwq2bdYL1ZAqNkCL+FMZMn/3R4=)
25: 849EBBA60CCA11ED97820077C4F9AE02.roa (hash: y8CWNkrcoUrfeqLAqFTkkR75Voyg8C7E+lhs1ByBKGE=)
26: 6ACBF170CC4C11ED8B54A36FC4F9AE02.roa (hash: oIvGS32OAwWMUQVITo8ubnRRsUCN+2zAVjIY8XmIy8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4056 (0xfd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Feb 28 18:02:44 2026 GMT
Not After : Mar 7 18:02:44 2026 GMT
Subject: CN=69a32dc4-cbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:90:65:6a:bf:97:a1:67:92:29:d1:58:36:
c9:b2:45:01:04:7d:48:e8:c5:08:d3:d7:6a:5c:d2:
e4:3f:71:d3:0e:c6:fc:8a:8f:ab:03:68:37:3b:91:
6b:00:d3:8e:70:5b:5b:5a:bc:6a:2e:ef:cd:06:d5:
2d:60:93:df:18:db:3a:83:e2:84:93:89:3b:70:d3:
b3:14:54:54:92:0b:d4:3f:57:e8:fe:c9:08:9e:fe:
fb:b5:59:b2:26:80:e6:72:29:94:17:3b:31:d2:f4:
50:f0:c4:e3:d7:61:cb:ba:77:26:14:92:c1:d4:87:
cf:3e:67:d1:cd:b8:b5:70:d1:07:f3:0a:cb:2a:12:
e6:30:fc:f6:29:c5:78:1e:ed:07:78:ee:d7:53:d0:
d7:b6:9d:4c:dc:e3:71:d3:b3:c9:d4:ee:75:0d:da:
2d:7e:6f:88:3b:dd:a3:ef:05:81:5f:fa:59:9f:bc:
56:50:93:ee:d2:28:9c:95:38:54:79:50:76:5d:5b:
cc:41:88:e7:e8:d5:81:84:19:35:d9:d2:e1:de:05:
c9:31:0b:ab:8b:54:87:53:93:44:cc:1f:e9:82:fb:
ef:4c:cc:91:a1:16:56:d6:90:e7:de:35:92:44:e2:
03:7c:ac:f6:f9:53:85:c7:8f:28:cf:de:b6:eb:82:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E8:09:5A:D5:C1:4D:0D:98:AB:C6:34:67:E3:1E:AD:A0:D9:B0:D5
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8c:76:87:21:ad:61:14:27:79:2f:01:56:c5:b2:46:b0:e7:
44:07:f5:a5:78:73:90:de:a4:a7:98:cc:a4:05:64:26:ec:8f:
23:93:95:9e:fe:8a:b2:26:65:01:87:38:49:df:d6:61:db:78:
a2:5d:5c:80:10:41:e4:b6:88:0c:0b:73:04:61:81:3b:f6:54:
69:88:61:a0:2a:48:33:db:da:9d:3b:50:72:9b:aa:3c:23:bc:
3d:57:52:b9:0e:e4:2f:da:64:61:00:fe:cd:85:d0:df:a5:76:
8f:21:53:01:ad:6d:2a:9d:03:d5:8e:22:24:91:2e:dc:74:d2:
37:1f:83:34:e4:78:03:82:f4:7c:a9:b0:49:74:36:1d:43:62:
9a:ed:61:ea:d1:b7:e6:8b:a8:77:9d:7b:0d:f6:fb:9b:c1:2f:
f9:e9:ee:5b:f9:78:1b:46:62:5c:66:72:66:5d:73:0b:89:25:
7c:b3:e2:df:96:c2:4f:c2:b3:df:b4:1c:93:4e:d8:c3:72:11:
07:22:a0:0e:05:f6:85:dd:4f:5b:08:2d:0e:1e:8b:66:24:dc:
40:44:13:5d:3d:ea:c2:db:ba:1b:ca:a4:29:58:87:4f:1c:0e:
a7:e1:22:5d:a9:de:00:7d:65:95:39:75:00:fd:1b:65:f2:ac:
cc:eb:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:35:30 2026 by rpki-client