This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
File: o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json)
Hash identifier: YPrH4cNLdLy3OY5RNv1JZAMYTtp+Vq/QT5fLX/ifqJ8=
Subject key identifier: 17:D4:FD:C1:46:AA:51:F9:C4:25:07:65:84:C7:B5:9D:27:E5:16:6D
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
Manifest number: 6A
Signing time: Sun 25 Jan 2026 06:04:41 +0000
Manifest this update: Sun 25 Jan 2026 06:04:41 +0000
Manifest next update: Sun 01 Feb 2026 06:04:41 +0000
Files and hashes: 1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: 58A4h+4ncUBZ862jwbqoHxJfpYW32dFmWs/ttLbYaFg=)
2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: 6Vnq1spFXaLfT9Zg1ghh5PPz6XLDWciXVK572d6VJmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Validity
Not Before: Jan 25 06:04:41 2026 GMT
Not After : Feb 1 06:04:41 2026 GMT
Subject: CN=6975b279-c817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:6d:e9:c3:a0:a8:58:69:c4:41:aa:d2:7f:
c1:37:70:9d:69:34:00:8c:c0:a1:f9:38:71:fe:d2:
5e:9f:84:62:0a:00:99:25:28:a7:e3:71:5e:a5:e4:
cc:52:2a:6b:df:fa:59:67:74:15:91:c6:21:5b:4d:
26:a6:e9:26:28:9c:b0:fa:b9:40:5c:c3:04:dd:a9:
99:f5:5e:6d:2c:c1:ea:95:96:1c:50:27:93:7d:4d:
94:c1:5d:ac:b3:5c:8e:57:17:b6:bb:e8:72:27:fd:
32:8d:00:be:1a:3a:25:57:a9:b6:98:e1:7b:0c:87:
13:28:9e:3b:e5:b6:b8:db:eb:e5:51:82:2d:87:67:
4c:62:96:29:88:b0:23:12:b7:cc:1e:58:72:81:22:
f4:32:0e:36:7b:da:55:30:f4:32:ed:69:d9:b7:64:
c9:cf:d3:6c:f2:ce:95:36:6a:0c:a5:17:e7:60:04:
a6:df:9e:11:d0:9e:bf:2a:01:17:8e:b4:c8:f5:c6:
dc:82:9b:7c:b2:62:cc:9f:bf:aa:d8:3a:d4:b1:85:
c1:7b:ff:9e:ad:61:2f:5d:14:cb:2c:3b:cb:7b:36:
d9:02:f5:e9:98:c6:49:55:58:27:1f:08:45:02:65:
81:ee:96:64:5e:96:b2:b8:85:e1:25:61:31:eb:75:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D4:FD:C1:46:AA:51:F9:C4:25:07:65:84:C7:B5:9D:27:E5:16:6D
X509v3 Authority Key Identifier:
keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:d5:3a:94:12:d6:11:60:20:7c:27:16:3d:bf:ab:5d:9e:bb:
43:4a:80:3d:be:5a:f6:e5:d2:ea:d8:0a:09:e0:5d:29:1b:d2:
fd:4a:da:01:e0:71:78:a0:f4:be:10:95:ef:f8:24:e4:7b:23:
40:6f:95:86:9f:a4:23:dd:ac:cb:c6:a2:1e:2c:f6:d3:a0:6e:
5e:b1:cc:c0:e5:9a:f0:5b:0b:a1:6a:6c:69:e6:60:6e:a2:41:
5b:99:c9:34:0f:aa:0e:6c:87:80:59:e2:10:17:3e:60:05:b7:
fa:35:91:2c:63:ed:f5:47:22:a9:67:1d:3c:f5:5b:c7:1a:f5:
18:d2:76:ce:86:9a:11:6b:be:a8:a2:c4:9d:f3:73:99:68:3f:
2d:59:10:bc:0d:fd:bb:93:d6:99:cd:2b:9d:e0:73:cc:c8:69:
77:8e:c3:5b:8e:90:bc:26:85:ac:a5:3a:42:f0:13:b0:d1:49:
d3:e9:d9:12:63:6a:ae:74:79:45:15:d6:1a:2a:36:8c:9a:20:
1b:90:08:95:cd:43:ea:b8:e3:19:73:91:1a:62:d6:4a:68:a6:
41:e1:8e:ce:ca:86:51:62:4d:0f:0b:9e:7f:d0:f8:e6:b5:6c:
cf:bd:49:75:bb:1b:f4:ef:65:36:92:6e:8e:91:fe:ca:31:f5:
c5:e8:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:53:09 2026 by rpki-client