$ rpki-client -vvvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft File: FION2NTh_gMXFCZnF24W4KW2hlE.mft (raw, json) Hash identifier: BcFwLVN1Dh8LZVyANPYI7qyQVz6DevWqDaifXzZpwwc= Subject key identifier: 02:FE:C1:18:D1:34:5A:75:DF:65:95:33:10:19:69:06:F7:FF:59:F6 Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 Certificate issuer: /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Certificate serial: 0EE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft Manifest number: 0EDB Signing time: Thu 24 Sep 2026 17:38:13 +0000 Manifest this update: Thu 24 Sep 2026 17:38:12 +0000 Manifest next update: Thu 01 Oct 2026 17:38:12 +0000 Files and hashes: 1: FION2NTh_gMXFCZnF24W4KW2hlE.crl (hash: sGGEHJh8Qyo03EZfwXFy3deRyJ1UHRLk8UhUsrFpZxs=) 2: 14E68648B42D11E9A44FF25BC4F9AE02.roa (hash: Pu0JLncruXRjK9bzpTN/LXkweSlyI2MUsZIXpCmzjVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3814 (0xee6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D9, serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Validity Not Before: Sep 24 17:38:12 2026 GMT Not After : Oct 1 17:38:12 2026 GMT Subject: CN=6ab56005-2da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9c:a3:70:d8:78:5b:70:f6:b7:83:23:74:63: 15:24:20:53:d1:9e:1f:72:9d:b7:df:2c:90:e3:d6: 99:60:43:61:e2:84:82:55:8e:5e:d6:c1:d7:2f:65: d7:3c:47:53:c2:5a:e6:e4:fd:3e:dd:14:ca:19:7a: 87:f0:1e:09:a7:10:de:14:aa:88:43:7d:c2:b6:b1: f7:54:7a:1c:88:20:81:98:d0:59:4a:12:57:21:f5: 19:2f:7b:e6:0d:e3:5e:39:62:b9:23:a5:59:d3:48: f7:5a:00:55:b7:1d:57:35:61:b3:2c:88:25:0c:76: df:d4:3a:2c:88:f5:db:40:46:7b:77:9e:8e:ac:f7: 8e:0a:63:cc:9b:7e:b8:96:31:57:b6:a4:6e:fd:4d: fa:23:ef:a4:e7:ea:66:b6:93:3d:ab:b1:74:b3:6a: 16:d9:a6:df:fa:54:15:c4:57:f9:e8:cb:d9:2b:ed: 4b:5a:8d:da:ea:85:25:4f:c6:c6:9a:29:4f:a2:8b: 42:57:74:73:d8:98:b4:2c:87:c5:de:b1:43:b5:80: d8:2b:cd:a2:fd:4b:35:61:c3:4a:0e:de:99:4a:c5: f7:a2:f1:42:b1:a8:ac:92:37:1a:68:64:53:bb:03: c2:7f:fe:97:30:94:27:51:63:1f:66:e0:16:ce:15: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FE:C1:18:D1:34:5A:75:DF:65:95:33:10:19:69:06:F7:FF:59:F6 X509v3 Authority Key Identifier: keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ba:33:bb:bc:07:5a:64:97:c7:99:44:f1:bb:7f:aa:80:10: 1b:c3:7c:12:61:f4:11:07:18:48:c6:fd:14:be:84:df:79:a3: 75:bb:12:fe:e4:e3:ba:e3:6d:a0:d3:82:99:d0:31:f3:00:8f: 2d:3c:e0:17:05:c5:20:7a:9e:83:5d:f6:6f:7c:26:50:d1:8c: 92:b0:ef:95:ad:76:95:0e:3d:d5:fa:58:66:af:a0:a3:5f:34: 7f:01:1b:5d:c9:30:60:ca:4c:73:4b:90:1e:09:95:de:25:9d: 78:d8:79:46:51:77:58:3d:75:dc:8e:f5:41:3f:1d:5b:c2:c6: a3:04:79:9b:4b:50:79:17:86:ed:f5:32:d3:ca:92:33:2b:ee: 81:b6:e1:07:24:7e:67:1f:ce:a3:31:f0:48:19:c0:d8:2e:ca: 34:88:c5:8e:d9:64:80:11:a1:e2:2e:06:5f:a0:0e:28:53:9d: 75:79:bf:80:84:0e:4c:7a:1e:c7:7d:85:d4:db:30:fb:5f:ec: 23:bd:61:d6:ec:83:f7:b7:37:b9:ec:6e:47:39:08:e8:1f:8d: e8:57:3a:8c:17:74:31:91:52:3a:9d:be:66:f0:df:e6:bd:03: 3d:97:1b:5e:a3:94:9b:8d:10:8a:a9:3a:b3:b9:18:e3:da:02: 52:9d:a4:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDkxMTAvBgNVBAUTKDE0ODM4REQ4RDRFMUZFMDMxNzE0MjY2NzE3NkUxNkUw QTVCNjg2NTEwHhcNMjYwOTI0MTczODEyWhcNMjYxMDAxMTczODEyWjAYMRYwFAYD VQQDEw02YWI1NjAwNS0yZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAipyjcNh4W3D2t4MjdGMVJCBT0Z4fcp233yyQ49aZYENh4oSCVY5e1sHXL2XX PEdTwlrm5P0+3RTKGXqH8B4JpxDeFKqIQ33CtrH3VHociCCBmNBZShJXIfUZL3vm DeNeOWK5I6VZ00j3WgBVtx1XNWGzLIglDHbf1DosiPXbQEZ7d56OrPeOCmPMm364 ljFXtqRu/U36I++k5+pmtpM9q7F0s2oW2abf+lQVxFf56MvZK+1LWo3a6oUlT8bG milPootCV3Rz2Ji0LIfF3rFDtYDYK82i/Us1YcNKDt6ZSsX3ovFCsaiskjcaaGRT uwPCf/6XMJQnUWMfZuAWzhWN4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAL+wRjR NFp132WVMxAZaQb3/1n2MB8GA1UdIwQYMBaAFBSDjdjU4f4DFxQmZxduFuCltoZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEOS8xQzNERDk2NkI0 MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9nTVhGQ1puRjI0VzRLVzJo bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZJT04yTlRoX2dNWEZDWm5GMjRXNEtXMmhsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEOS8xQzNERDk2NkI0MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9n TVhGQ1puRjI0VzRLVzJobEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAArozu7wHWmSXx5lE8bt/qoAQG8N8EmH0EQcYSMb9FL6E33mjdbsS/uTjuuNt oNOCmdAx8wCPLTzgFwXFIHqeg132b3wmUNGMkrDvla12lQ491fpYZq+go180fwEb XckwYMpMc0uQHgmV3iWdeNh5RlF3WD113I71QT8dW8LGowR5m0tQeReG7fUy08qS MyvugbbhByR+Zx/OozHwSBnA2C7KNIjFjtlkgBGh4i4GX6AOKFOddXm/gIQOTHoe x32F1Nsw+1/sI71h1uyD97c3uexuRzkI6B+N6Fc6jBd0MZFSOp2+ZvDf5r0DPZcb XqOUm40Qiqk6s7kY49oCUp2kyQ== -----END CERTIFICATE-----Generated at Fri Sep 25 00:30:33 2026 by rpki-client