
$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
File: o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json)
Hash identifier: uz2p+Un1FWsxtz7NjpuOXsijkhI/NWyi0PArUfTQzB4=
Subject key identifier: 67:D6:FC:0A:8A:31:3B:0F:CA:98:06:CA:C4:62:9F:4B:71:51:D3:79
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
Manifest number: 89
Signing time: Wed 25 Mar 2026 06:48:47 +0000
Manifest this update: Wed 25 Mar 2026 06:48:46 +0000
Manifest next update: Wed 01 Apr 2026 06:48:46 +0000
Files and hashes: 1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: fGPRbtAS7X2DIvSSU+wfOnSfWzXT9guLqlX94FCyvJE=)
2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: X8cGL1QZAJHz7KDH62TgirLobR0d4YLXS1ArwiUOvzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Validity
Not Before: Mar 25 06:48:46 2026 GMT
Not After : Apr 1 06:48:46 2026 GMT
Subject: CN=69c3854f-7424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:7c:a9:1a:9c:72:38:49:e7:7e:d9:f4:cd:
8d:38:1b:a3:97:e4:4d:f1:59:3b:b1:e8:91:b5:e6:
47:66:a8:7b:f9:80:69:00:90:75:51:1f:33:0a:ca:
9d:2a:e4:a6:8a:c3:0c:82:c0:21:82:97:c5:20:66:
9a:0e:04:a2:a6:d5:1f:88:ae:4c:5e:a2:b6:1c:2f:
61:f4:9a:a8:f9:b4:29:29:fc:ac:eb:7b:f1:a1:84:
51:3c:5b:2f:42:ae:16:e6:60:df:34:a9:ee:c5:aa:
7a:77:e9:07:8a:f8:9b:42:a7:be:b9:13:f7:30:ed:
15:a1:19:c7:6e:10:36:47:7f:9e:20:5a:95:8b:aa:
d9:5a:55:e1:11:b2:25:ce:74:cc:f3:71:cf:96:9e:
d0:fb:64:79:8f:34:28:9b:f7:e9:0c:e9:74:00:78:
0e:58:f2:08:6b:19:2d:db:2b:5e:08:9e:a5:5c:a7:
67:15:5c:29:12:d8:06:b8:2e:51:31:1e:50:71:a4:
5a:fb:80:8a:29:7d:bf:93:bd:cd:53:2a:73:98:3e:
f5:01:73:41:ac:13:cd:2c:2d:1b:33:1a:62:a1:5a:
f5:4b:bb:8d:0c:33:5e:89:45:c4:25:f5:0b:d1:6c:
b8:d5:bc:42:f5:39:a1:92:e7:47:f0:f7:91:84:f2:
12:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D6:FC:0A:8A:31:3B:0F:CA:98:06:CA:C4:62:9F:4B:71:51:D3:79
X509v3 Authority Key Identifier:
keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:00:43:96:2f:bc:eb:25:a6:28:af:9d:c5:84:04:cf:f5:6c:
5e:21:35:4c:e9:82:c2:1c:42:d5:c8:5c:49:91:41:7d:02:c5:
01:a4:b6:24:5c:30:64:5c:c1:50:6c:52:ec:d7:b8:48:09:34:
eb:a5:8c:bd:a6:f3:98:3e:5b:1d:b2:e0:82:7e:bd:63:0b:95:
93:77:92:42:38:30:34:2e:54:62:11:8d:fe:b3:ce:dc:60:4f:
09:a5:e2:99:e7:89:df:e9:bf:54:2e:5d:7f:02:6a:c2:25:94:
d3:f9:07:a4:a9:6e:9e:52:d9:84:a0:10:87:07:a5:ae:38:83:
69:63:fb:99:41:33:5a:ad:e6:2b:d4:dc:79:f1:4d:32:06:93:
22:5e:dd:c6:2c:c8:e4:a9:0d:d4:91:05:7b:5b:24:aa:ac:87:
1d:1c:8f:18:b9:77:9d:bb:a4:34:70:a1:e3:74:e6:3b:59:8c:
b1:04:70:91:4b:a8:ce:49:f0:e5:7d:48:b0:71:52:9e:e0:fe:
e4:c2:13:d6:36:ce:9f:fa:c6:08:7c:83:18:f3:b9:19:60:31:
55:a3:17:96:8c:f5:eb:c3:e7:c1:17:7e:92:1c:56:55:0e:23:
84:71:b1:c4:3e:4c:7b:ba:b6:7d:d2:26:e4:f0:f2:3b:7c:a6:
07:cd:fa:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc3QTYxMTAvBgNVBAUTKEEzRjEwMDQ5QTM5M0FGOURDQTQ0NTk2NjY0MTY2Qjg3
NDAyRjgyMkEwHhcNMjYwMzI1MDY0ODQ2WhcNMjYwNDAxMDY0ODQ2WjAYMRYwFAYD
VQQDEw02OWMzODU0Zi03NDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApKd8qRqccjhJ537Z9M2NOBujl+RN8Vk7seiRteZHZqh7+YBpAJB1UR8zCsqd
KuSmisMMgsAhgpfFIGaaDgSiptUfiK5MXqK2HC9h9Jqo+bQpKfys63vxoYRRPFsv
Qq4W5mDfNKnuxap6d+kHivibQqe+uRP3MO0VoRnHbhA2R3+eIFqVi6rZWlXhEbIl
znTM83HPlp7Q+2R5jzQom/fpDOl0AHgOWPIIaxkt2yteCJ6lXKdnFVwpEtgGuC5R
MR5QcaRa+4CKKX2/k73NUypzmD71AXNBrBPNLC0bMxpioVr1S7uNDDNeiUXEJfUL
0Wy41bxC9TmhkudH8PeRhPISPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGfW/AqK
MTsPypgGysRin0txUdN5MB8GA1UdIwQYMBaAFKPxAEmjk6+dykRZZmQWa4dAL4Iq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzdBNi9CREVFN0I4ODVD
N0UxMUYwQTVDMzYwMzZDNEY5QUUwMi9vX0VBU2FPVHI1M0tSRmxtWkJacmgwQXZn
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29fRUFTYU9UcjUzS1JGbG1aQlpyaDBBdmdpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzdBNi9CREVFN0I4ODVDN0UxMUYwQTVDMzYwMzZDNEY5QUUwMi9vX0VBU2FPVHI1
M0tSRmxtWkJacmgwQXZnaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtwBDli+86yWmKK+dxYQEz/VsXiE1TOmCwhxC1chcSZFBfQLFAaS2JFwwZFzB
UGxS7Ne4SAk066WMvabzmD5bHbLggn69YwuVk3eSQjgwNC5UYhGN/rPO3GBPCaXi
meeJ3+m/VC5dfwJqwiWU0/kHpKlunlLZhKAQhwelrjiDaWP7mUEzWq3mK9TcefFN
MgaTIl7dxizI5KkN1JEFe1skqqyHHRyPGLl3nbukNHCh43TmO1mMsQRwkUuozknw
5X1IsHFSnuD+5MIT1jbOn/rGCHyDGPO5GWAxVaMXloz168PnwRd+khxWVQ4jhHGx
xD5Me7q2fdIm5PDyO3ymB836iA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:07 2026 by rpki-client