$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft File: FION2NTh_gMXFCZnF24W4KW2hlE.mft (raw, json) Hash identifier: tSxb744GEXKQ4QtsCd/a9QjDBhndXZyy6tngOEocyp0= Subject key identifier: 76:99:F5:1C:C9:61:7A:01:64:B4:10:FA:D3:12:87:1C:29:02:4A:FB Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 Certificate issuer: /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Certificate serial: 0EC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft Manifest number: 0EBD Signing time: Tue 28 Jul 2026 17:49:22 +0000 Manifest this update: Tue 28 Jul 2026 17:49:22 +0000 Manifest next update: Tue 04 Aug 2026 17:49:22 +0000 Files and hashes: 1: FION2NTh_gMXFCZnF24W4KW2hlE.crl (hash: brzhT2HoZA8H9+NWSB4WRd5dO64Fkq0Fi12T2Tnp9EQ=) 2: 14E68648B42D11E9A44FF25BC4F9AE02.roa (hash: Pu0JLncruXRjK9bzpTN/LXkweSlyI2MUsZIXpCmzjVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3784 (0xec8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D9, serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Validity Not Before: Jul 28 17:49:22 2026 GMT Not After : Aug 4 17:49:22 2026 GMT Subject: CN=6a68eba2-95bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:90:8a:77:00:60:32:a5:f3:cb:cd:b3:15:af: 80:1f:ba:3c:60:7e:0f:c5:49:a8:ef:79:82:6e:91: 2d:92:50:5a:75:c6:bb:0a:e8:06:00:d1:52:40:84: 8a:44:4f:88:29:9d:40:7b:f7:8a:bd:55:38:ce:e9: 31:bf:4f:e3:c9:96:6a:d0:7c:2a:a0:5f:3a:05:95: 9f:5c:80:c6:45:db:a5:a9:d0:68:33:7c:7c:ff:8b: 38:99:a6:c3:d0:2e:aa:35:cf:52:11:83:8f:f7:f5: 43:3d:b2:4b:43:ed:e9:ee:62:f7:90:7c:42:0d:42: bf:25:05:a5:7a:c3:cb:fb:02:8b:74:f6:3f:a4:a5: dc:f4:cc:43:3a:f9:2f:c1:fe:c6:fe:d3:a2:49:c2: 82:89:85:d1:bb:7b:9d:06:48:8a:21:28:69:ed:f1: dc:6b:1b:5d:58:bf:d1:8f:3b:05:c0:38:38:08:94: 7a:b6:c0:2b:f7:e5:c9:7f:59:ab:d4:f3:b9:b7:19: 8f:1c:4d:42:d2:4d:7e:39:42:0c:78:7c:e3:5b:33: 9c:22:83:2e:6a:bf:8f:18:b5:f0:86:40:86:23:2b: 4f:45:0e:a7:07:4c:d6:4c:8a:d5:d1:22:79:af:a1: 89:c3:5d:01:c0:ae:7d:f1:0f:a5:fe:0a:fa:68:c4: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:99:F5:1C:C9:61:7A:01:64:B4:10:FA:D3:12:87:1C:29:02:4A:FB X509v3 Authority Key Identifier: keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c4:ee:45:0a:ec:e0:bc:4a:fb:0e:46:70:92:0d:21:01:e9: c4:ab:31:95:bd:d6:38:70:ad:5c:5b:7d:9b:c5:34:c1:8c:cb: 33:3a:15:ef:36:44:35:b2:55:ee:96:64:ca:e6:a8:bc:bb:08: 91:c1:da:f6:14:28:36:a9:db:56:68:7e:09:23:77:9b:2a:4b: 42:fb:c8:03:ef:7f:d2:c4:b2:d7:83:82:b9:47:94:2b:d8:6d: 19:a8:d0:68:af:9b:53:c5:0b:c4:6f:b9:b9:43:57:19:c0:79: a2:45:cb:d6:e7:9b:9e:91:cb:6d:c2:ab:8f:e6:e0:1d:7a:f6: b5:2d:8d:89:13:91:c6:7b:53:75:02:a6:37:3f:11:04:05:b4: 0a:93:b0:3a:51:72:1b:fa:db:2c:36:48:7d:a9:d1:96:eb:fe: 07:a8:3a:6c:88:60:1b:83:06:30:f3:2b:01:c3:b8:f5:a9:d3: 84:9e:f3:52:ca:d5:94:a3:43:2c:e8:c4:ca:99:2d:30:6e:93: cb:14:3c:1d:cf:08:43:86:4b:29:92:7a:a6:70:a4:b8:b1:26: 56:ac:75:4d:95:03:3d:30:8e:4f:e5:bf:1d:3c:c1:95:9f:bb: da:28:00:f3:c9:38:cb:64:bf:35:05:7c:32:b3:9f:78:23:c5: 78:09:66:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDkxMTAvBgNVBAUTKDE0ODM4REQ4RDRFMUZFMDMxNzE0MjY2NzE3NkUxNkUw QTVCNjg2NTEwHhcNMjYwNzI4MTc0OTIyWhcNMjYwODA0MTc0OTIyWjAYMRYwFAYD VQQDEw02YTY4ZWJhMi05NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZCKdwBgMqXzy82zFa+AH7o8YH4PxUmo73mCbpEtklBadca7CugGANFSQISK RE+IKZ1Ae/eKvVU4zukxv0/jyZZq0HwqoF86BZWfXIDGRdulqdBoM3x8/4s4mabD 0C6qNc9SEYOP9/VDPbJLQ+3p7mL3kHxCDUK/JQWlesPL+wKLdPY/pKXc9MxDOvkv wf7G/tOiScKCiYXRu3udBkiKIShp7fHcaxtdWL/RjzsFwDg4CJR6tsAr9+XJf1mr 1PO5txmPHE1C0k1+OUIMeHzjWzOcIoMuar+PGLXwhkCGIytPRQ6nB0zWTIrV0SJ5 r6GJw10BwK598Q+l/gr6aMTCcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHaZ9RzJ YXoBZLQQ+tMShxwpAkr7MB8GA1UdIwQYMBaAFBSDjdjU4f4DFxQmZxduFuCltoZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEOS8xQzNERDk2NkI0 MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9nTVhGQ1puRjI0VzRLVzJo bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZJT04yTlRoX2dNWEZDWm5GMjRXNEtXMmhsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEOS8xQzNERDk2NkI0MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9n TVhGQ1puRjI0VzRLVzJobEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX8TuRQrs4LxK+w5GcJINIQHpxKsxlb3WOHCtXFt9m8U0wYzLMzoV7zZENbJV 7pZkyuaovLsIkcHa9hQoNqnbVmh+CSN3mypLQvvIA+9/0sSy14OCuUeUK9htGajQ aK+bU8ULxG+5uUNXGcB5okXL1uebnpHLbcKrj+bgHXr2tS2NiRORxntTdQKmNz8R BAW0CpOwOlFyG/rbLDZIfanRluv+B6g6bIhgG4MGMPMrAcO49anThJ7zUsrVlKND LOjEypktMG6TyxQ8Hc8IQ4ZLKZJ6pnCkuLEmVqx1TZUDPTCOT+W/HTzBlZ+72igA 88k4y2S/NQV8MrOfeCPFeAlm6A== -----END CERTIFICATE-----Generated at Wed Jul 29 06:01:51 2026 by rpki-client