$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft File: jsTj-v1QkSiuwsCHnmr5E54V6rY.mft (raw, json) Hash identifier: WZvn5NhNCE4nznyMFuhUR5edj1IlLJ4pOV72gZ7aQuQ= Subject key identifier: CE:85:42:53:60:A4:A3:FF:68:4C:99:ED:40:B7:77:29:7F:C9:07:5E Authority key identifier: 8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 Certificate issuer: /CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Certificate serial: 0348 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft Manifest number: 0340 Signing time: Sun 27 Sep 2026 01:02:27 +0000 Manifest this update: Sun 27 Sep 2026 01:02:26 +0000 Manifest next update: Sun 04 Oct 2026 01:02:26 +0000 Files and hashes: 1: jsTj-v1QkSiuwsCHnmr5E54V6rY.crl (hash: N9pHrPox/xO5qLqQrlNPKS6CMd5YwpPGxSWKWuf4O18=) 2: DD530B9222B111EDA3B74073C4F9AE02.roa (hash: R54akjGxTnzxhQ5eWup+gnTX3b1EgVjuqEvhFW0utCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 840 (0x348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142AA2, serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Validity Not Before: Sep 27 01:02:26 2026 GMT Not After : Oct 4 01:02:26 2026 GMT Subject: CN=6ab86b23-4c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:39:77:2d:cc:f0:56:c3:76:d9:d7:ed:cf: 12:0b:e9:28:f4:0d:7e:96:96:89:61:e0:f8:53:8b: 7e:94:ac:21:b0:a9:06:af:a4:30:4f:db:32:d6:11: 14:b7:c5:bc:9d:9a:a0:6a:56:ce:28:1e:fb:ec:2e: a4:b6:61:6f:97:99:38:70:84:f0:83:3f:2c:0a:72: 7f:b4:16:be:97:77:88:ea:cd:4b:e8:71:5b:db:89: 13:43:78:30:bb:8b:3a:10:fe:8c:80:75:1e:13:0e: 72:a1:ec:64:ad:1c:c3:4a:ad:f3:24:5a:8e:c0:83: b6:3c:34:ca:69:9a:30:9d:7a:86:f9:03:2f:52:32: 00:06:12:f7:57:bf:a6:c9:a7:c4:62:d1:78:54:47: bb:e3:fd:bd:da:d6:25:e0:c3:b7:13:fb:23:d5:3f: e1:70:b2:51:41:78:04:08:56:2c:be:c6:c9:ca:eb: 14:e9:b1:df:47:cb:35:87:37:65:66:6b:68:7f:c3: 63:1d:94:2c:65:3b:24:ea:9f:fd:fb:8e:39:c3:a6: c7:de:24:7e:c1:6c:f4:db:2b:5b:54:0d:11:01:cd: 37:b8:94:d1:37:d7:52:35:b9:77:04:7d:25:81:04: 4e:b3:40:da:b4:6f:1c:ec:00:78:55:97:bb:46:0c: e9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:85:42:53:60:A4:A3:FF:68:4C:99:ED:40:B7:77:29:7F:C9:07:5E X509v3 Authority Key Identifier: keyid:8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:01:9c:7b:8e:ea:7e:55:aa:6f:1f:f8:14:bf:05:5d:55:9a: 9b:fa:2f:14:6d:6c:61:23:e1:75:33:b9:32:dd:c2:04:47:22: 7c:b2:07:5f:c2:89:97:ff:4b:dc:b2:02:8c:bf:41:28:67:d6: 7d:56:8b:32:3c:bd:ca:2d:8e:31:df:24:15:4a:06:d4:5c:87: df:9e:ef:70:46:5b:df:f9:1a:3e:15:09:d0:11:37:73:2c:58: ed:f7:0c:a4:3b:e7:b6:43:ff:9f:48:da:3b:b2:5b:f4:05:a8: aa:cd:a5:67:7f:7d:88:a6:84:ab:b4:6f:76:ac:48:01:e8:18: fa:b6:a4:40:92:a5:d0:00:46:aa:d2:f8:f9:dd:07:dc:3b:69: 2a:79:34:89:00:c9:9e:dd:79:c8:0e:ec:84:b9:03:bf:3d:54: 88:f3:bc:01:6f:dc:21:74:bc:aa:59:0c:79:26:bb:bd:9c:0f: 38:73:57:f4:5e:ed:23:61:8b:be:82:ef:87:75:37:60:1e:87: 9b:76:16:39:24:56:a4:3d:17:65:b4:3d:22:2b:56:7a:f3:64: 24:f2:50:79:11:23:0e:5b:69:7c:7b:56:bd:45:ce:b6:d9:a8: d6:21:2a:06:49:a2:21:09:97:1d:31:0f:b6:f4:54:a5:e9:60: a7:1f:85:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBQTIxMTAvBgNVBAUTKDhFQzRFM0ZBRkQ1MDkxMjhBRUMyQzA4NzlFNkFGOTEz OUUxNUVBQjYwHhcNMjYwOTI3MDEwMjI2WhcNMjYxMDA0MDEwMjI2WjAYMRYwFAYD VQQDEw02YWI4NmIyMy00YzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmRc5dy3M8FbDdtnX7c8SC+ko9A1+lpaJYeD4U4t+lKwhsKkGr6QwT9sy1hEU t8W8nZqgalbOKB777C6ktmFvl5k4cITwgz8sCnJ/tBa+l3eI6s1L6HFb24kTQ3gw u4s6EP6MgHUeEw5yoexkrRzDSq3zJFqOwIO2PDTKaZownXqG+QMvUjIABhL3V7+m yafEYtF4VEe74/292tYl4MO3E/sj1T/hcLJRQXgECFYsvsbJyusU6bHfR8s1hzdl Zmtof8NjHZQsZTsk6p/9+445w6bH3iR+wWz02ytbVA0RAc03uJTRN9dSNbl3BH0l gQROs0DatG8c7AB4VZe7Rgzp9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6FQlNg pKP/aEyZ7UC3dyl/yQdeMB8GA1UdIwQYMBaAFI7E4/r9UJEorsLAh55q+ROeFeq2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkFBMi8zREE4QTk0NDIy QTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtTaXV3c0NIbm1yNUU1NFY2 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzVGotdjFRa1NpdXdzQ0hubXI1RTU0VjZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkFBMi8zREE4QTk0NDIyQTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtT aXV3c0NIbm1yNUU1NFY2clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXAGce47qflWqbx/4FL8FXVWam/ovFG1sYSPhdTO5Mt3CBEcifLIHX8KJl/9L 3LICjL9BKGfWfVaLMjy9yi2OMd8kFUoG1FyH357vcEZb3/kaPhUJ0BE3cyxY7fcM pDvntkP/n0jaO7Jb9AWoqs2lZ399iKaEq7RvdqxIAegY+rakQJKl0ABGqtL4+d0H 3DtpKnk0iQDJnt15yA7shLkDvz1UiPO8AW/cIXS8qlkMeSa7vZwPOHNX9F7tI2GL voLvh3U3YB6Hm3YWOSRWpD0XZbQ9IitWevNkJPJQeREjDltpfHtWvUXOttmo1iEq BkmiIQmXHTEPtvRUpelgpx+FQw== -----END CERTIFICATE-----Generated at Tue Sep 29 03:13:49 2026 by rpki-client