$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft File: FION2NTh_gMXFCZnF24W4KW2hlE.mft (raw, json) Hash identifier: 6d3ceSj5hAc72TKINGRlXPjNCtqTANo8JN2LTbBhDnA= Subject key identifier: BD:18:E2:6F:EB:D1:08:00:8C:4B:FF:14:6B:58:4F:60:25:9F:C6:B5 Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 Certificate issuer: /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Certificate serial: 0E75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft Manifest number: 0E6D Signing time: Sat 28 Feb 2026 17:53:40 +0000 Manifest this update: Sat 28 Feb 2026 17:53:40 +0000 Manifest next update: Sat 07 Mar 2026 17:53:40 +0000 Files and hashes: 1: FION2NTh_gMXFCZnF24W4KW2hlE.crl (hash: NJcUW5UWALCy1RXDe6gzMUsnWvMtypUiv7tQnT7e+OU=) 2: 14E68648B42D11E9A44FF25BC4F9AE02.roa (hash: aOcvKXW2OwUSyFzRq5Kiuga5ndEep1PmMp0UDb+8XIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 17:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3701 (0xe75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D9, serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Validity Not Before: Feb 28 17:53:40 2026 GMT Not After : Mar 7 17:53:40 2026 GMT Subject: CN=69a32ba4-0b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:ab:95:d5:87:d1:53:d7:78:36:4e:7f:02: 0f:13:2f:f5:9a:8f:6f:71:8a:83:3f:75:b4:2f:f4: e4:65:8f:58:36:77:0f:56:86:37:a4:81:f4:ef:fa: b8:9a:4a:c6:a9:1d:18:9e:78:7b:cf:05:5f:f0:d0: 4f:2d:31:95:d8:13:7c:d4:f1:5a:a0:86:c6:97:a5: 3f:71:dd:03:fa:a7:9b:39:b9:77:fa:42:84:e0:42: 81:4d:6a:a3:b9:31:20:d2:61:a1:fc:7f:65:9c:9f: 2d:7c:c6:bc:30:d2:9d:9a:5d:32:e5:53:1d:8e:d7: eb:47:56:d5:bc:bb:f9:f9:38:e3:4b:d8:65:7e:ad: 8b:0d:4b:ee:1f:78:f0:7d:c1:44:cd:05:f9:15:0a: 79:19:f0:e6:cd:c0:c7:9b:35:99:85:b6:58:5d:cf: 20:12:1e:77:36:b1:e9:ae:59:32:8d:e1:17:7e:8f: f0:32:59:63:98:44:66:cf:c9:2a:9d:d6:43:59:18: a0:f4:7b:5e:91:b9:91:65:54:4c:5c:5a:cf:c2:31: b5:69:31:d7:3f:ac:68:81:79:4c:07:a4:63:98:e1: b9:e1:ba:40:c2:d0:0d:59:41:b5:99:7f:6a:e9:49: cd:5a:2a:d1:71:41:fe:2b:50:5f:39:85:94:18:59: ec:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:18:E2:6F:EB:D1:08:00:8C:4B:FF:14:6B:58:4F:60:25:9F:C6:B5 X509v3 Authority Key Identifier: keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:24:d0:16:85:4d:06:aa:0c:cb:58:ea:f1:15:45:eb:2d:5b: b6:ac:4d:52:1c:f7:4f:89:aa:81:4a:8d:7e:06:98:99:c1:68: 61:80:6c:b5:a3:70:1d:0a:65:c8:e1:2b:18:25:59:e5:ed:44: 87:24:d1:b2:86:d4:19:c3:ee:7b:46:29:8d:eb:37:a1:9f:89: 83:36:31:f4:ee:48:3d:29:ce:6c:99:50:10:49:4a:ba:e8:bf: 42:92:7a:07:f1:ee:4b:c5:f2:89:9e:90:f0:2d:a2:07:d8:a1: 99:7f:ee:8b:b5:70:09:6b:7e:8f:e0:45:88:a1:79:c2:cb:0c: f1:89:e9:08:48:39:e9:3c:87:6b:49:12:50:2e:34:66:4a:79: ba:2b:39:fa:a2:df:e6:ba:dd:a6:8b:1f:b6:4b:0c:94:ef:bf: 20:7e:23:3a:1c:98:cd:ac:96:4a:23:28:9a:21:18:c1:47:e1: ae:4f:6a:44:7a:b1:4b:9a:49:0e:ad:0f:50:bd:da:df:85:fa: 29:a4:3e:ff:e8:9a:86:86:b9:60:00:a3:ee:a3:d2:60:81:35: 3d:63:02:6a:d1:7d:d7:1c:c3:21:ba:1e:4f:85:e0:46:f2:4d: 16:4f:83:c7:2e:d4:f0:1b:63:7b:f8:7e:d5:99:22:ba:2b:6d: f4:59:b9:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDkxMTAvBgNVBAUTKDE0ODM4REQ4RDRFMUZFMDMxNzE0MjY2NzE3NkUxNkUw QTVCNjg2NTEwHhcNMjYwMjI4MTc1MzQwWhcNMjYwMzA3MTc1MzQwWjAYMRYwFAYD VQQDDA02OWEzMmJhNC0wYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV2rldWH0VPXeDZOfwIPEy/1mo9vcYqDP3W0L/TkZY9YNncPVoY3pIH07/q4 mkrGqR0Ynnh7zwVf8NBPLTGV2BN81PFaoIbGl6U/cd0D+qebObl3+kKE4EKBTWqj uTEg0mGh/H9lnJ8tfMa8MNKdml0y5VMdjtfrR1bVvLv5+TjjS9hlfq2LDUvuH3jw fcFEzQX5FQp5GfDmzcDHmzWZhbZYXc8gEh53NrHprlkyjeEXfo/wMlljmERmz8kq ndZDWRig9HtekbmRZVRMXFrPwjG1aTHXP6xogXlMB6RjmOG54bpAwtANWUG1mX9q 6UnNWirRcUH+K1BfOYWUGFnsNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0Y4m/r 0QgAjEv/FGtYT2Aln8a1MB8GA1UdIwQYMBaAFBSDjdjU4f4DFxQmZxduFuCltoZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEOS8xQzNERDk2NkI0 MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9nTVhGQ1puRjI0VzRLVzJo bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZJT04yTlRoX2dNWEZDWm5GMjRXNEtXMmhsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEOS8xQzNERDk2NkI0MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9n TVhGQ1puRjI0VzRLVzJobEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoyTQFoVNBqoMy1jq8RVF6y1btqxNUhz3T4mqgUqNfgaYmcFoYYBstaNwHQpl yOErGCVZ5e1EhyTRsobUGcPue0Ypjes3oZ+JgzYx9O5IPSnObJlQEElKuui/QpJ6 B/HuS8XyiZ6Q8C2iB9ihmX/ui7VwCWt+j+BFiKF5wssM8YnpCEg56TyHa0kSUC40 Zkp5uis5+qLf5rrdposftksMlO+/IH4jOhyYzayWSiMomiEYwUfhrk9qRHqxS5pJ Dq0PUL3a34X6KaQ+/+iahoa5YACj7qPSYIE1PWMCatF91xzDIboeT4XgRvJNFk+D xy7U8Btje/h+1Zkiuitt9Fm5Gg== -----END CERTIFICATE-----Generated at Sun Mar 1 23:04:02 2026 by rpki-client