$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft File: jsTj-v1QkSiuwsCHnmr5E54V6rY.mft (raw, json) Hash identifier: nkqxP3zhQ7R5HYyAgFOjj29s/DuSUbeW3kCp2KcIVCQ= Subject key identifier: BA:A1:39:62:95:0A:D3:14:F5:30:24:AB:55:59:F6:67:8E:1B:2A:4F Authority key identifier: 8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 Certificate issuer: /CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Certificate serial: 0347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft Manifest number: 033F Signing time: Fri 25 Sep 2026 00:48:23 +0000 Manifest this update: Fri 25 Sep 2026 00:48:22 +0000 Manifest next update: Fri 02 Oct 2026 00:48:22 +0000 Files and hashes: 1: jsTj-v1QkSiuwsCHnmr5E54V6rY.crl (hash: M+9qFldEk9Waunl8Xqd9MiE9d26u/YqJgEFQfuK7sus=) 2: DD530B9222B111EDA3B74073C4F9AE02.roa (hash: R54akjGxTnzxhQ5eWup+gnTX3b1EgVjuqEvhFW0utCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 839 (0x347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142AA2, serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Validity Not Before: Sep 25 00:48:22 2026 GMT Not After : Oct 2 00:48:22 2026 GMT Subject: CN=6ab5c4d6-6f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:24:fa:89:74:e6:e8:54:2b:65:50:1c:9e: 60:7c:73:90:e7:4c:ec:34:8a:1c:3e:18:44:39:aa: 96:5e:d0:ef:8e:19:be:56:17:d0:bf:d0:f0:20:89: 40:79:09:5f:e5:0c:14:9b:bb:48:3b:89:a3:3a:f3: 96:4c:17:5a:b0:19:97:4f:93:cc:2e:5a:d1:2e:35: b3:7a:cb:8c:8a:3d:70:17:05:56:ae:cf:88:d8:de: 88:a7:f6:59:00:7f:45:e9:ed:2d:d2:3f:fb:a6:1c: f7:22:f3:39:c5:e0:82:fc:4b:8d:43:a7:07:e6:e9: 64:35:fe:2e:44:42:96:10:a3:6a:bb:48:28:9e:35: 58:d4:ce:b4:ad:d0:25:35:f0:af:f6:ee:5a:66:61: bd:83:a1:3d:87:b2:76:47:15:e4:5d:a7:4e:58:da: 7e:93:72:92:00:d8:7b:34:f4:37:03:0a:a7:0e:d5: 92:df:57:30:3e:74:e0:fd:a7:00:59:f4:e0:56:ed: 6c:79:f3:9e:fb:8f:d4:b4:79:27:26:05:94:7c:02: b8:6d:53:15:93:2c:34:7a:4a:42:da:99:1b:b0:95: 60:7b:e2:c5:fa:99:a0:b0:39:eb:c7:83:0d:6e:e1: ae:5b:93:4a:b4:e7:28:fd:f6:42:38:94:86:43:f2: 76:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A1:39:62:95:0A:D3:14:F5:30:24:AB:55:59:F6:67:8E:1B:2A:4F X509v3 Authority Key Identifier: keyid:8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b2:5c:a5:62:0e:3b:e6:c2:8c:81:7a:5e:cc:41:39:e1:43: e8:da:ec:c8:bf:a2:6d:84:e7:95:ae:25:94:38:ad:b8:c2:67: 06:b3:3c:79:96:44:c7:3f:b4:80:71:61:bd:5d:38:1a:77:6d: 69:0e:9b:f7:12:60:23:c1:62:e2:78:d1:bd:e5:47:eb:87:c6: a3:d9:50:39:30:bd:1d:3e:58:c2:c1:1c:bd:e4:bb:f1:0d:fc: 97:1d:b7:7d:ae:e1:e4:6e:f1:4c:be:1b:31:8d:0f:bb:d5:30: ee:98:bd:1f:64:fb:74:08:f0:4a:5d:3a:75:bd:8d:3d:88:b7: 54:4b:61:88:58:20:07:13:9a:22:4d:76:7d:d0:2d:e2:b5:2a: 23:62:d7:83:f4:fe:d1:91:2a:bd:d9:f1:c7:71:0f:4f:07:4b: 28:f7:f3:b0:d5:60:e7:b2:5c:2e:6e:a7:6b:3a:02:ee:81:f2: 0d:63:6c:03:17:15:92:92:52:57:b5:6f:65:7c:1f:8f:aa:fd: 15:26:9a:09:60:a7:8c:ab:e3:0a:6d:22:96:90:7f:16:74:77: 8c:61:ac:20:58:0e:08:0b:33:e8:cb:09:2c:93:6a:31:2f:2e: 8b:9c:db:e4:62:5b:32:f4:77:ab:f7:eb:98:bf:35:5a:4e:c0: aa:6d:f4:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBQTIxMTAvBgNVBAUTKDhFQzRFM0ZBRkQ1MDkxMjhBRUMyQzA4NzlFNkFGOTEz OUUxNUVBQjYwHhcNMjYwOTI1MDA0ODIyWhcNMjYxMDAyMDA0ODIyWjAYMRYwFAYD VQQDEw02YWI1YzRkNi02ZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfsk+ol05uhUK2VQHJ5gfHOQ50zsNIocPhhEOaqWXtDvjhm+VhfQv9DwIIlA eQlf5QwUm7tIO4mjOvOWTBdasBmXT5PMLlrRLjWzesuMij1wFwVWrs+I2N6Ip/ZZ AH9F6e0t0j/7phz3IvM5xeCC/EuNQ6cH5ulkNf4uREKWEKNqu0gonjVY1M60rdAl NfCv9u5aZmG9g6E9h7J2RxXkXadOWNp+k3KSANh7NPQ3AwqnDtWS31cwPnTg/acA WfTgVu1sefOe+4/UtHknJgWUfAK4bVMVkyw0ekpC2pkbsJVge+LF+pmgsDnrx4MN buGuW5NKtOco/fZCOJSGQ/J2lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqhOWKV CtMU9TAkq1VZ9meOGypPMB8GA1UdIwQYMBaAFI7E4/r9UJEorsLAh55q+ROeFeq2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkFBMi8zREE4QTk0NDIy QTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtTaXV3c0NIbm1yNUU1NFY2 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzVGotdjFRa1NpdXdzQ0hubXI1RTU0VjZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkFBMi8zREE4QTk0NDIyQTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtT aXV3c0NIbm1yNUU1NFY2clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL7JcpWIOO+bCjIF6XsxBOeFD6NrsyL+ibYTnla4llDituMJnBrM8eZZExz+0 gHFhvV04GndtaQ6b9xJgI8Fi4njRveVH64fGo9lQOTC9HT5YwsEcveS78Q38lx23 fa7h5G7xTL4bMY0Pu9Uw7pi9H2T7dAjwSl06db2NPYi3VEthiFggBxOaIk12fdAt 4rUqI2LXg/T+0ZEqvdnxx3EPTwdLKPfzsNVg57JcLm6nazoC7oHyDWNsAxcVkpJS V7VvZXwfj6r9FSaaCWCnjKvjCm0ilpB/FnR3jGGsIFgOCAsz6MsJLJNqMS8ui5zb 5GJbMvR3q/frmL81Wk7Aqm30iA== -----END CERTIFICATE-----Generated at Sun Sep 27 00:35:41 2026 by rpki-client