
$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
File: o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json)
Hash identifier: zkON8+wrRAKUrYEivCYRCWYXoaN+LHp4vWfiMM4pCf0=
Subject key identifier: 4A:F9:13:10:F0:14:9B:87:5F:6E:9C:BA:A5:FF:88:86:64:5F:DA:70
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
Manifest number: C4
Signing time: Fri 17 Jul 2026 08:07:19 +0000
Manifest this update: Fri 17 Jul 2026 08:07:18 +0000
Manifest next update: Fri 24 Jul 2026 08:07:18 +0000
Files and hashes: 1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: 1hJb62LcXpMZIYj5zh1hltXkXFg7pC0bKjRMY+HV43Y=)
2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: fH+Os/s7SYYFE9B1LFr1LyTEBlLJ9szkGGwcIpwvf+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Validity
Not Before: Jul 17 08:07:18 2026 GMT
Not After : Jul 24 08:07:18 2026 GMT
Subject: CN=6a59e2b7-2427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:7f:07:65:a0:ef:b2:c6:ea:f8:7e:8e:41:
53:30:a5:1a:0c:c9:2c:fb:3a:0c:96:f0:98:fe:89:
3d:61:55:d1:89:1e:8d:6c:05:fd:ee:38:77:5d:22:
7f:9b:f4:c9:2f:61:43:3f:88:10:cd:b2:17:3a:6b:
31:2b:0d:dc:53:e0:2c:d8:e3:8e:56:51:fb:de:65:
a9:d9:e9:8b:b1:fc:85:dd:8b:54:82:2e:6a:65:23:
20:d9:f8:fb:c6:bb:c9:5c:69:05:a7:a5:80:c0:14:
02:ea:4d:91:21:8e:92:d3:0e:81:12:34:df:97:07:
df:88:ea:63:a8:50:45:5f:91:71:82:9e:5e:db:61:
81:e5:cd:a5:9a:4e:c0:05:d0:87:2f:a3:46:8a:f1:
fa:78:a9:8f:e3:9b:48:06:2a:09:13:a2:c6:9a:d0:
45:02:9a:79:2a:07:86:15:b3:ab:55:e6:30:18:97:
26:44:96:01:1f:c8:14:39:37:80:2b:c3:46:61:1f:
98:46:80:01:53:5e:c3:8f:e0:6b:1e:94:10:c5:0a:
81:79:6e:52:f1:d6:99:cf:7e:c8:ee:29:e4:02:0f:
b0:66:f3:71:f4:70:18:e2:d9:1c:66:0a:12:9e:a7:
63:3e:79:01:c4:ce:0a:6f:fc:fe:98:64:55:ce:0a:
85:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F9:13:10:F0:14:9B:87:5F:6E:9C:BA:A5:FF:88:86:64:5F:DA:70
X509v3 Authority Key Identifier:
keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:dd:13:9d:0b:a5:a6:7a:0f:d5:b9:9b:e6:2d:b2:c3:ed:80:
36:d7:a7:5c:a1:94:d0:4b:60:36:79:7c:1b:8d:1c:0b:59:7a:
01:8c:33:fa:b5:d9:b1:6a:b8:10:cd:e7:e1:2d:40:68:62:c3:
b4:16:f1:ed:fa:62:9a:62:9e:f5:a6:47:72:e0:61:83:97:d3:
6c:68:11:18:89:db:49:0d:f5:d4:2e:d4:9c:f8:23:de:3a:15:
b4:c6:13:e2:72:db:6b:f8:05:7a:9c:fd:0d:a7:1c:91:bd:ac:
5b:2b:59:28:5f:71:f2:3b:50:04:49:74:cf:11:ed:7b:e1:5a:
c6:0f:56:4e:36:2b:e2:9b:93:64:e1:80:c8:03:20:f8:ee:0c:
71:70:c2:44:0c:01:18:65:d5:80:ad:0e:48:57:cf:d1:ca:99:
04:0c:cc:3a:2f:65:97:20:00:13:8f:98:20:35:9c:49:19:82:
85:a4:e0:63:a9:82:44:27:ec:b1:f1:7a:e9:89:35:a4:62:fc:
0d:11:da:d4:25:fd:db:60:3b:45:ec:64:62:47:45:6f:eb:36:
5d:b5:22:7e:bf:11:0b:7a:87:6f:5b:d8:41:ca:80:f1:66:63:
bf:19:fd:c2:1d:54:b1:f8:3b:b3:e5:17:3b:06:2c:90:ff:cc:
71:bd:82:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:21 2026 by rpki-client