$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft File: FION2NTh_gMXFCZnF24W4KW2hlE.mft (raw, json) Hash identifier: wkchCb+W1V7ZIfHG2SDCRs6i5LhC22futs8xgQbm2JM= Subject key identifier: 18:FB:C0:A9:34:F9:24:72:46:46:2B:A6:EE:C3:BC:FA:38:C8:F1:8E Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 Certificate issuer: /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Certificate serial: 0E39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft Manifest number: 0E31 Signing time: Tue 04 Nov 2025 17:53:39 +0000 Manifest this update: Tue 04 Nov 2025 17:53:38 +0000 Manifest next update: Tue 11 Nov 2025 17:53:38 +0000 Files and hashes: 1: FION2NTh_gMXFCZnF24W4KW2hlE.crl (hash: mB6+NMkewtSKiL4voc959orwdlK5m69+vZ0GVAYyV0Y=) 2: 14E68648B42D11E9A44FF25BC4F9AE02.roa (hash: aOcvKXW2OwUSyFzRq5Kiuga5ndEep1PmMp0UDb+8XIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3641 (0xe39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D9, serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651 Validity Not Before: Nov 4 17:53:38 2025 GMT Not After : Nov 11 17:53:38 2025 GMT Subject: CN=690a3da2-2918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:10:d5:d7:73:b3:01:4f:df:fb:69:35:56:f5: 1b:e7:9a:96:29:de:16:0d:d6:fd:ed:94:f8:e1:c9: bc:9b:a9:bd:73:cc:e4:59:75:a8:1f:6b:58:81:bb: ea:d9:ff:9f:e2:fb:a6:ca:3d:2c:68:60:9e:5d:55: 65:7f:af:44:8a:c5:99:c8:01:db:05:24:73:c8:96: 89:65:34:23:39:b4:1c:2b:07:3f:d1:50:02:06:b6: 28:09:17:77:f4:25:73:89:02:a7:83:e5:f5:4a:19: 7d:3a:d3:84:b5:0f:a2:ab:3d:77:76:78:69:a9:70: 89:ce:22:6b:72:9d:28:91:d8:f1:4e:79:fa:84:33: b1:92:c2:19:58:c2:5b:08:94:86:c3:84:7f:b9:46: 60:e1:a7:23:64:ed:89:84:9a:74:2f:e6:8a:94:23: 73:c0:9c:18:8e:27:b5:53:4d:d1:dc:db:60:bb:23: f1:22:67:30:4b:6f:5c:da:1b:92:a8:cb:34:ef:f2: 4e:8f:ff:b5:85:79:0e:b9:90:23:54:48:33:cd:0b: f0:87:ec:4a:c7:b5:8b:e7:f5:bd:f2:83:c5:05:7d: aa:86:ce:c9:49:58:ed:d4:e3:8a:72:fd:b3:05:8d: d1:ab:e6:05:b6:d5:d5:45:61:db:ba:0b:8d:f9:63: eb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FB:C0:A9:34:F9:24:72:46:46:2B:A6:EE:C3:BC:FA:38:C8:F1:8E X509v3 Authority Key Identifier: keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:1a:ca:26:93:f0:02:4f:46:17:f1:eb:05:66:cb:3b:89:85: 93:cb:f9:ee:e2:72:99:2a:ff:97:43:32:dc:73:92:9c:04:98: 4b:5d:0a:2b:07:f6:7c:9f:bf:2a:61:19:85:81:77:d3:b9:98: 4a:3b:f1:ab:50:36:34:f4:44:74:60:e7:c9:1f:84:b5:c2:1f: 62:65:61:10:d0:7c:2a:a0:1e:20:ad:94:7e:cd:7a:40:a7:00: 7c:12:f0:9a:a9:c3:9d:cc:fb:49:4d:65:75:54:fb:5c:83:89: 49:41:22:91:ad:f4:61:f5:6d:c9:e6:8c:92:d9:c6:b7:fc:9f: 96:d3:b7:ef:5d:4f:93:35:fc:4c:c0:c0:a9:c4:2a:34:26:37: 03:e0:45:57:5b:b1:5d:66:fc:af:b9:dd:b5:37:16:ea:85:77: ca:05:e7:a0:45:48:d7:0f:de:0f:43:a8:86:af:37:af:04:04: ba:d3:cc:31:26:de:f1:2e:fd:de:1e:c7:ba:79:59:00:40:a1: e3:47:ba:70:a5:a1:5d:00:88:1a:4a:66:c6:78:44:b9:5e:0e: 61:01:e2:f2:3f:de:13:65:4c:85:ee:5d:fe:ff:89:18:6c:d9: 0f:fd:97:bf:cd:35:32:96:ac:7d:1b:da:44:ba:24:fe:05:60: 3e:16:72:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDkxMTAvBgNVBAUTKDE0ODM4REQ4RDRFMUZFMDMxNzE0MjY2NzE3NkUxNkUw QTVCNjg2NTEwHhcNMjUxMTA0MTc1MzM4WhcNMjUxMTExMTc1MzM4WjAYMRYwFAYD VQQDEw02OTBhM2RhMi0yOTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxDV13OzAU/f+2k1VvUb55qWKd4WDdb97ZT44cm8m6m9c8zkWXWoH2tYgbvq 2f+f4vumyj0saGCeXVVlf69EisWZyAHbBSRzyJaJZTQjObQcKwc/0VACBrYoCRd3 9CVziQKng+X1Shl9OtOEtQ+iqz13dnhpqXCJziJrcp0okdjxTnn6hDOxksIZWMJb CJSGw4R/uUZg4acjZO2JhJp0L+aKlCNzwJwYjie1U03R3NtguyPxImcwS29c2huS qMs07/JOj/+1hXkOuZAjVEgzzQvwh+xKx7WL5/W98oPFBX2qhs7JSVjt1OOKcv2z BY3Rq+YFttXVRWHbuguN+WPrswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBj7wKk0 +SRyRkYrpu7DvPo4yPGOMB8GA1UdIwQYMBaAFBSDjdjU4f4DFxQmZxduFuCltoZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEOS8xQzNERDk2NkI0 MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9nTVhGQ1puRjI0VzRLVzJo bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZJT04yTlRoX2dNWEZDWm5GMjRXNEtXMmhsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEOS8xQzNERDk2NkI0MjYxMUU5OERFMDg4NEFDNEY5QUUwMi9GSU9OMk5UaF9n TVhGQ1puRjI0VzRLVzJobEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJGsomk/ACT0YX8esFZss7iYWTy/nu4nKZKv+XQzLcc5KcBJhLXQor B/Z8n78qYRmFgXfTuZhKO/GrUDY09ER0YOfJH4S1wh9iZWEQ0HwqoB4grZR+zXpA pwB8EvCaqcOdzPtJTWV1VPtcg4lJQSKRrfRh9W3J5oyS2ca3/J+W07fvXU+TNfxM wMCpxCo0JjcD4EVXW7FdZvyvud21NxbqhXfKBeegRUjXD94PQ6iGrzevBAS608wx Jt7xLv3eHse6eVkAQKHjR7pwpaFdAIgaSmbGeES5Xg5hAeLyP94TZUyF7l3+/4kY bNkP/Ze/zTUylqx9G9pEuiT+BWA+FnLK -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:18 2025 by rpki-client