$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft File: FION2NTh_gMXFCZnF24W4KW2hlE.mft (raw, json) Hash identifier: 4YtEBkWtdME9KEQ5Rh5olnYNTGhw52nYwC/DJf0Q3uk= Subject key identifier: 7E:C2:65:47:16:E4:A0:56:B0:DC:23:43:DE:97:15:E1:CD:A2:11:EC Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 Certificate issuer: /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Certificate serial: 0E91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft Manifest number: 0E87 Signing time: Thu 16 Apr 2026 17:40:11 +0000 Manifest this update: Thu 16 Apr 2026 17:40:10 +0000 Manifest next update: Thu 23 Apr 2026 17:40:10 +0000 Files and hashes: 1: FION2NTh_gMXFCZnF24W4KW2hlE.crl (hash: Uisj2TLasY3RnDv53Tf8b/JHcknDESr1OZkBdjrIDLw=) 2: 14E68648B42D11E9A44FF25BC4F9AE02.roa (hash: k8KPSV6AIo1KPs7202z0z5rLKfEOuxcDMiUELQD0ouE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3729 (0xe91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D9, serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Validity Not Before: Apr 16 17:40:10 2026 GMT Not After : Apr 23 17:40:10 2026 GMT Subject: CN=69e11efa-87d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:ae:27:ed:2b:4a:66:c8:92:3a:c3:50:e3: b8:f8:f3:2c:4a:54:34:96:86:2d:69:78:ab:4a:ea: 10:40:09:91:84:20:f8:4c:bf:7c:77:46:03:70:5c: 58:bd:ae:6e:7f:ae:2b:18:a4:6f:3d:bf:1d:2f:e2: 65:0b:e8:f1:2a:d0:9d:a9:cc:14:50:2e:5f:3f:8b: ac:78:8d:af:d8:07:8b:f6:bf:b8:a1:03:6f:11:53: 6d:d4:b3:41:b2:c9:45:80:a1:7e:18:ab:15:96:87: d8:68:9e:ae:b1:5b:d7:27:e0:2c:88:cb:1d:b6:15: b3:ea:08:54:52:dc:7a:63:0c:8b:4f:e8:b4:ab:bd: 5b:60:ce:3a:25:47:b8:69:e3:cd:08:eb:2b:72:df: 52:1f:0d:69:42:c7:af:cb:43:4f:ea:c4:19:73:b6: 4d:e2:4c:e2:28:7d:bf:0d:9c:22:6a:7e:9e:d2:3e: 1e:78:ee:a4:6a:e9:78:07:d1:86:42:ac:78:66:38: 91:61:84:52:c9:6e:0d:fa:1a:4f:8d:68:78:1e:82: bb:42:4d:02:b8:ef:57:77:f1:49:78:bd:4f:70:1c: 3a:0b:cb:f8:0f:3a:57:fc:c8:16:37:3f:92:8f:1f: 54:d2:e5:00:88:4b:1a:9c:19:f3:11:13:f6:d7:0e: 6f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C2:65:47:16:E4:A0:56:B0:DC:23:43:DE:97:15:E1:CD:A2:11:EC X509v3 Authority Key Identifier: keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ea:90:82:e8:ac:0f:7f:1f:00:6a:39:57:47:7c:67:6d:f7: 92:95:f9:33:b1:21:b4:6c:95:aa:e5:bf:b9:f2:a4:c5:12:4c: 55:71:5a:2b:22:d0:e7:10:db:e5:b0:03:20:e3:46:bd:56:6d: 1c:76:51:0e:a4:3f:b0:2b:16:58:a7:9f:35:05:06:4c:ac:aa: 16:03:a6:5e:48:5d:ce:89:d7:c0:aa:32:07:ac:04:87:a3:29: b5:7d:64:06:87:54:4b:a0:c1:cf:b8:cc:b5:e2:25:f4:d9:c1: 0f:17:c4:35:fc:dd:a0:20:ab:0d:8a:34:4d:ad:ac:d4:b8:7d: 7f:17:51:68:89:5b:0c:5c:13:b2:9d:be:64:d5:56:7d:31:25: 7c:40:a2:b7:13:a0:6a:d9:5f:7d:13:15:18:42:04:12:40:10: 0c:34:5f:86:46:d1:72:12:07:27:72:6c:08:60:1e:64:53:6b: 7c:40:a8:63:ce:54:f8:eb:b9:25:9b:1d:a4:d8:60:2d:e1:b3: c1:5b:5b:06:38:b0:0a:3a:f6:6f:b4:56:9a:1c:44:df:14:03: 1b:73:65:e5:c0:49:6d:38:23:48:63:bf:c0:49:75:55:36:f3: 5f:9d:a7:92:ff:80:f7:0a:72:f0:34:c7:f2:19:85:67:a6:8f: 7e:13:02:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDkxMTAvBgNVBAUTKDE0ODM4REQ4RDRFMUZFMDMxNzE0MjY2NzE3NkUxNkUw QTVCNjg2NTEwHhcNMjYwNDE2MTc0MDEwWhcNMjYwNDIzMTc0MDEwWjAYMRYwFAYD VQQDEw02OWUxMWVmYS04N2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssKuJ+0rSmbIkjrDUOO4+PMsSlQ0loYtaXirSuoQQAmRhCD4TL98d0YDcFxY va5uf64rGKRvPb8dL+JlC+jxKtCdqcwUUC5fP4useI2v2AeL9r+4oQNvEVNt1LNB sslFgKF+GKsVlofYaJ6usVvXJ+AsiMsdthWz6ghUUtx6YwyLT+i0q71bYM46JUe4 aePNCOsrct9SHw1pQsevy0NP6sQZc7ZN4kziKH2/DZwian6e0j4eeO6kaul4B9GG Qqx4ZjiRYYRSyW4N+hpPjWh4HoK7Qk0CuO9Xd/FJeL1PcBw6C8v4DzpX/MgWNz+S jx9U0uUAiEsanBnzERP21w5vpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7CZUcW 5KBWsNwjQ96XFeHNohHsMB8GA1UdIwQYMBaAFBSDjdjU4f4DFxQmZxduFuCltoZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEOS8xQzNERDk2NkI0 MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9nTVhGQ1puRjI0VzRLVzJo bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZJT04yTlRoX2dNWEZDWm5GMjRXNEtXMmhsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEOS8xQzNERDk2NkI0MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9n TVhGQ1puRjI0VzRLVzJobEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE+qQguisD38fAGo5V0d8Z233kpX5M7EhtGyVquW/ufKkxRJMVXFaKyLQ5xDb 5bADIONGvVZtHHZRDqQ/sCsWWKefNQUGTKyqFgOmXkhdzonXwKoyB6wEh6MptX1k BodUS6DBz7jMteIl9NnBDxfENfzdoCCrDYo0Ta2s1Lh9fxdRaIlbDFwTsp2+ZNVW fTElfECitxOgatlffRMVGEIEEkAQDDRfhkbRchIHJ3JsCGAeZFNrfECoY85U+Ou5 JZsdpNhgLeGzwVtbBjiwCjr2b7RWmhxE3xQDG3Nl5cBJbTgjSGO/wEl1VTbzX52n kv+A9wpy8DTH8hmFZ6aPfhMCBQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:46:49 2026 by rpki-client