
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
File: FION2NTh_gMXFCZnF24W4KW2hlE.mft (raw, json)
Hash identifier: wpQWg4dj2lrq5uz1rdociFCD3tRbhHHcTow/gdaxFYg=
Subject key identifier: 87:88:DB:FC:8A:EE:99:B3:81:F6:1F:55:A1:92:7E:62:2F:90:B5:CE
Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51
Certificate issuer: /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651
Certificate serial: 0EED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
Manifest number: 0EE2
Signing time: Thu 08 Oct 2026 17:45:15 +0000
Manifest this update: Thu 08 Oct 2026 17:45:14 +0000
Manifest next update: Thu 15 Oct 2026 17:45:14 +0000
Files and hashes: 1: FION2NTh_gMXFCZnF24W4KW2hlE.crl (hash: KCuIT5Liy+9wWpn5aja652XvrZITREh3qTWlAUUkb/w=)
2: 14E68648B42D11E9A44FF25BC4F9AE02.roa (hash: Pu0JLncruXRjK9bzpTN/LXkweSlyI2MUsZIXpCmzjVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl
rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3821 (0xeed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D9, serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651
Validity
Not Before: Oct 8 17:45:14 2026 GMT
Not After : Oct 15 17:45:14 2026 GMT
Subject: CN=6ac7d6ab-1ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:5d:69:2c:80:aa:88:4c:ae:28:26:b4:be:
39:38:ca:74:1e:b8:32:4c:22:76:70:48:c8:e9:7c:
a4:51:81:5a:7d:cf:c3:88:08:d8:2c:62:d5:04:72:
69:65:0e:f1:89:0a:bd:67:d9:24:cc:00:35:70:94:
0c:c9:3b:19:02:3e:ca:d5:5f:9b:a3:57:46:e8:9e:
3f:f8:a5:08:c2:8f:ca:e3:09:16:4f:af:0b:72:a2:
6d:d6:fc:d3:38:64:c3:3d:80:bd:7b:05:06:8d:64:
8b:ed:3e:1d:4d:e6:84:0f:5a:43:c7:a1:f1:3f:13:
6d:cd:09:6e:c8:85:b0:83:7c:22:3b:33:4f:48:43:
82:e0:28:ae:b5:87:78:7c:80:bf:ff:5e:02:b2:b0:
e2:a3:d3:da:0f:14:9d:b1:96:44:69:21:9a:94:83:
a5:ac:83:ee:f4:0e:46:30:71:f7:9b:a7:ab:a6:d3:
3e:bc:ad:23:85:4b:e5:77:4d:0c:cf:4b:1a:49:78:
8f:53:d7:59:98:ab:2e:18:ca:64:36:05:d9:04:43:
e0:47:a7:f0:51:ea:20:46:18:e3:7b:d3:ce:f7:8c:
49:26:70:c1:94:75:a8:1f:da:8f:7d:20:14:44:df:
7f:bd:5e:94:de:7f:61:1b:b1:d6:33:44:a1:38:75:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:88:DB:FC:8A:EE:99:B3:81:F6:1F:55:A1:92:7E:62:2F:90:B5:CE
X509v3 Authority Key Identifier:
keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ab:03:14:cc:22:b8:e0:1d:43:b2:4e:47:49:08:01:d0:25:
45:16:d1:0c:bb:42:13:77:93:39:b2:a9:10:ac:c5:d8:d7:80:
9a:9a:9a:7b:ef:30:46:6d:8c:8a:cc:85:2f:b7:b9:37:f1:75:
3a:01:56:e7:ee:ab:23:44:ab:1a:3f:b6:fa:35:a3:12:5d:3c:
4b:82:04:9a:a9:f8:6d:0d:fe:33:cc:7f:93:45:a1:36:b3:d7:
b3:14:ed:a7:9d:c1:25:08:45:25:e2:3b:6c:01:b3:39:d5:98:
b9:fa:a9:25:d2:4b:12:2e:eb:2a:59:eb:1f:c5:cd:6b:6f:48:
09:bd:fe:a3:1f:0e:6e:78:86:d7:14:5a:69:70:23:f4:1a:7e:
33:57:7b:41:a8:19:56:12:06:59:fe:78:7b:a0:7c:fa:01:40:
50:c6:71:46:9c:55:2c:df:33:89:4e:ef:bd:f9:c4:7e:bf:a5:
ac:21:46:9a:f8:47:dc:4a:e1:c8:b7:d0:90:ad:3a:7b:26:8b:
0a:7d:d5:6a:24:e5:dc:e2:02:b6:f2:fe:4c:e2:47:9e:0e:d6:
c2:a4:62:08:9d:ec:53:af:da:03:49:e5:bd:f9:85:7b:e8:f4:
19:38:bf:44:37:f3:ee:e4:69:6e:35:9f:ea:c4:69:88:ef:70:
69:66:1b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:00:37 2026 by rpki-client