
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
File: o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json)
Hash identifier: A3QbhmwM+B4g8B19SxTzdUROYo93xBDXiT97OXJbaNI=
Subject key identifier: BA:2C:D5:94:8C:88:08:14:88:90:74:58:20:C6:D8:14:06:0F:AB:04
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
Manifest number: ED
Signing time: Mon 05 Oct 2026 06:49:51 +0000
Manifest this update: Mon 05 Oct 2026 06:49:51 +0000
Manifest next update: Mon 12 Oct 2026 06:49:51 +0000
Files and hashes: 1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: LW0j8eIWZY+z63bdVl2cf+EJ05o16Lw+AVsfDbMZfpQ=)
2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: fH+Os/s7SYYFE9B1LFr1LyTEBlLJ9szkGGwcIpwvf+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 06:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Validity
Not Before: Oct 5 06:49:51 2026 GMT
Not After : Oct 12 06:49:51 2026 GMT
Subject: CN=6ac3488f-5371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:28:cf:a4:4b:03:9b:a5:04:10:82:4c:4f:
d7:d3:c3:35:f5:c9:98:9c:1b:2b:63:63:17:83:e2:
0f:37:60:cd:bf:7c:29:80:ee:12:7e:71:e4:ca:87:
80:7c:51:e7:4a:c9:ac:4c:da:49:f5:7a:54:f8:4b:
e5:45:e3:4f:4b:15:5d:09:c7:cc:a9:64:4b:03:03:
bb:2b:ff:74:58:cf:56:74:e1:3e:f3:e4:36:09:f6:
8d:18:86:66:2c:a0:3f:84:c6:d3:0f:14:e8:c0:90:
f1:96:fa:aa:bc:4a:1b:9a:ac:db:d6:fc:0e:35:e7:
e2:0e:2c:66:59:49:17:c3:c5:47:94:60:41:ac:e1:
5d:42:55:7b:c5:f5:e2:c6:69:db:65:1c:2b:31:ef:
c3:7d:0f:dc:4a:76:09:ba:50:56:7e:05:55:b8:f6:
42:2f:5b:12:4f:25:5f:6d:4d:c4:49:7d:cd:6c:84:
d8:34:fa:cd:d1:31:a4:ff:94:17:92:d3:71:f1:00:
10:77:84:ad:00:8a:42:f5:ec:39:c6:38:97:39:bd:
78:ab:f2:6e:d7:3a:0e:a5:03:2e:8a:ce:47:f6:45:
f4:4c:e7:b5:a7:17:10:68:18:32:4f:36:18:4c:fc:
d8:8d:f5:c8:22:15:38:e8:44:ba:1f:91:5d:42:88:
61:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:D5:94:8C:88:08:14:88:90:74:58:20:C6:D8:14:06:0F:AB:04
X509v3 Authority Key Identifier:
keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:16:c6:4c:dc:07:07:04:cc:f5:a1:d4:81:cb:e6:61:a2:3f:
0f:27:b1:af:7f:2a:8d:e5:ce:f6:e6:69:c3:88:38:ca:25:19:
57:40:9d:f6:54:89:2a:43:51:7f:67:c6:a4:e9:25:b7:53:e3:
e1:0f:21:89:00:f3:fe:26:40:54:df:38:e0:53:66:87:b2:45:
ba:b7:a5:83:81:c6:2b:0a:3a:fa:a9:11:2b:d2:5a:ca:2e:1e:
eb:99:fa:68:f1:bf:4d:0b:3f:b1:5c:7b:93:9f:72:ca:6b:67:
f4:24:7d:0b:0f:39:5a:59:a0:23:27:2e:da:89:95:b3:52:e7:
07:ff:03:cf:1f:08:77:a1:09:28:64:64:f8:88:12:7a:e1:6e:
e3:33:8b:14:14:c4:79:07:68:81:a3:80:19:bf:1a:77:5b:25:
7e:17:37:93:d4:d9:09:0a:2c:a5:75:30:05:0a:aa:6c:e4:45:
b6:be:10:d6:85:d0:93:80:e0:60:a6:20:c4:a1:ad:19:39:99:
95:a1:02:bd:eb:ac:39:9c:9c:3e:83:3e:c7:ce:c2:cc:bf:5b:
3e:10:de:b5:1c:70:f6:6b:f1:0c:9c:23:68:2e:32:ec:a1:03:
ac:41:76:61:34:09:d9:90:93:51:3e:f8:34:d9:a7:a1:82:d9:
51:bf:00:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:38:08 2026 by rpki-client