This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
File: o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json)
Hash identifier: DDS0KJuM0/CIMGY5hoAt7imcAs8g9HXrWnAEoRK1sPA=
Subject key identifier: AA:35:D9:D3:BC:85:A3:E0:B5:AD:F1:36:81:09:63:51:EA:B6:FB:0E
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
Manifest number: 59
Signing time: Tue 23 Dec 2025 06:02:49 +0000
Manifest this update: Tue 23 Dec 2025 06:02:49 +0000
Manifest next update: Tue 30 Dec 2025 06:02:49 +0000
Files and hashes: 1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: WGMWEm6elndTJ6DN1M0bYzeswv1kUiITrZXZpq+wlbg=)
2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: 6Vnq1spFXaLfT9Zg1ghh5PPz6XLDWciXVK572d6VJmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Validity
Not Before: Dec 23 06:02:49 2025 GMT
Not After : Dec 30 06:02:49 2025 GMT
Subject: CN=694a3089-dc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:5f:77:34:d2:1d:cc:5a:2e:56:98:04:10:
d9:f0:f8:57:eb:e1:bd:ca:7d:2c:c0:5e:e0:07:fb:
35:af:ee:67:16:03:6f:61:41:63:00:35:8c:ae:b6:
93:d1:68:d5:1e:16:b8:05:78:81:24:ac:87:1e:53:
37:e1:a5:b9:9b:3d:9c:b7:45:d4:e5:ef:c3:95:23:
6d:98:4b:2d:8b:a0:f8:3d:eb:ee:53:67:85:03:74:
58:df:8e:db:e2:71:d6:a7:e8:75:d2:cf:c2:27:43:
ba:e2:6f:6c:fe:85:c5:82:2e:39:5e:e9:95:95:c0:
ba:fb:3b:3b:c9:50:95:85:a7:00:00:7d:70:4e:da:
e9:fa:03:9b:1c:c6:6c:9e:52:dc:3c:52:50:32:10:
d6:4a:a9:bc:e0:5b:db:fc:f9:ec:a5:13:6d:4c:74:
a6:a8:7d:4b:57:9c:ea:f1:00:03:58:87:bb:62:31:
c7:c0:ba:c0:dc:5f:53:c1:68:6e:a5:3d:bd:eb:f1:
2c:78:07:01:21:17:97:06:f9:81:64:81:54:c4:81:
1c:71:86:2f:cf:7e:e1:63:fe:99:9b:42:87:fc:df:
9f:98:cf:8e:6f:06:e1:6a:44:c9:36:9f:ea:a6:c3:
4f:0d:80:d0:5c:52:bc:cd:16:6e:46:3a:5a:12:0f:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:35:D9:D3:BC:85:A3:E0:B5:AD:F1:36:81:09:63:51:EA:B6:FB:0E
X509v3 Authority Key Identifier:
keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:72:3b:aa:3b:e7:0a:aa:5b:09:20:c9:89:89:70:36:d9:b1:
cf:67:c9:78:58:30:c9:82:b2:08:e7:9e:b8:87:f7:f2:69:44:
ed:79:fc:bc:d1:3b:d7:c1:a8:cc:20:ce:b2:b3:e6:7b:22:52:
26:e8:7a:55:4a:8a:09:51:ca:63:ba:85:77:2d:3a:53:0f:32:
95:be:ff:02:33:d6:53:cd:ff:31:19:dc:47:c8:b4:65:a5:f7:
50:c9:49:95:ca:79:2f:56:24:13:21:89:29:a9:f0:9d:8a:57:
8a:48:c9:76:15:7c:e2:0b:73:09:ce:67:af:96:25:25:4e:38:
da:9f:0b:18:ea:15:e8:9e:f6:9e:51:98:bd:1a:b5:f0:94:a0:
b3:8b:81:e6:dd:a8:a8:47:53:02:0d:d9:13:db:3e:de:0e:4d:
c3:02:1f:4a:45:7c:59:fa:45:3e:0f:34:5b:32:83:bf:4c:95:
1b:b2:4e:a4:98:bc:4f:44:d9:1b:96:85:7d:8f:ba:b8:52:dc:
bb:08:00:0a:58:3d:9c:86:a4:10:72:80:c2:1d:fb:de:bb:9f:
b0:ec:c2:28:87:01:90:fe:b7:c1:87:ba:01:95:4c:6a:72:86:
24:e2:ef:1d:c2:d8:31:dd:82:e5:cd:c6:98:f5:94:2d:cf:ec:
f3:00:1a:c6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NzdBNjExMC8GA1UEBRMoQTNGMTAwNDlBMzkzQUY5RENBNDQ1OTY2NjQxNjZCODc0
MDJGODIyQTAeFw0yNTEyMjMwNjAyNDlaFw0yNTEyMzAwNjAyNDlaMBgxFjAUBgNV
BAMMDTY5NGEzMDg5LWRjMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCWqV93NNIdzFouVpgEENnw+Ffr4b3KfSzAXuAH+zWv7mcWA29hQWMANYyutpPR
aNUeFrgFeIEkrIceUzfhpbmbPZy3RdTl78OVI22YSy2LoPg96+5TZ4UDdFjfjtvi
cdan6HXSz8InQ7rib2z+hcWCLjle6ZWVwLr7OzvJUJWFpwAAfXBO2un6A5scxmye
Utw8UlAyENZKqbzgW9v8+eylE21MdKaofUtXnOrxAANYh7tiMcfAusDcX1PBaG6l
Pb3r8Sx4BwEhF5cG+YFkgVTEgRxxhi/PfuFj/pmbQof835+Yz45vBuFqRMk2n+qm
w08NgNBcUrzNFm5GOloSDwnPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqjXZ07yF
o+C1rfE2gQljUeq2+w4wHwYDVR0jBBgwFoAUo/EASaOTr53KRFlmZBZrh0Avgiow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3N0E2L0JERUU3Qjg4NUM3
RTExRjBBNUMzNjAzNkM0RjlBRTAyL29fRUFTYU9UcjUzS1JGbG1aQlpyaDBBdmdp
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvb19FQVNhT1RyNTNLUkZsbVpCWnJoMEF2Z2lvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3
N0E2L0JERUU3Qjg4NUM3RTExRjBBNUMzNjAzNkM0RjlBRTAyL29fRUFTYU9UcjUz
S1JGbG1aQlpyaDBBdmdpby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJdyO6o75wqqWwkgyYmJcDbZsc9nyXhYMMmCsgjnnriH9/JpRO15/LzR
O9fBqMwgzrKz5nsiUiboelVKiglRymO6hXctOlMPMpW+/wIz1lPN/zEZ3EfItGWl
91DJSZXKeS9WJBMhiSmp8J2KV4pIyXYVfOILcwnOZ6+WJSVOONqfCxjqFeie9p5R
mL0atfCUoLOLgebdqKhHUwIN2RPbPt4OTcMCH0pFfFn6RT4PNFsyg79MlRuyTqSY
vE9E2RuWhX2PurhS3LsIAApYPZyGpBBygMId+967n7DswiiHAZD+t8GHugGVTGpy
hiTi7x3C2DHdguXNxpj1lC3P7PMAGsY=
-----END CERTIFICATE-----
Generated at Wed Dec 24 21:20:33 2025 by rpki-client