
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft
File: jsTj-v1QkSiuwsCHnmr5E54V6rY.mft (raw, json)
Hash identifier: 18Yrq7iga3lIFN6tQQnOfnMoGwmb4h2yjPIpvoX1D5Y=
Subject key identifier: 05:31:FF:8E:47:C0:E3:B6:C9:46:6B:E7:F0:86:86:85:4D:7B:2B:0A
Authority key identifier: 8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6
Certificate issuer: /CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6
Certificate serial: 02D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft
Manifest number: 02CD
Signing time: Thu 19 Feb 2026 00:33:57 +0000
Manifest this update: Thu 19 Feb 2026 00:33:56 +0000
Manifest next update: Thu 26 Feb 2026 00:33:56 +0000
Files and hashes: 1: jsTj-v1QkSiuwsCHnmr5E54V6rY.crl (hash: YWg83K9rM67IBvaHHwRMtLpIEg6XMcsPzOOwXIO0iBc=)
2: DD530B9222B111EDA3B74073C4F9AE02.roa (hash: owVanRgHUtoRiDS2HINRQVtgLyXjWCaqklfdrs5fqho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl
rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142AA2, serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6
Validity
Not Before: Feb 19 00:33:56 2026 GMT
Not After : Feb 26 00:33:56 2026 GMT
Subject: CN=69965a75-c5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:0c:02:1f:a4:9d:bb:89:0f:03:37:13:38:
04:86:27:39:ee:33:49:6e:65:ca:b9:71:ed:70:d9:
96:20:05:a8:55:ce:da:6a:58:41:e0:3b:5a:b5:48:
7f:3b:a5:11:94:09:e7:be:14:0b:c7:10:40:16:76:
f1:3f:b5:06:42:62:da:f1:83:55:41:ea:d8:3c:82:
e7:88:46:ca:12:84:ac:07:24:d8:15:00:a9:7b:a8:
8d:36:bc:f1:b6:f4:63:35:53:45:f6:20:1c:16:6c:
2d:b7:c2:08:b2:f0:4f:f1:ac:5d:a4:d8:c2:78:7c:
ef:d5:d7:c5:e5:4f:d9:7d:cb:1f:44:f3:95:64:c4:
4f:6d:39:5b:2b:28:02:46:4d:6c:ae:be:c6:8c:4f:
7f:1c:67:ab:92:92:57:00:a0:e2:77:f5:59:26:c0:
ec:41:69:d6:49:64:86:77:97:0e:c3:12:d0:dc:ea:
da:0c:d3:a1:d4:c0:39:65:0e:9a:79:f8:43:34:86:
3a:bf:40:ba:0f:36:84:03:c4:b9:88:16:b6:3c:0a:
2b:c4:3b:7a:79:1e:77:ca:0b:96:ac:d4:06:70:40:
c3:c1:32:c3:5d:98:2c:3c:ce:9f:fb:78:0b:f5:68:
f4:a4:3f:4c:af:99:5d:4e:c9:36:1c:45:22:7a:7a:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:31:FF:8E:47:C0:E3:B6:C9:46:6B:E7:F0:86:86:85:4D:7B:2B:0A
X509v3 Authority Key Identifier:
keyid:8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:74:63:45:75:c9:e5:f6:26:48:24:0e:60:4e:52:97:e5:57:
d5:f9:64:ee:95:68:b1:0a:e4:90:24:cc:d2:f1:d4:38:a5:e3:
d5:df:31:33:b9:a7:d7:99:79:96:43:0e:b5:a1:97:ab:8f:47:
8a:7c:95:8a:8d:2d:25:a3:b5:11:16:aa:a3:20:48:c8:9c:34:
71:cd:5c:f7:a4:8a:80:c9:f5:d7:67:2e:67:78:ac:01:22:0e:
bd:7b:5e:c4:36:da:71:2e:7a:7a:b3:22:5a:37:2c:02:8f:09:
99:aa:88:fe:cd:2e:45:0d:58:49:76:ef:80:ad:a3:2b:06:71:
c9:e0:36:bd:d5:ed:3e:29:ce:40:91:96:3a:a1:c5:cb:23:be:
63:60:61:06:3e:7e:e6:ea:19:70:10:c5:9e:31:1f:01:71:7e:
09:9b:fc:a8:c8:db:fd:33:70:de:22:c1:4a:64:3f:0e:d7:51:
4b:99:37:37:ea:55:b9:8a:00:4a:c1:0f:19:d4:7d:f3:f7:55:
4f:d2:39:96:b9:7d:f8:dc:07:7a:87:08:39:23:f3:94:f4:00:
38:30:3e:dc:00:c7:9e:29:d4:e1:a5:89:16:35:f0:e0:af:14:
09:b7:74:f5:8f:d0:bb:c1:e1:6f:76:06:3e:53:29:11:d8:97:
e4:84:a3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:16:04 2026 by rpki-client