$ rpki-client -vvvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft File: FION2NTh_gMXFCZnF24W4KW2hlE.mft (raw, json) Hash identifier: AtialTGEbhRUnwa8C5RKR1EzBAK+fFvAhhpbUS2hHuw= Subject key identifier: 51:30:BD:49:63:B5:E8:5F:81:45:26:C5:F1:9C:32:29:D7:E3:C0:14 Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 Certificate issuer: /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Certificate serial: 0EE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft Manifest number: 0EDA Signing time: Tue 22 Sep 2026 17:34:43 +0000 Manifest this update: Tue 22 Sep 2026 17:34:42 +0000 Manifest next update: Tue 29 Sep 2026 17:34:42 +0000 Files and hashes: 1: FION2NTh_gMXFCZnF24W4KW2hlE.crl (hash: Z0hS2MaC2COOVqyMbyd8RnTiNCe4ttCPDkurSTVewsA=) 2: 14E68648B42D11E9A44FF25BC4F9AE02.roa (hash: Pu0JLncruXRjK9bzpTN/LXkweSlyI2MUsZIXpCmzjVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3813 (0xee5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D9, serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Validity Not Before: Sep 22 17:34:42 2026 GMT Not After : Sep 29 17:34:42 2026 GMT Subject: CN=6ab2bc33-d08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:e3:1a:12:94:d6:8e:20:df:53:f6:41:82: 60:03:a2:19:3d:e6:75:47:56:28:e8:b0:3e:d7:95: 03:e3:b8:eb:6e:6b:c9:3a:ef:7d:96:f7:5f:b7:4d: ed:97:55:7f:64:cf:e0:49:76:aa:db:94:9c:65:28: 75:39:1f:42:7d:30:84:3c:4d:62:d8:6c:93:e1:d5: 25:9a:bb:74:c9:56:e7:cf:c1:70:02:c2:f2:82:e3: 88:ec:ac:52:98:90:c4:f7:df:97:39:08:45:6f:31: 0d:a4:50:85:51:05:21:b3:0b:13:21:22:36:bc:9a: 01:24:58:d8:32:94:7f:d3:ae:9d:97:c2:26:d3:9c: 7f:e7:1c:e8:6a:c7:3b:13:d6:fd:21:44:40:29:79: b1:13:00:e5:c4:e6:9b:c4:44:2a:c3:84:37:f1:71: 21:1f:72:ea:3c:4b:e3:4c:e2:90:2a:b5:5f:06:22: b7:f9:cf:8a:c9:32:24:eb:a4:73:81:99:a2:b0:8e: 00:fd:db:9b:d8:e0:71:3d:e4:70:b7:58:62:d5:68: 31:b6:e7:b1:21:34:11:3b:8d:d1:68:a9:5f:88:10: 86:d4:c4:9f:bd:31:86:b7:aa:92:7b:36:fc:50:23: 42:d6:76:4c:80:47:79:17:18:c2:8d:c4:25:1c:5f: d5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:30:BD:49:63:B5:E8:5F:81:45:26:C5:F1:9C:32:29:D7:E3:C0:14 X509v3 Authority Key Identifier: keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:3d:da:4a:ed:e0:bb:c1:60:dc:26:06:e9:f0:68:b6:78:9d: 09:78:f2:f6:53:8a:ed:5e:e6:18:d6:9a:94:87:ac:6c:a1:a5: d0:34:ee:1f:39:44:29:9b:c6:e4:42:cd:ac:5d:2b:89:b1:e4: 8c:a5:ea:90:41:bd:d9:1c:93:54:58:59:b4:9f:fb:9d:17:f1: 08:da:19:9e:2d:2d:a9:2a:16:e5:68:a8:c0:f9:c0:14:16:7d: f9:4c:84:25:7c:ba:f2:e9:a3:1f:ac:87:bd:f1:b6:b8:7b:da: 19:13:66:ce:7c:3b:fa:ff:b5:b7:a6:d0:f5:a0:12:d2:87:19: 6e:24:34:e4:01:04:1c:0e:28:0f:0f:af:b1:08:e0:99:bf:e7: 24:1d:1b:ad:33:1a:47:13:06:f4:28:77:84:7f:62:3a:99:44: 0b:d8:32:b6:1b:28:88:68:15:49:c6:da:f6:17:6a:3f:0d:ca: d0:1c:2d:71:7c:44:b0:19:62:43:fd:9e:8b:21:e3:10:a8:af: 9c:67:94:27:85:a2:73:a0:ba:63:5e:bb:7f:01:78:b8:3f:7b: e1:49:34:c9:56:8b:d8:18:97:50:66:a8:86:e1:92:e1:ad:2c: 34:c3:4f:9e:20:9c:ff:ed:69:5c:b4:a2:58:e0:11:3d:20:d0: ed:f0:1a:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDkxMTAvBgNVBAUTKDE0ODM4REQ4RDRFMUZFMDMxNzE0MjY2NzE3NkUxNkUw QTVCNjg2NTEwHhcNMjYwOTIyMTczNDQyWhcNMjYwOTI5MTczNDQyWjAYMRYwFAYD VQQDEw02YWIyYmMzMy1kMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVHjGhKU1o4g31P2QYJgA6IZPeZ1R1Yo6LA+15UD47jrbmvJOu99lvdft03t l1V/ZM/gSXaq25ScZSh1OR9CfTCEPE1i2GyT4dUlmrt0yVbnz8FwAsLyguOI7KxS mJDE99+XOQhFbzENpFCFUQUhswsTISI2vJoBJFjYMpR/066dl8Im05x/5xzoasc7 E9b9IURAKXmxEwDlxOabxEQqw4Q38XEhH3LqPEvjTOKQKrVfBiK3+c+KyTIk66Rz gZmisI4A/dub2OBxPeRwt1hi1WgxtuexITQRO43RaKlfiBCG1MSfvTGGt6qSezb8 UCNC1nZMgEd5FxjCjcQlHF/VhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEwvUlj tehfgUUmxfGcMinX48AUMB8GA1UdIwQYMBaAFBSDjdjU4f4DFxQmZxduFuCltoZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEOS8xQzNERDk2NkI0 MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9nTVhGQ1puRjI0VzRLVzJo bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZJT04yTlRoX2dNWEZDWm5GMjRXNEtXMmhsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEOS8xQzNERDk2NkI0MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9n TVhGQ1puRjI0VzRLVzJobEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtT3aSu3gu8Fg3CYG6fBotnidCXjy9lOK7V7mGNaalIesbKGl0DTuHzlEKZvG 5ELNrF0ribHkjKXqkEG92RyTVFhZtJ/7nRfxCNoZni0tqSoW5WiowPnAFBZ9+UyE JXy68umjH6yHvfG2uHvaGRNmznw7+v+1t6bQ9aAS0ocZbiQ05AEEHA4oDw+vsQjg mb/nJB0brTMaRxMG9Ch3hH9iOplEC9gythsoiGgVScba9hdqPw3K0BwtcXxEsBli Q/2eiyHjEKivnGeUJ4Wic6C6Y167fwF4uD974Uk0yVaL2BiXUGaohuGS4a0sNMNP niCc/+1pXLSiWOARPSDQ7fAatQ== -----END CERTIFICATE-----Generated at Thu Sep 24 08:20:24 2026 by rpki-client