
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
File: FION2NTh_gMXFCZnF24W4KW2hlE.mft (raw, json)
Hash identifier: uNmNC9MFiABWmrJBMjcPbCFUuV39aoLQvNPZmxAK33c=
Subject key identifier: 40:31:1E:AF:D7:80:32:47:5A:94:0C:22:77:CC:F8:3B:0F:A9:E5:EA
Authority key identifier: 14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51
Certificate issuer: /CN=A91991D9/serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651
Certificate serial: 0E70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
Manifest number: 0E68
Signing time: Wed 18 Feb 2026 17:28:30 +0000
Manifest this update: Wed 18 Feb 2026 17:28:30 +0000
Manifest next update: Wed 25 Feb 2026 17:28:30 +0000
Files and hashes: 1: FION2NTh_gMXFCZnF24W4KW2hlE.crl (hash: XYmJE+2rR33VVmy7ISdxPzeu5SGCJkqqV5dozRc4q4Q=)
2: 14E68648B42D11E9A44FF25BC4F9AE02.roa (hash: aOcvKXW2OwUSyFzRq5Kiuga5ndEep1PmMp0UDb+8XIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl
rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3696 (0xe70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D9, serialNumber=14838DD8D4E1FE0317142667176E16E0A5B68651
Validity
Not Before: Feb 18 17:28:30 2026 GMT
Not After : Feb 25 17:28:30 2026 GMT
Subject: CN=6995f6be-b70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:01:94:9c:57:b7:46:ef:4f:e8:e2:a1:cf:
04:ba:4d:ce:6f:cf:17:cb:39:72:17:ff:a3:61:e4:
ad:99:78:d6:1e:50:ae:7b:80:c4:27:3b:01:b4:f5:
dc:6d:47:ed:c0:0a:b3:f2:bf:20:bb:99:7c:c7:92:
f9:79:fe:15:48:e1:b8:00:d7:74:72:69:23:40:c0:
0e:a3:76:85:d2:fc:90:ed:1e:8d:ed:b6:ae:96:e0:
fb:fc:1b:e0:d2:6c:6d:99:96:39:f9:de:76:4f:0f:
05:5e:30:db:63:89:3c:51:26:c7:ac:7a:fc:be:31:
85:fb:5e:8a:9c:c4:54:b1:d2:0f:6e:83:8b:da:b9:
d4:f2:db:cc:48:72:07:b4:02:ae:44:25:59:3d:ca:
16:32:3f:da:fd:f2:6e:4a:6a:09:27:51:53:76:70:
3d:1d:c8:e1:45:12:eb:e2:46:39:ff:30:03:df:a2:
37:6b:3c:0e:cc:6b:ff:61:58:c6:03:2d:05:f8:ff:
b4:a4:d4:b4:9a:07:ba:fa:56:bf:94:96:43:bb:94:
21:51:f5:87:50:e2:de:6e:b1:f7:5c:58:5e:f8:18:
22:5c:c3:03:4d:97:07:54:ee:cc:54:11:e7:9b:2f:
ac:0f:4e:84:0c:5e:52:e0:4a:85:f9:93:2f:4a:14:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:31:1E:AF:D7:80:32:47:5A:94:0C:22:77:CC:F8:3B:0F:A9:E5:EA
X509v3 Authority Key Identifier:
keyid:14:83:8D:D8:D4:E1:FE:03:17:14:26:67:17:6E:16:E0:A5:B6:86:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FION2NTh_gMXFCZnF24W4KW2hlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D9/1C3DD966B42611E98DE0884AC4F9AE02/FION2NTh_gMXFCZnF24W4KW2hlE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a0:14:32:75:7c:b5:1a:39:c8:8b:67:9c:56:43:35:29:89:
52:24:30:75:14:72:c2:3d:65:e2:13:ca:aa:73:93:77:b2:d9:
3a:61:4e:93:f7:e1:59:c7:9f:97:df:c6:1a:53:05:84:8f:a6:
ad:8d:20:bb:a0:02:8e:02:00:fe:e5:f7:e0:0b:08:71:61:8b:
72:bf:b9:6f:28:33:65:8b:fc:02:2a:80:f9:8f:05:6c:fa:2c:
aa:b1:4f:c3:21:cf:8b:f3:d3:b1:1e:3d:91:b5:e4:75:e0:5f:
81:ac:70:21:2e:6a:14:0b:e9:45:78:fc:bc:d1:50:57:2a:b1:
e7:04:dc:96:9d:7d:ab:fd:d2:5b:55:de:7d:70:e5:10:28:8e:
05:cf:18:aa:5f:6b:9a:2f:c3:e9:26:f2:33:df:46:f9:03:1f:
e2:a2:f9:9f:98:d5:ff:a2:82:da:47:e6:f3:1e:b9:28:1f:fa:
c2:1d:30:d9:dd:5f:62:a9:fd:1f:29:58:55:1a:e0:8b:65:e1:
ab:34:dd:74:ef:86:47:a7:a7:87:61:82:dd:f4:8b:bc:b9:b6:
a0:aa:4f:5f:c0:f8:44:db:b9:35:04:e1:fb:fe:48:dc:b4:84:
09:85:72:f6:2c:f3:9f:b4:8b:df:4f:b1:3a:c1:66:4c:27:7b:
39:80:d7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:41:52 2026 by rpki-client