$ rpki-client -vvf rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft File: jsTj-v1QkSiuwsCHnmr5E54V6rY.mft (raw, json) Hash identifier: doVVJYIdoaRI9OLisS82GFdfC1TEkC+HuU2liHZRPOo= Subject key identifier: 0A:2E:FF:38:E3:C1:DF:F0:DC:59:38:24:99:0C:2C:06:D9:45:0D:23 Authority key identifier: 8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 Certificate issuer: /CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft Manifest number: 032C Signing time: Wed 19 Aug 2026 01:26:07 +0000 Manifest this update: Wed 19 Aug 2026 01:26:07 +0000 Manifest next update: Wed 26 Aug 2026 01:26:07 +0000 Files and hashes: 1: jsTj-v1QkSiuwsCHnmr5E54V6rY.crl (hash: e+UZpcf7I5rJAXCyXws8PDnJ53RI0vzqlLa9J1h4fNI=) 2: DD530B9222B111EDA3B74073C4F9AE02.roa (hash: R54akjGxTnzxhQ5eWup+gnTX3b1EgVjuqEvhFW0utCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 01:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142AA2, serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Validity Not Before: Aug 19 01:26:07 2026 GMT Not After : Aug 26 01:26:07 2026 GMT Subject: CN=6a85062f-3232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:b3:d1:31:81:e3:c5:9c:c2:d1:00:62:78: 34:0e:6d:d5:45:48:44:6a:5d:ab:ca:ae:3f:2d:f7: 94:62:c5:e3:83:a1:37:85:77:6a:c0:bd:26:98:ba: df:36:36:46:fb:a9:ce:56:35:db:f7:f1:27:71:a7: b5:98:ea:5e:f0:1e:4d:a5:75:40:50:ee:fb:4b:85: b9:6c:e5:45:8e:bd:ff:d6:6d:a0:aa:de:1f:7c:86: 50:92:bd:c9:20:cf:39:34:8e:de:3b:09:21:00:3b: d9:a7:9d:68:ca:82:40:22:c4:0d:96:b4:51:55:b2: 05:5c:6d:d2:93:68:9c:46:16:a7:87:fb:6e:ba:8f: 57:0a:fe:b5:8d:9c:5a:c4:f2:f9:f6:5b:19:82:04: d4:36:d0:84:f3:00:90:81:89:4a:a9:68:f9:0d:ae: 92:86:ed:79:9e:61:bf:a8:83:05:05:1e:91:d7:66: ec:ca:24:63:93:eb:72:dc:b6:a1:8f:17:ec:e9:bd: 7f:07:08:2b:49:20:2f:6a:fb:74:1f:03:53:0e:86: 9e:6f:88:0e:8c:6f:f9:79:31:bd:e8:35:d9:4a:f3: e6:98:de:5f:35:77:a5:92:bf:e3:ad:89:f0:48:08: f3:76:7c:c1:76:a6:0f:db:be:3f:9c:84:a8:98:54: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2E:FF:38:E3:C1:DF:F0:DC:59:38:24:99:0C:2C:06:D9:45:0D:23 X509v3 Authority Key Identifier: keyid:8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:a6:85:31:79:5f:35:64:57:25:02:21:b1:12:42:54:d9:e2: 86:19:33:2d:0d:d8:fe:67:a4:81:90:e8:c0:e4:12:30:9f:85: 10:7d:a7:b0:c3:af:7b:5d:81:d9:36:6b:1c:7f:ff:b6:56:de: c9:22:32:eb:12:5f:04:6e:52:52:6c:81:ee:b6:e0:f5:b7:71: 9d:be:0e:4c:68:da:d6:5f:ff:a2:9b:ed:bf:4c:95:69:e6:c0: 61:32:c1:d0:09:21:f6:83:eb:24:86:3b:cb:96:a6:24:f2:28: b9:e7:39:16:12:d8:d5:9a:86:a0:55:a2:d6:c0:42:0f:44:8a: 77:22:a2:69:44:8a:a3:78:ed:49:ad:7f:e6:3d:a9:02:1e:45: d8:4d:b3:c4:87:b5:c2:bf:c6:f5:d4:f0:f6:9d:b8:28:ec:04: 0b:72:2f:d1:03:54:eb:36:af:37:ee:1d:f8:ba:47:ab:66:c6: 45:88:f7:05:2d:47:f7:c9:54:d2:5c:aa:fc:fa:b3:90:97:cf: 0b:23:22:1e:8c:1d:2f:d0:85:41:99:a1:dc:24:c4:f9:c3:65: 81:e7:7a:f8:d4:e9:af:76:90:08:69:aa:20:16:0c:08:fe:f7: 97:ed:20:ec:11:1f:74:79:34:62:07:59:6f:99:63:34:8f:4c: 34:7f:69:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBQTIxMTAvBgNVBAUTKDhFQzRFM0ZBRkQ1MDkxMjhBRUMyQzA4NzlFNkFGOTEz OUUxNUVBQjYwHhcNMjYwODE5MDEyNjA3WhcNMjYwODI2MDEyNjA3WjAYMRYwFAYD VQQDEw02YTg1MDYyZi0zMjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtM2z0TGB48WcwtEAYng0Dm3VRUhEal2ryq4/LfeUYsXjg6E3hXdqwL0mmLrf NjZG+6nOVjXb9/Encae1mOpe8B5NpXVAUO77S4W5bOVFjr3/1m2gqt4ffIZQkr3J IM85NI7eOwkhADvZp51oyoJAIsQNlrRRVbIFXG3Sk2icRhanh/tuuo9XCv61jZxa xPL59lsZggTUNtCE8wCQgYlKqWj5Da6Shu15nmG/qIMFBR6R12bsyiRjk+ty3Lah jxfs6b1/BwgrSSAvavt0HwNTDoaeb4gOjG/5eTG96DXZSvPmmN5fNXelkr/jrYnw SAjzdnzBdqYP274/nISomFT0XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAou/zjj wd/w3Fk4JJkMLAbZRQ0jMB8GA1UdIwQYMBaAFI7E4/r9UJEorsLAh55q+ROeFeq2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkFBMi8zREE4QTk0NDIy QTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtTaXV3c0NIbm1yNUU1NFY2 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzVGotdjFRa1NpdXdzQ0hubXI1RTU0VjZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkFBMi8zREE4QTk0NDIyQTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtT aXV3c0NIbm1yNUU1NFY2clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvaaFMXlfNWRXJQIhsRJCVNnihhkzLQ3Y/mekgZDowOQSMJ+FEH2nsMOve12B 2TZrHH//tlbeySIy6xJfBG5SUmyB7rbg9bdxnb4OTGja1l//opvtv0yVaebAYTLB 0Akh9oPrJIY7y5amJPIouec5FhLY1ZqGoFWi1sBCD0SKdyKiaUSKo3jtSa1/5j2p Ah5F2E2zxIe1wr/G9dTw9p24KOwEC3Iv0QNU6zavN+4d+LpHq2bGRYj3BS1H98lU 0lyq/PqzkJfPCyMiHowdL9CFQZmh3CTE+cNlged6+NTpr3aQCGmqIBYMCP73l+0g 7BEfdHk0YgdZb5ljNI9MNH9pWg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:00 2026 by rpki-client