$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: oEZTGHw3uhpcxg93HmSOdZC26nliCnbZI1WlNPNtgUk= Subject key identifier: DE:9A:07:C7:C0:52:DA:0F:E9:23:34:B8:A6:16:9A:60:A1:79:F2:33 Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 0544 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 052D Signing time: Tue 12 May 2026 23:40:17 +0000 Manifest this update: Tue 12 May 2026 23:40:17 +0000 Manifest next update: Tue 19 May 2026 23:40:17 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: UZJfit7m1z9ntPsZ0NPK9q9sJ8td2VqNuEVPlQ8qoOM=) 2: C7C191A0D7D911F0BE4EFACC9BD3641D.roa (hash: sqcrt85hjI/CWb6Tl9YpgII8XhmMaCxThxd4ltFmZn8=) 3: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: QJFt+Fh28ycFA2bY3p/1aFUcMAQ/zsdWuppebsHA2m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1348 (0x544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: May 12 23:40:17 2026 GMT Not After : May 19 23:40:17 2026 GMT Subject: CN=6a03ba61-7fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:23:61:c2:b5:5d:4a:6b:64:17:c9:4b:8c: 18:a1:f8:9f:73:dd:a6:25:f6:22:cf:df:20:a6:fc: 3a:ec:bf:8e:50:79:d9:43:05:a8:c2:e5:f6:c0:7b: a8:ff:16:d3:53:86:be:3f:65:c2:b5:29:56:0a:8d: fb:a3:d8:ee:f1:a0:02:80:13:f2:4a:0e:ab:02:49: 69:d9:55:0e:2e:d8:38:3d:62:a2:90:04:e5:b5:91: 48:c2:a5:2a:df:54:5b:7c:26:47:dd:a6:b2:32:45: d4:f9:af:38:f7:04:fa:44:bf:1b:41:66:fc:dc:ea: d3:fb:c0:19:23:98:74:e1:f3:e3:77:10:03:c8:2b: 28:9d:24:ed:8a:4c:c7:67:a7:c1:2f:24:6e:b3:9d: e1:2e:7c:2c:41:1f:d8:ed:b9:46:2f:4e:eb:ef:d4: 02:87:d5:c9:0c:d0:fd:91:41:2c:d6:8e:e8:6f:10: ab:d1:8d:c6:52:c1:b6:8c:c0:4a:f1:40:e5:13:05: 70:51:b9:87:7f:26:ed:0a:5e:5c:21:a2:cc:ff:1e: 2e:de:b8:38:d7:79:49:bc:86:f9:87:b2:8b:98:e0: 7b:b2:d7:a5:7a:3d:0b:58:e8:96:64:84:7c:bb:a0: 7c:84:20:87:e2:02:40:0b:61:01:c3:7e:4b:81:3f: f2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9A:07:C7:C0:52:DA:0F:E9:23:34:B8:A6:16:9A:60:A1:79:F2:33 X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3a:4e:38:5e:05:c9:95:d6:de:3a:b6:03:d2:0c:c0:b8:28: fa:8f:a0:0d:9c:9e:65:6c:f0:ff:c3:5c:88:a8:19:d3:9d:10: 75:8d:49:c6:91:3c:a1:1e:9b:d1:03:96:67:f3:fe:50:96:f5: ab:b6:62:fe:30:af:e9:e7:cd:39:83:42:dd:73:3e:46:df:0e: 0c:4f:e4:52:21:85:7f:ca:da:39:43:c9:9e:77:78:ed:d5:69: 8d:34:64:60:21:a5:24:68:17:48:fe:19:c4:08:e6:f3:02:5e: 52:0c:74:8e:89:4a:ae:ee:42:d0:58:46:72:5f:b0:fa:05:5d: 5b:22:59:6e:f5:49:35:25:cc:e4:a5:b9:02:47:99:e1:73:73: 86:f8:b4:3a:ac:5b:8b:ef:f3:b3:9d:43:72:7d:23:c1:48:93: b7:f2:3e:02:0e:aa:b1:15:80:b6:a6:1e:aa:00:10:43:f3:93: ae:eb:b0:c6:75:7c:30:23:3a:13:b4:5a:35:79:8f:99:81:7d: 57:91:e4:fa:d7:83:65:42:ff:8d:03:f3:5a:2c:38:cc:9c:45: 4f:08:47:2f:3e:51:cd:68:03:5a:fa:a9:44:45:44:23:78:3e: 3e:d6:c3:83:75:79:49:35:3b:7d:14:c8:82:6d:6b:ef:a6:14: a5:09:4b:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjYwNTEyMjM0MDE3WhcNMjYwNTE5MjM0MDE3WjAYMRYwFAYD VQQDEw02YTAzYmE2MS03ZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8UjYcK1XUprZBfJS4wYofifc92mJfYiz98gpvw67L+OUHnZQwWowuX2wHuo /xbTU4a+P2XCtSlWCo37o9ju8aACgBPySg6rAklp2VUOLtg4PWKikATltZFIwqUq 31RbfCZH3aayMkXU+a849wT6RL8bQWb83OrT+8AZI5h04fPjdxADyCsonSTtikzH Z6fBLyRus53hLnwsQR/Y7blGL07r79QCh9XJDND9kUEs1o7obxCr0Y3GUsG2jMBK 8UDlEwVwUbmHfybtCl5cIaLM/x4u3rg413lJvIb5h7KLmOB7stelej0LWOiWZIR8 u6B8hCCH4gJAC2EBw35LgT/ytQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6aB8fA UtoP6SM0uKYWmmChefIzMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABTpOOF4FyZXW3jq2A9IMwLgo+o+gDZyeZWzw/8NciKgZ050QdY1JxpE8oR6b 0QOWZ/P+UJb1q7Zi/jCv6efNOYNC3XM+Rt8ODE/kUiGFf8raOUPJnnd47dVpjTRk YCGlJGgXSP4ZxAjm8wJeUgx0jolKru5C0FhGcl+w+gVdWyJZbvVJNSXM5KW5AkeZ 4XNzhvi0Oqxbi+/zs51Dcn0jwUiTt/I+Ag6qsRWAtqYeqgAQQ/OTruuwxnV8MCM6 E7RaNXmPmYF9V5Hk+teDZUL/jQPzWiw4zJxFTwhHLz5RzWgDWvqpREVEI3g+PtbD g3V5STU7fRTIgm1r76YUpQlLLA== -----END CERTIFICATE-----Generated at Wed May 13 04:59:43 2026 by rpki-client