$ rpki-client -vvf rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft File: jsTj-v1QkSiuwsCHnmr5E54V6rY.mft (raw, json) Hash identifier: d4D4gsOVS89vW3qdzfYcf/W4nc4HHl++SL+fTlUgux4= Subject key identifier: BD:8B:2A:1E:EB:3B:69:E3:57:D0:DA:14:BD:68:CB:DA:E1:A6:15:8F Authority key identifier: 8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 Certificate issuer: /CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft Manifest number: 026D Signing time: Thu 21 Aug 2025 01:54:47 +0000 Manifest this update: Thu 21 Aug 2025 01:54:47 +0000 Manifest next update: Thu 28 Aug 2025 01:54:47 +0000 Files and hashes: 1: jsTj-v1QkSiuwsCHnmr5E54V6rY.crl (hash: TRSMyFRhlN4nOgRnvsKueZ61kyJIkOFqaoORduoKzs4=) 2: DD530B9222B111EDA3B74073C4F9AE02.roa (hash: bYO1Amr7/ABGR4G9K++l8TjNlm4b6fexGqE2t0jU2Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142AA2, serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Validity Not Before: Aug 21 01:54:47 2025 GMT Not After : Aug 28 01:54:47 2025 GMT Subject: CN=68a67c67-e927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:6d:42:a2:6d:61:3d:d1:41:d6:15:5e:d5: 4b:30:ff:c9:0e:43:e7:0c:ad:6c:a9:fe:7e:63:73: d5:2d:d5:b5:ba:b8:ce:d2:90:98:64:17:32:cc:7b: ce:c9:bb:fa:73:5e:cc:bb:04:7b:16:23:ed:51:c2: ab:96:92:1b:7a:1e:34:5a:36:9e:11:f0:c4:ab:9b: e6:40:15:e3:04:f2:1a:31:f6:85:96:69:20:37:d9: 50:4b:3f:9f:f4:16:4c:e8:12:98:50:97:65:6a:83: a9:a7:97:6b:9f:70:8c:61:cb:d3:0c:34:85:e7:a5: 60:ad:4b:fc:97:69:fe:34:8c:44:2e:0e:61:ff:48: b8:3d:d0:17:d0:a2:ec:e2:e8:db:86:09:6a:7d:d8: b0:78:28:3d:de:a8:6d:c3:6a:7b:ad:b9:5a:8f:37: 3d:e1:4d:fd:a0:aa:f3:70:02:96:2f:e7:6f:ac:66: 4f:e6:f6:71:2c:e6:d8:53:d9:52:fe:23:27:78:6e: 2e:cc:ec:0e:33:62:22:57:e5:9d:8f:c3:35:d0:b3: 20:cb:91:c3:33:dd:fb:9d:a0:08:aa:b5:a1:e1:67: 3e:e2:a7:5c:31:7d:bb:e1:2a:e1:cc:28:8f:6f:11: ba:52:38:d3:f4:b1:ec:78:b9:c7:4c:59:98:17:5e: 75:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8B:2A:1E:EB:3B:69:E3:57:D0:DA:14:BD:68:CB:DA:E1:A6:15:8F X509v3 Authority Key Identifier: keyid:8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:21:b5:e4:d0:43:5e:49:92:4f:ba:72:34:8a:48:a5:26:b8: be:7d:7e:15:36:bd:9e:31:66:e6:51:79:cb:5b:47:79:b3:fe: 57:ab:62:e0:ea:be:83:64:b7:16:72:bf:ed:81:0a:11:5f:83: e4:7c:7e:fb:02:cd:07:dc:33:34:13:6c:b6:9d:74:79:a3:3d: 08:a7:e4:7a:0f:b6:d6:ab:36:b2:e4:bf:75:fa:ac:88:90:66: ea:4c:e6:bc:4c:fb:44:e5:bd:f3:0f:28:89:a5:23:88:7b:42: 7b:bd:94:bb:59:2c:e1:c7:af:d3:5d:22:1f:52:84:65:d5:f5: 7b:05:61:72:16:24:fe:e2:b4:ae:65:e3:f7:77:a7:1c:a1:cb: 8a:81:a4:36:b5:bf:26:55:83:28:af:20:a4:05:a1:5f:aa:97: 45:7d:d0:d0:81:f6:c6:04:c0:d8:8e:18:1b:18:71:9a:cd:2f: 1d:4f:ee:f5:87:9e:c6:11:b1:d4:11:5b:c8:75:63:8f:e3:c1: 30:43:25:02:40:08:93:6d:2b:c2:c4:11:df:08:bb:92:33:fa: 9f:bf:31:06:a9:b0:73:1f:13:1b:a6:59:51:f7:a6:70:61:96: 80:c1:8d:10:17:28:7f:d9:ee:a3:72:75:28:67:e4:ac:50:2f: d4:88:28:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBQTIxMTAvBgNVBAUTKDhFQzRFM0ZBRkQ1MDkxMjhBRUMyQzA4NzlFNkFGOTEz OUUxNUVBQjYwHhcNMjUwODIxMDE1NDQ3WhcNMjUwODI4MDE1NDQ3WjAYMRYwFAYD VQQDEw02OGE2N2M2Ny1lOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv9tQqJtYT3RQdYVXtVLMP/JDkPnDK1sqf5+Y3PVLdW1urjO0pCYZBcyzHvO ybv6c17MuwR7FiPtUcKrlpIbeh40WjaeEfDEq5vmQBXjBPIaMfaFlmkgN9lQSz+f 9BZM6BKYUJdlaoOpp5drn3CMYcvTDDSF56VgrUv8l2n+NIxELg5h/0i4PdAX0KLs 4ujbhglqfdiweCg93qhtw2p7rblajzc94U39oKrzcAKWL+dvrGZP5vZxLObYU9lS /iMneG4uzOwOM2IiV+Wdj8M10LMgy5HDM937naAIqrWh4Wc+4qdcMX274SrhzCiP bxG6UjjT9LHseLnHTFmYF151ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2LKh7r O2njV9DaFL1oy9rhphWPMB8GA1UdIwQYMBaAFI7E4/r9UJEorsLAh55q+ROeFeq2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkFBMi8zREE4QTk0NDIy QTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtTaXV3c0NIbm1yNUU1NFY2 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzVGotdjFRa1NpdXdzQ0hubXI1RTU0VjZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkFBMi8zREE4QTk0NDIyQTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtT aXV3c0NIbm1yNUU1NFY2clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaIbXk0ENeSZJPunI0ikilJri+fX4VNr2eMWbmUXnLW0d5s/5Xq2Lg 6r6DZLcWcr/tgQoRX4PkfH77As0H3DM0E2y2nXR5oz0Ip+R6D7bWqzay5L91+qyI kGbqTOa8TPtE5b3zDyiJpSOIe0J7vZS7WSzhx6/TXSIfUoRl1fV7BWFyFiT+4rSu ZeP3d6ccocuKgaQ2tb8mVYMoryCkBaFfqpdFfdDQgfbGBMDYjhgbGHGazS8dT+71 h57GEbHUEVvIdWOP48EwQyUCQAiTbSvCxBHfCLuSM/qfvzEGqbBzHxMbpllR96Zw YZaAwY0QFyh/2e6jcnUoZ+SsUC/UiCjm -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:52 2025 by rpki-client