
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.mft
File: dmg6_E0ttk0_8fwL-w-IUgbPIxw.mft (raw, json)
Hash identifier: U5rjvToIzPJnlvvy70us6haOcLVRgNc8EDtGwPNvtmU=
Subject key identifier: 37:17:AC:C0:FD:1E:17:3E:83:0F:51:21:F1:78:74:09:B2:86:7D:46
Authority key identifier: 76:68:3A:FC:4D:2D:B6:4D:3F:F1:FC:0B:FB:0F:88:52:06:CF:23:1C
Certificate issuer: /CN=A9198BAC/serialNumber=76683AFC4D2DB64D3FF1FC0BFB0F885206CF231C
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmg6_E0ttk0_8fwL-w-IUgbPIxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.mft
Manifest number: 20
Signing time: Mon 11 May 2026 09:08:38 +0000
Manifest this update: Mon 11 May 2026 09:08:38 +0000
Manifest next update: Mon 18 May 2026 09:08:38 +0000
Files and hashes: 1: dmg6_E0ttk0_8fwL-w-IUgbPIxw.crl (hash: GYHraOc4ND6Tjrx0T7trmkVCL032nDOPTTq6fMCDdUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.crl
rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmg6_E0ttk0_8fwL-w-IUgbPIxw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198BAC, serialNumber=76683AFC4D2DB64D3FF1FC0BFB0F885206CF231C
Validity
Not Before: May 11 09:08:38 2026 GMT
Not After : May 18 09:08:38 2026 GMT
Subject: CN=6a019c96-b587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:2e:3f:48:30:71:e3:4a:bf:54:9a:7d:45:
38:d9:cd:f4:24:68:14:c4:e7:3f:93:08:65:bd:71:
35:5b:d1:0d:26:92:29:f3:64:e5:1d:68:e3:65:aa:
39:b0:16:ae:ee:9c:a0:cb:96:1f:8b:dd:6b:84:e7:
36:c4:e8:3c:81:7e:c9:fe:63:cf:67:46:c2:9d:6b:
96:aa:d9:45:45:ae:f0:55:98:cd:87:e0:d1:01:21:
39:d3:91:6c:70:d6:72:02:30:17:bc:2d:d3:99:fe:
a2:f4:c8:f9:87:a3:c3:51:99:3c:88:21:84:dd:d8:
07:0d:0f:50:aa:e6:f1:a5:09:08:cf:28:fe:1b:72:
f8:35:00:1e:51:be:02:4c:e4:6c:04:da:59:04:04:
97:ed:a1:02:9e:96:d4:15:b1:4f:8b:b3:96:b5:73:
af:6f:5e:f1:c3:d3:90:c1:e8:60:57:9f:a6:61:30:
38:a5:0f:42:40:59:53:e6:cc:98:14:42:73:cc:37:
d3:4d:33:0c:b3:b7:25:f2:c1:70:d8:20:8c:1c:dc:
df:76:7f:7c:16:d8:74:b9:28:52:b8:c6:e2:6b:84:
77:28:7a:00:9e:f1:fe:fe:5d:d8:a7:d1:77:36:e0:
39:b7:97:65:fb:9e:21:ed:fb:e7:78:33:d0:ae:41:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:17:AC:C0:FD:1E:17:3E:83:0F:51:21:F1:78:74:09:B2:86:7D:46
X509v3 Authority Key Identifier:
keyid:76:68:3A:FC:4D:2D:B6:4D:3F:F1:FC:0B:FB:0F:88:52:06:CF:23:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmg6_E0ttk0_8fwL-w-IUgbPIxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198BAC/9CF82B8A24FC11F19F62A4C5B6833773/dmg6_E0ttk0_8fwL-w-IUgbPIxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:a4:cf:a0:4b:2d:e9:a0:30:4d:dc:18:18:f7:8b:7b:1d:29:
ee:b2:a6:e3:67:99:27:3b:e1:c0:f2:1d:c9:77:e7:e6:c7:d1:
81:90:b3:ea:5f:11:7c:39:3c:40:4a:a5:fc:b9:be:85:a1:83:
13:df:c4:e0:2c:c7:bc:1f:2f:33:e9:18:b1:a4:23:0b:9b:ed:
97:47:5c:97:a3:6e:51:44:ae:0e:d9:b5:77:54:45:dc:62:79:
83:b9:39:4e:3f:46:af:db:7a:81:a9:28:1e:c9:dc:66:bc:b7:
c6:91:3a:a6:72:8c:a8:ab:4d:49:68:f0:78:92:a6:b5:9c:8f:
6a:84:92:50:58:bc:c9:d1:6c:6a:cd:7b:1c:2f:7c:11:75:f7:
d9:a3:c8:91:9b:72:15:fb:2f:e8:8d:99:37:ba:34:d7:37:71:
b8:a4:7d:fb:54:c8:1f:33:08:2e:9a:de:94:f3:79:42:e8:11:
61:6c:9b:01:de:e3:ab:99:50:86:bd:b4:f7:b0:4e:c9:7f:07:
31:39:f1:54:99:ba:3b:0c:a0:d8:af:2b:b1:5a:f5:e6:02:5a:
cc:f9:29:dd:cf:e6:b8:2f:ff:c4:f4:70:26:a3:31:8f:dc:20:
93:c3:da:23:9a:a4:df:3f:4a:47:51:44:df:c2:5f:20:44:e3:
86:df:46:4a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OEJBQzExMC8GA1UEBRMoNzY2ODNBRkM0RDJEQjY0RDNGRjFGQzBCRkIwRjg4NTIw
NkNGMjMxQzAeFw0yNjA1MTEwOTA4MzhaFw0yNjA1MTgwOTA4MzhaMBgxFjAUBgNV
BAMTDTZhMDE5Yzk2LWI1ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbaC4/SDBx40q/VJp9RTjZzfQkaBTE5z+TCGW9cTVb0Q0mkinzZOUdaONlqjmw
Fq7unKDLlh+L3WuE5zbE6DyBfsn+Y89nRsKda5aq2UVFrvBVmM2H4NEBITnTkWxw
1nICMBe8LdOZ/qL0yPmHo8NRmTyIIYTd2AcND1Cq5vGlCQjPKP4bcvg1AB5RvgJM
5GwE2lkEBJftoQKeltQVsU+Ls5a1c69vXvHD05DB6GBXn6ZhMDilD0JAWVPmzJgU
QnPMN9NNMwyztyXywXDYIIwc3N92f3wW2HS5KFK4xuJrhHcoegCe8f7+Xdin0Xc2
4Dm3l2X7niHt++d4M9CuQam9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNxeswP0e
Fz6DD1Eh8Xh0CbKGfUYwHwYDVR0jBBgwFoAUdmg6/E0ttk0/8fwL+w+IUgbPIxww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4QkFDLzlDRjgyQjhBMjRG
QzExRjE5RjYyQTRDNUI2ODMzNzczL2RtZzZfRTB0dGswXzhmd0wtdy1JVWdiUEl4
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZG1nNl9FMHR0azBfOGZ3TC13LUlVZ2JQSXh3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4
QkFDLzlDRjgyQjhBMjRGQzExRjE5RjYyQTRDNUI2ODMzNzczL2RtZzZfRTB0dGsw
Xzhmd0wtdy1JVWdiUEl4dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBCpM+gSy3poDBN3BgY94t7HSnusqbjZ5knO+HA8h3Jd+fmx9GBkLPqXxF8OTxA
SqX8ub6FoYMT38TgLMe8Hy8z6RixpCMLm+2XR1yXo25RRK4O2bV3VEXcYnmDuTlO
P0av23qBqSgeydxmvLfGkTqmcoyoq01JaPB4kqa1nI9qhJJQWLzJ0WxqzXscL3wR
dffZo8iRm3IV+y/ojZk3ujTXN3G4pH37VMgfMwgumt6U83lC6BFhbJsB3uOrmVCG
vbT3sE7JfwcxOfFUmbo7DKDYryuxWvXmAlrM+Sndz+a4L//E9HAmozGP3CCTw9oj
mqTfP0pHUUTfwl8gROOG30ZK
-----END CERTIFICATE-----
Generated at Wed May 13 09:15:56 2026 by rpki-client