$ rpki-client -vvf rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft File: jsTj-v1QkSiuwsCHnmr5E54V6rY.mft (raw, json) Hash identifier: rZFgPdmihr9NH92yo0lvYyQlni/OTJ4gGPfvmb9pE3I= Subject key identifier: 04:73:B4:D0:A1:22:2E:63:FA:85:85:EE:B6:E7:66:10:79:3D:5A:A6 Authority key identifier: 8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 Certificate issuer: /CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft Manifest number: 0320 Signing time: Mon 27 Jul 2026 02:16:29 +0000 Manifest this update: Mon 27 Jul 2026 02:16:28 +0000 Manifest next update: Mon 03 Aug 2026 02:16:28 +0000 Files and hashes: 1: jsTj-v1QkSiuwsCHnmr5E54V6rY.crl (hash: EUXAhk77yXxm16h0qwMnlXxUqRQlk5KEzb3EHLWMiO0=) 2: DD530B9222B111EDA3B74073C4F9AE02.roa (hash: R54akjGxTnzxhQ5eWup+gnTX3b1EgVjuqEvhFW0utCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142AA2, serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Validity Not Before: Jul 27 02:16:28 2026 GMT Not After : Aug 3 02:16:28 2026 GMT Subject: CN=6a66bf7d-eb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:e7:24:e3:50:69:06:28:ce:26:3a:2e:90: c2:66:57:eb:33:9b:37:60:7d:0b:fd:66:23:8a:86: 63:68:d1:9d:ce:c7:90:71:56:58:a5:7d:c8:1f:30: 09:66:3e:93:5b:55:66:02:ba:46:75:17:b3:0b:92: 56:36:07:a3:1a:84:39:f7:61:b9:74:d3:29:1b:25: c9:6d:8b:f6:91:2f:14:50:a2:76:fc:5c:57:7f:58: 1e:4e:07:97:77:27:41:6d:22:5c:74:a0:62:77:91: ec:6d:79:63:58:27:4e:61:b4:fd:01:c8:ae:f0:ff: b2:27:c4:dc:ce:08:b5:27:85:7a:44:9d:7c:1a:01: 5e:f5:e1:04:bd:24:41:31:0b:ea:2e:fd:38:c7:6f: 51:f4:e5:07:9e:88:c3:3b:67:4d:9f:63:00:47:a8: a8:4d:1b:58:7d:1b:ed:50:1c:64:0b:de:ef:c8:33: ec:62:e5:93:b1:de:32:eb:ce:b7:ef:00:e2:75:98: 82:8b:b9:4f:0d:0d:db:fd:95:f8:df:5f:de:2a:a7: ca:a2:91:ce:88:f5:80:74:79:32:54:e9:66:59:d9: 5f:fb:a5:a6:7a:05:43:1d:36:a7:78:3b:ed:1d:af: 6b:ad:47:60:cf:b3:d1:cb:d1:f5:f3:c2:6e:0b:67: f9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:73:B4:D0:A1:22:2E:63:FA:85:85:EE:B6:E7:66:10:79:3D:5A:A6 X509v3 Authority Key Identifier: keyid:8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:76:4d:37:88:92:44:5e:ef:b5:ab:cc:73:76:85:a2:3e:70: c6:e8:f1:2f:a4:ec:3f:df:ca:66:9d:be:69:ff:26:63:94:bc: 51:95:01:4c:24:e5:3f:3b:bd:98:4d:15:90:1b:d9:59:da:e4: 28:44:d1:99:47:b6:9d:fc:68:e4:57:fe:51:1a:22:22:19:6c: cf:d7:13:87:ab:d6:7f:2d:dd:e6:85:27:5d:e9:64:e9:88:c8: 99:70:6b:4d:cf:cd:b8:0e:7c:69:4d:77:34:81:df:64:99:4e: fb:66:66:de:f7:85:59:0a:51:37:21:7d:79:f8:b6:c1:1b:35: 1e:5b:98:af:a5:86:97:d2:c5:9b:0a:6b:93:99:45:ca:3f:6e: 9f:41:74:ee:d0:25:23:72:7e:4c:cb:48:61:8a:52:ef:cb:48: 5b:ab:a1:b6:e4:17:ac:18:eb:93:c9:2c:45:af:7a:25:90:94: e0:7b:31:84:30:bf:10:c2:f2:b4:28:2a:a7:2d:ed:22:e4:c0: f7:82:d8:92:4c:77:df:5e:2f:4e:17:dd:49:9a:d3:09:89:8a: e7:40:68:c4:a8:9c:58:a5:ce:92:5d:bc:a6:6e:44:ab:72:55: f4:a6:ea:d6:46:53:5f:67:c2:45:a4:82:12:71:12:1d:f2:df: 1c:e1:6a:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBQTIxMTAvBgNVBAUTKDhFQzRFM0ZBRkQ1MDkxMjhBRUMyQzA4NzlFNkFGOTEz OUUxNUVBQjYwHhcNMjYwNzI3MDIxNjI4WhcNMjYwODAzMDIxNjI4WjAYMRYwFAYD VQQDEw02YTY2YmY3ZC1lYjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBrnJONQaQYoziY6LpDCZlfrM5s3YH0L/WYjioZjaNGdzseQcVZYpX3IHzAJ Zj6TW1VmArpGdRezC5JWNgejGoQ592G5dNMpGyXJbYv2kS8UUKJ2/FxXf1geTgeX dydBbSJcdKBid5HsbXljWCdOYbT9Aciu8P+yJ8Tczgi1J4V6RJ18GgFe9eEEvSRB MQvqLv04x29R9OUHnojDO2dNn2MAR6ioTRtYfRvtUBxkC97vyDPsYuWTsd4y6863 7wDidZiCi7lPDQ3b/ZX431/eKqfKopHOiPWAdHkyVOlmWdlf+6WmegVDHTaneDvt Ha9rrUdgz7PRy9H188JuC2f5+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARztNCh Ii5j+oWF7rbnZhB5PVqmMB8GA1UdIwQYMBaAFI7E4/r9UJEorsLAh55q+ROeFeq2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkFBMi8zREE4QTk0NDIy QTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtTaXV3c0NIbm1yNUU1NFY2 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzVGotdjFRa1NpdXdzQ0hubXI1RTU0VjZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkFBMi8zREE4QTk0NDIyQTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtT aXV3c0NIbm1yNUU1NFY2clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALHZNN4iSRF7vtavMc3aFoj5wxujxL6TsP9/KZp2+af8mY5S8UZUBTCTlPzu9 mE0VkBvZWdrkKETRmUe2nfxo5Ff+URoiIhlsz9cTh6vWfy3d5oUnXelk6YjImXBr Tc/NuA58aU13NIHfZJlO+2Zm3veFWQpRNyF9efi2wRs1HluYr6WGl9LFmwprk5lF yj9un0F07tAlI3J+TMtIYYpS78tIW6uhtuQXrBjrk8ksRa96JZCU4HsxhDC/EMLy tCgqpy3tIuTA94LYkkx3314vThfdSZrTCYmK50BoxKicWKXOkl28pm5Eq3JV9Kbq 1kZTX2fCRaSCEnESHfLfHOFqEw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:27:07 2026 by rpki-client