$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft File: FION2NTh_gMXFCZnF24W4KW2hlE.mft (raw, json) Hash identifier: +DSn7TesIsNxd/IuBAsU6T+eEQaYeEMTJxeQSS6x0JI= Subject key identifier: FC:93:48:0F:51:CE:C3:90:48:94:E7:6F:52:CE:85:C0:07:1D:A8:18 Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 Certificate issuer: /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Certificate serial: 0E0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft Manifest number: 0E04 Signing time: Fri 08 Aug 2025 18:03:42 +0000 Manifest this update: Fri 08 Aug 2025 18:03:42 +0000 Manifest next update: Fri 15 Aug 2025 18:03:42 +0000 Files and hashes: 1: FION2NTh_gMXFCZnF24W4KW2hlE.crl (hash: fHNuxVSmalaRBtzlQR+Gm4wyx+w7quAx4gjWlkAmS3E=) 2: 14E68648B42D11E9A44FF25BC4F9AE02.roa (hash: aOcvKXW2OwUSyFzRq5Kiuga5ndEep1PmMp0UDb+8XIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3596 (0xe0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D9, serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Validity Not Before: Aug 8 18:03:42 2025 GMT Not After : Aug 15 18:03:42 2025 GMT Subject: CN=68963bfe-a2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d5:99:82:47:c5:b5:a0:a4:be:bc:50:2a:54: 99:49:23:f9:7c:ed:c8:a3:40:bb:36:71:f4:1b:db: c0:15:d6:31:18:c4:c5:93:b4:3b:84:1a:98:d1:b4: c7:f3:37:89:53:15:4a:6e:49:83:c7:79:a0:59:e3: 81:3d:20:09:51:16:bb:61:ef:5c:5e:6d:2b:43:c7: 94:95:12:8f:e7:11:28:4b:c2:b6:ed:08:36:9f:66: 3f:3c:09:3e:3f:fe:02:7f:98:cf:b0:62:eb:52:85: c7:e6:78:64:b9:9b:c4:f8:31:9b:a8:9c:17:8c:a6: 34:a7:e4:12:11:03:db:5d:60:59:52:bd:88:22:bb: c5:69:e1:dd:1f:db:29:70:c0:c6:c5:b7:89:9c:ae: 69:b9:6e:95:58:87:ef:6f:03:22:59:10:eb:6a:0d: e9:60:ae:7d:83:da:66:0c:77:88:9e:55:42:3d:4e: 23:0b:fe:e8:0d:cb:b5:2e:b8:dd:c4:b0:c5:a3:bb: f0:84:5a:fd:1a:c9:c9:63:d1:a0:78:77:97:c5:22: 58:29:6c:96:49:90:2a:1f:46:eb:c6:68:26:46:e6: 60:84:72:28:6a:37:3a:35:bd:3c:be:2f:ca:4d:8c: 3f:d6:12:11:7a:95:5d:8a:46:2f:b8:b4:d2:5b:13: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:93:48:0F:51:CE:C3:90:48:94:E7:6F:52:CE:85:C0:07:1D:A8:18 X509v3 Authority Key Identifier: keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:23:95:e5:e7:41:68:60:c6:57:a7:ee:af:9c:ff:9d:38:98: 93:a5:7a:fc:89:e8:f2:7a:e5:64:a6:41:7d:69:03:0c:6d:b3: a6:e2:9e:17:56:aa:9a:fb:18:5f:38:26:01:95:ec:ba:1f:9b: c9:d2:d6:8e:72:70:88:60:e0:82:7c:0f:a2:1e:e1:8a:7b:78: 85:56:2a:6d:ad:51:92:98:71:09:26:0b:53:aa:1d:f5:29:4c: 71:d3:39:a3:a1:bf:d2:f1:87:63:55:81:c3:1d:a5:d5:7a:02: a1:85:9a:31:00:5f:9a:58:d8:d8:55:fc:e2:d3:86:c1:45:ab: a1:e1:b5:00:50:72:53:59:03:1c:5e:74:59:ae:57:58:16:bd: c6:ad:b9:0a:02:dc:fb:0e:5b:31:4e:f1:b8:6f:8b:00:d4:83: da:69:fd:49:ee:69:c4:04:6f:f0:0f:47:29:42:7f:9b:57:58: fa:4a:bc:3a:b4:be:c1:f0:64:ac:95:df:28:f3:82:ef:aa:42: 47:0a:3b:4d:94:17:16:29:de:b7:44:eb:7e:94:10:94:6a:6e: 7a:a5:46:df:33:8c:ab:65:18:74:84:fc:59:0a:03:b3:42:7e: c4:cf:b6:2c:ca:02:a4:bb:18:a9:97:65:94:f2:eb:84:f1:c7: db:b1:71:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDkxMTAvBgNVBAUTKDE0ODM4REQ4RDRFMUZFMDMxNzE0MjY2NzE3NkUxNkUw QTVCNjg2NTEwHhcNMjUwODA4MTgwMzQyWhcNMjUwODE1MTgwMzQyWjAYMRYwFAYD VQQDEw02ODk2M2JmZS1hMmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNWZgkfFtaCkvrxQKlSZSSP5fO3Io0C7NnH0G9vAFdYxGMTFk7Q7hBqY0bTH 8zeJUxVKbkmDx3mgWeOBPSAJURa7Ye9cXm0rQ8eUlRKP5xEoS8K27Qg2n2Y/PAk+ P/4Cf5jPsGLrUoXH5nhkuZvE+DGbqJwXjKY0p+QSEQPbXWBZUr2IIrvFaeHdH9sp cMDGxbeJnK5puW6VWIfvbwMiWRDrag3pYK59g9pmDHeInlVCPU4jC/7oDcu1Lrjd xLDFo7vwhFr9GsnJY9GgeHeXxSJYKWyWSZAqH0brxmgmRuZghHIoajc6Nb08vi/K TYw/1hIRepVdikYvuLTSWxPznQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyTSA9R zsOQSJTnb1LOhcAHHagYMB8GA1UdIwQYMBaAFBSDjdjU4f4DFxQmZxduFuCltoZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEOS8xQzNERDk2NkI0 MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9nTVhGQ1puRjI0VzRLVzJo bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZJT04yTlRoX2dNWEZDWm5GMjRXNEtXMmhsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEOS8xQzNERDk2NkI0MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9n TVhGQ1puRjI0VzRLVzJobEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5I5Xl50FoYMZXp+6vnP+dOJiTpXr8iejyeuVkpkF9aQMMbbOm4p4X Vqqa+xhfOCYBley6H5vJ0taOcnCIYOCCfA+iHuGKe3iFViptrVGSmHEJJgtTqh31 KUxx0zmjob/S8YdjVYHDHaXVegKhhZoxAF+aWNjYVfzi04bBRauh4bUAUHJTWQMc XnRZrldYFr3GrbkKAtz7DlsxTvG4b4sA1IPaaf1J7mnEBG/wD0cpQn+bV1j6Srw6 tL7B8GSsld8o84LvqkJHCjtNlBcWKd63ROt+lBCUam56pUbfM4yrZRh0hPxZCgOz Qn7Ez7YsygKkuxipl2WU8uuE8cfbsXH2 -----END CERTIFICATE-----Generated at Sun Aug 10 10:36:07 2025 by rpki-client