This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
File: o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json)
Hash identifier: rsA7h1rzq4oDKqZvtArzPgJPjsSeEuR3O79kzD+QN1k=
Subject key identifier: 5E:21:C4:5E:E0:65:AB:E6:DA:58:04:35:AB:1B:4B:54:05:04:81:9D
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
Manifest number: 50
Signing time: Fri 05 Dec 2025 05:08:11 +0000
Manifest this update: Fri 05 Dec 2025 05:08:10 +0000
Manifest next update: Fri 12 Dec 2025 05:08:10 +0000
Files and hashes: 1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: CcXWUt1iQovD/6DB3hphjEIyHpREkB+GPO2ZGv55Puc=)
2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: 6Vnq1spFXaLfT9Zg1ghh5PPz6XLDWciXVK572d6VJmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Validity
Not Before: Dec 5 05:08:10 2025 GMT
Not After : Dec 12 05:08:10 2025 GMT
Subject: CN=693268bb-eebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:ac:dd:20:74:87:8e:d7:e3:c9:a2:df:b0:
1a:29:0a:f4:ca:ce:3a:22:21:a7:f3:f5:93:a0:ac:
95:17:c5:b9:e3:e6:d2:26:02:76:66:39:f6:8e:17:
9b:f6:e0:9c:87:9f:85:d0:15:fe:fb:df:f1:36:c6:
51:22:11:3a:04:28:a1:c7:06:4e:fb:e0:62:64:e1:
8c:da:d3:97:28:1b:98:93:73:79:ea:2a:9f:dd:84:
06:3e:aa:3b:3e:14:70:b8:db:13:64:9b:f0:b8:23:
c7:83:52:d8:4c:c4:41:b0:34:fa:94:1c:74:a4:67:
fe:03:9a:be:93:65:a0:df:e9:b4:c8:8a:f6:c3:da:
42:9e:70:b4:f1:81:62:7b:01:e5:9c:19:be:e3:b7:
22:30:d5:af:9d:ea:23:08:e8:ff:ac:e1:6a:82:6b:
52:75:93:ab:f8:81:0c:57:02:84:09:b9:63:c3:1e:
f4:41:27:f9:16:3d:fa:31:83:b3:ca:74:a6:a6:b2:
c6:49:8c:a7:d5:f3:60:6e:f9:00:af:13:7b:16:03:
01:0d:b0:de:01:9b:78:a7:5c:5d:35:58:6b:04:21:
f3:56:fc:82:a5:e2:bd:d7:f7:5a:53:d5:14:78:af:
c4:60:8f:2f:c8:e2:ff:6d:90:df:54:d7:b5:6d:97:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:21:C4:5E:E0:65:AB:E6:DA:58:04:35:AB:1B:4B:54:05:04:81:9D
X509v3 Authority Key Identifier:
keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:82:4c:ad:c9:4c:19:61:60:50:93:5d:36:7d:6f:97:83:53:
54:af:62:00:7d:57:1c:6b:16:4d:b0:91:10:b8:c3:85:2e:31:
18:2a:0d:66:6a:1e:3e:a8:9d:1e:43:0d:8d:3e:13:05:c9:c1:
3b:d1:3e:d1:75:06:df:4a:36:8a:a2:43:5f:d3:88:3c:3d:74:
1e:f8:9d:a4:e1:33:0c:90:c0:48:ce:b8:52:be:c3:40:8e:1b:
f6:66:c5:80:0a:ef:76:0d:b2:3f:5d:69:26:5c:63:c6:f6:7d:
d8:2e:c7:83:d9:36:37:9a:3f:0c:de:16:c3:45:58:f3:d7:69:
f8:e8:27:bb:68:41:aa:d7:ae:c8:b0:eb:1c:0b:08:c9:47:98:
13:89:37:2c:dc:bc:ac:f5:1a:63:a5:0d:5c:f2:94:7f:c1:17:
49:0a:ef:ae:14:63:76:d9:01:a6:54:f4:e9:4d:80:12:62:f5:
33:29:ef:3e:44:c7:fb:ba:75:00:2b:a7:ae:4d:db:09:2d:8a:
7c:9d:95:9f:04:08:bc:ce:21:e7:ba:4c:15:f1:19:d6:42:6a:
c4:8f:45:c3:25:e8:db:ee:d9:26:73:01:12:3a:cf:7c:7d:65:
9d:1f:02:3c:90:85:03:4c:03:86:17:89:94:8d:39:97:73:52:
51:c8:37:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:36:09 2025 by rpki-client