$ rpki-client -vvf rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft File: jsTj-v1QkSiuwsCHnmr5E54V6rY.mft (raw, json) Hash identifier: z3aJb+r6G68h2yMELwcafow8wlYw0vzHVIG0rC2CZ2Q= Subject key identifier: F8:51:A0:B6:0E:0A:BB:35:26:61:4A:C8:34:D7:D3:25:28:2E:0D:79 Authority key identifier: 8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 Certificate issuer: /CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft Manifest number: 028D Signing time: Sun 19 Oct 2025 03:48:07 +0000 Manifest this update: Sun 19 Oct 2025 03:48:06 +0000 Manifest next update: Sun 26 Oct 2025 03:48:06 +0000 Files and hashes: 1: jsTj-v1QkSiuwsCHnmr5E54V6rY.crl (hash: 9KrR1ymLyS98S+BoYDZ2Ca+tRxJWYP0S9I6jqWPifWU=) 2: DD530B9222B111EDA3B74073C4F9AE02.roa (hash: caiPqFBT56PFVGqwt7KrkmELhW0jd+zU9JbUXBLl7o4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142AA2, serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Validity Not Before: Oct 19 03:48:06 2025 GMT Not After : Oct 26 03:48:06 2025 GMT Subject: CN=68f45f77-cb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:8b:44:6f:79:e6:03:84:c8:c3:04:1c:54:51: eb:7a:56:8e:ba:80:5c:14:28:03:e1:30:3d:2f:75: 76:5f:63:cc:94:38:28:26:6a:b5:96:35:df:15:52: a9:42:64:12:82:cc:fd:57:ba:c1:57:e8:88:19:35: 0e:5b:3a:d1:7b:90:ee:76:ef:ea:05:16:b3:af:74: 5e:28:32:da:17:df:45:5a:f7:f4:9c:55:de:5a:1f: f9:e8:44:1b:72:1a:42:f7:c4:5c:f0:37:92:99:9b: 26:36:ce:f2:85:37:8c:c2:ba:7c:0e:65:a1:9f:18: 8c:61:aa:84:6a:08:3a:e0:43:96:e9:9e:69:0b:97: 6b:86:a4:88:cb:33:90:95:69:f1:15:ca:54:b3:b6: 81:09:62:84:fd:37:3a:44:79:44:fb:91:b7:85:07: ff:d8:fa:b4:2f:d4:dc:3d:95:c6:48:61:ca:ed:b4: 72:97:39:68:e1:8d:c9:01:41:d5:0f:85:57:42:25: 3a:f3:bd:d4:d9:c5:c2:ab:53:3e:3a:6b:92:23:d3: 09:e1:da:92:02:f4:06:98:3d:06:46:44:f6:2f:52: 24:27:3f:c6:d5:68:95:fd:52:76:12:f3:1c:a9:5d: ca:8b:b6:69:6e:52:d6:d3:ca:a1:57:48:5b:ea:1e: cd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:51:A0:B6:0E:0A:BB:35:26:61:4A:C8:34:D7:D3:25:28:2E:0D:79 X509v3 Authority Key Identifier: keyid:8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c1:67:e1:ae:f4:07:08:d7:c7:ae:13:10:87:f4:4c:80:3e: 2d:c8:71:d7:53:57:bf:de:72:79:ab:f2:7a:c4:54:de:a5:97: 06:75:db:7f:53:09:a0:f4:6d:10:00:54:b6:0a:d3:0c:7a:2d: 30:48:b4:4f:d8:40:2b:6a:32:97:a4:c1:7f:58:fc:d0:d5:40: 49:86:49:66:b4:de:2b:53:cc:b6:52:73:0e:c3:76:b9:37:f8: 0c:47:74:8f:6f:1f:7b:b6:7a:26:e0:a2:28:c8:f2:d5:d8:ef: a2:84:b1:2a:e8:52:90:89:43:f1:a8:63:15:19:21:84:01:e5: fd:89:a5:c1:ec:68:8e:d1:05:71:ef:a5:c4:e1:0e:50:d5:86: ff:a6:5f:6b:6f:cb:bd:35:84:8c:ef:c9:f1:36:b6:24:5f:87: 9c:5d:20:e6:cb:55:d4:ed:0f:98:5c:7a:b3:d9:eb:6c:fe:fc: cb:ba:2b:dc:08:91:c9:dc:4a:8c:3b:77:44:55:82:70:9e:c2: cc:36:e6:b5:0a:27:be:59:25:a3:5b:95:c7:69:fb:f3:7e:78: bc:a1:ae:d8:e6:8c:fd:b4:c1:b0:7a:06:60:7d:42:95:f3:e5: 33:bc:fe:87:3e:ee:86:36:7c:38:b6:8b:aa:a4:8c:31:0e:22: 8b:31:c1:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBQTIxMTAvBgNVBAUTKDhFQzRFM0ZBRkQ1MDkxMjhBRUMyQzA4NzlFNkFGOTEz OUUxNUVBQjYwHhcNMjUxMDE5MDM0ODA2WhcNMjUxMDI2MDM0ODA2WjAYMRYwFAYD VQQDEw02OGY0NWY3Ny1jYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA94tEb3nmA4TIwwQcVFHrelaOuoBcFCgD4TA9L3V2X2PMlDgoJmq1ljXfFVKp QmQSgsz9V7rBV+iIGTUOWzrRe5Dudu/qBRazr3ReKDLaF99FWvf0nFXeWh/56EQb chpC98Rc8DeSmZsmNs7yhTeMwrp8DmWhnxiMYaqEagg64EOW6Z5pC5drhqSIyzOQ lWnxFcpUs7aBCWKE/Tc6RHlE+5G3hQf/2Pq0L9TcPZXGSGHK7bRylzlo4Y3JAUHV D4VXQiU6873U2cXCq1M+OmuSI9MJ4dqSAvQGmD0GRkT2L1IkJz/G1WiV/VJ2EvMc qV3Ki7ZpblLW08qhV0hb6h7NNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhRoLYO Crs1JmFKyDTX0yUoLg15MB8GA1UdIwQYMBaAFI7E4/r9UJEorsLAh55q+ROeFeq2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkFBMi8zREE4QTk0NDIy QTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtTaXV3c0NIbm1yNUU1NFY2 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzVGotdjFRa1NpdXdzQ0hubXI1RTU0VjZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkFBMi8zREE4QTk0NDIyQTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtT aXV3c0NIbm1yNUU1NFY2clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvwWfhrvQHCNfHrhMQh/RMgD4tyHHXU1e/3nJ5q/J6xFTepZcGddt/ Uwmg9G0QAFS2CtMMei0wSLRP2EArajKXpMF/WPzQ1UBJhklmtN4rU8y2UnMOw3a5 N/gMR3SPbx97tnom4KIoyPLV2O+ihLEq6FKQiUPxqGMVGSGEAeX9iaXB7GiO0QVx 76XE4Q5Q1Yb/pl9rb8u9NYSM78nxNrYkX4ecXSDmy1XU7Q+YXHqz2ets/vzLuivc CJHJ3EqMO3dEVYJwnsLMNua1Cie+WSWjW5XHafvzfni8oa7Y5oz9tMGwegZgfUKV 8+UzvP6HPu6GNnw4touqpIwxDiKLMcHu -----END CERTIFICATE-----Generated at Mon Oct 20 16:13:07 2025 by rpki-client