
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.mft
File: dmg6_E0ttk0_8fwL-w-IUgbPIxw.mft (raw, json)
Hash identifier: Ja5rlcCJ3/4QwoRGwfCltMqjXz/qGtGyZIvLiMkSd70=
Subject key identifier: CA:1D:14:7B:E6:2C:4C:59:81:45:18:CE:D6:CB:89:8C:6C:97:96:A0
Authority key identifier: 76:68:3A:FC:4D:2D:B6:4D:3F:F1:FC:0B:FB:0F:88:52:06:CF:23:1C
Certificate issuer: /CN=A9198BAC/serialNumber=76683AFC4D2DB64D3FF1FC0BFB0F885206CF231C
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmg6_E0ttk0_8fwL-w-IUgbPIxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.mft
Manifest number: 08
Signing time: Wed 25 Mar 2026 08:25:55 +0000
Manifest this update: Wed 25 Mar 2026 08:25:54 +0000
Manifest next update: Wed 01 Apr 2026 08:25:54 +0000
Files and hashes: 1: dmg6_E0ttk0_8fwL-w-IUgbPIxw.crl (hash: F/0w7s+0zXAqdo6CTEFK182SiDhOsKsxDrbTV5iV+uU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.crl
rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmg6_E0ttk0_8fwL-w-IUgbPIxw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198BAC, serialNumber=76683AFC4D2DB64D3FF1FC0BFB0F885206CF231C
Validity
Not Before: Mar 25 08:25:54 2026 GMT
Not After : Apr 1 08:25:54 2026 GMT
Subject: CN=69c39c12-cc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:83:c4:a4:95:55:16:98:69:01:6a:6f:d1:
39:de:0e:ac:b8:5b:df:2f:1e:e1:b8:e4:fb:77:23:
2f:a9:74:f3:25:6e:86:92:f6:80:44:52:a7:bb:cf:
95:7a:be:e7:34:c9:be:d7:07:2b:3b:6a:5f:c3:72:
d3:e7:94:e9:29:79:f2:68:bb:3f:55:a2:02:8d:02:
7d:db:15:16:a8:9e:ac:88:91:de:3a:29:22:58:1d:
9c:3f:d9:b1:5e:e9:c2:49:ba:20:9f:e8:7a:a1:fd:
0f:fa:09:87:ea:7b:b3:29:7b:27:6e:4d:64:2b:42:
a7:5d:ea:f0:86:ae:be:5a:3c:1c:2c:0e:94:81:ed:
1f:68:b8:cb:0d:4d:a4:fe:34:54:da:42:aa:17:f4:
10:d6:ca:fe:95:9b:3f:b6:c5:05:66:e8:d9:31:8c:
16:fa:1d:8b:71:65:a0:7a:e7:5e:a8:ae:82:ba:d8:
c2:2a:e9:15:79:1b:f7:cb:48:dc:20:0f:bf:17:08:
33:eb:cf:e1:b9:0a:42:8e:e0:bb:05:49:2d:fb:88:
bd:01:15:8a:d8:07:8d:ff:49:d1:f5:cf:44:04:9d:
99:df:20:e3:37:3f:76:22:64:b0:8e:fc:db:f1:d6:
7e:ab:46:38:2b:1e:04:2d:30:10:21:6a:ac:7c:e7:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1D:14:7B:E6:2C:4C:59:81:45:18:CE:D6:CB:89:8C:6C:97:96:A0
X509v3 Authority Key Identifier:
keyid:76:68:3A:FC:4D:2D:B6:4D:3F:F1:FC:0B:FB:0F:88:52:06:CF:23:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmg6_E0ttk0_8fwL-w-IUgbPIxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:eb:bb:45:5e:6b:a3:19:f0:be:ae:04:60:51:73:26:b9:de:
ec:04:11:bd:32:99:31:8e:9e:5d:25:70:fd:30:5d:cb:df:54:
6b:a4:f2:c6:5b:15:be:7d:01:cc:86:41:a5:05:16:8f:14:f8:
25:4e:b2:17:99:52:f5:da:8e:68:8f:e5:7c:db:66:2f:23:25:
3e:4b:b0:2a:1d:1d:fc:51:6e:33:39:65:91:a8:91:35:7f:29:
9b:66:b4:be:3b:b6:c4:c0:ef:8c:1a:8d:71:60:0e:da:ac:51:
b0:4d:bb:dd:e2:1b:ec:d4:16:ef:5b:b5:a0:cb:36:bb:4f:62:
38:bc:f0:eb:a2:88:ee:5a:c7:dd:ad:ef:17:ed:36:db:71:70:
88:7d:b0:7b:b4:e0:74:d8:a9:1d:f2:80:5c:45:0a:0f:33:46:
39:10:a3:aa:ac:68:6e:7d:c5:8a:3b:bc:0d:47:de:53:0c:64:
1a:42:f0:7f:11:ee:59:86:ef:f5:f4:7f:bf:c8:40:b4:b8:ff:
d6:f7:83:37:44:59:e8:74:64:90:a7:91:4a:c7:97:19:bb:d2:
0f:48:59:b8:c9:d1:47:95:6f:f9:b1:60:9d:b5:d1:ad:ee:61:
d9:9c:2a:45:3f:ae:b5:50:e4:b4:75:50:bd:cb:9b:4a:ea:0a:
b0:70:88:fa
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OEJBQzExMC8GA1UEBRMoNzY2ODNBRkM0RDJEQjY0RDNGRjFGQzBCRkIwRjg4NTIw
NkNGMjMxQzAeFw0yNjAzMjUwODI1NTRaFw0yNjA0MDEwODI1NTRaMBgxFjAUBgNV
BAMTDTY5YzM5YzEyLWNjMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqnIPEpJVVFphpAWpv0TneDqy4W98vHuG45Pt3Iy+pdPMlboaS9oBEUqe7z5V6
vuc0yb7XBys7al/DctPnlOkpefJouz9VogKNAn3bFRaonqyIkd46KSJYHZw/2bFe
6cJJuiCf6Hqh/Q/6CYfqe7MpeyduTWQrQqdd6vCGrr5aPBwsDpSB7R9ouMsNTaT+
NFTaQqoX9BDWyv6Vmz+2xQVm6NkxjBb6HYtxZaB6516oroK62MIq6RV5G/fLSNwg
D78XCDPrz+G5CkKO4LsFSS37iL0BFYrYB43/SdH1z0QEnZnfIOM3P3YiZLCO/Nvx
1n6rRjgrHgQtMBAhaqx85xHfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyh0Ue+Ys
TFmBRRjO1suJjGyXlqAwHwYDVR0jBBgwFoAUdmg6/E0ttk0/8fwL+w+IUgbPIxww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4QkFDLzlDRjgyQjhBMjRG
QzExRjE5RjYyQTRDNUI2ODMzNzczL2RtZzZfRTB0dGswXzhmd0wtdy1JVWdiUEl4
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZG1nNl9FMHR0azBfOGZ3TC13LUlVZ2JQSXh3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4
QkFDLzlDRjgyQjhBMjRGQzExRjE5RjYyQTRDNUI2ODMzNzczL2RtZzZfRTB0dGsw
Xzhmd0wtdy1JVWdiUEl4dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCh67tFXmujGfC+rgRgUXMmud7sBBG9Mpkxjp5dJXD9MF3L31RrpPLGWxW+fQHM
hkGlBRaPFPglTrIXmVL12o5oj+V822YvIyU+S7AqHR38UW4zOWWRqJE1fymbZrS+
O7bEwO+MGo1xYA7arFGwTbvd4hvs1BbvW7Wgyza7T2I4vPDroojuWsfdre8X7Tbb
cXCIfbB7tOB02Kkd8oBcRQoPM0Y5EKOqrGhufcWKO7wNR95TDGQaQvB/Ee5Zhu/1
9H+/yEC0uP/W94M3RFnodGSQp5FKx5cZu9IPSFm4ydFHlW/5sWCdtdGt7mHZnCpF
P661UOS0dVC9y5tK6gqwcIj6
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:01:37 2026 by rpki-client