$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: vFFHfmkt9xHb1PXJ2e8Pm4w2m0iPsakCAaRYoL9Ifrg= Subject key identifier: 28:76:C0:23:5F:02:1B:A6:3A:8B:44:94:95:D0:1D:D8:E4:9F:05:3E Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 052B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 0514 Signing time: Tue 24 Mar 2026 23:19:48 +0000 Manifest this update: Tue 24 Mar 2026 23:19:47 +0000 Manifest next update: Tue 31 Mar 2026 23:19:47 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: ulYYCHzBFhic+2TMj+hPbliy4XzUNiPqMXYl9fypZ+o=) 2: C7C191A0D7D911F0BE4EFACC9BD3641D.roa (hash: sqcrt85hjI/CWb6Tl9YpgII8XhmMaCxThxd4ltFmZn8=) 3: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: QJFt+Fh28ycFA2bY3p/1aFUcMAQ/zsdWuppebsHA2m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1323 (0x52b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Mar 24 23:19:47 2026 GMT Not After : Mar 31 23:19:47 2026 GMT Subject: CN=69c31c13-d559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:6b:8c:38:28:69:61:dc:3d:b5:01:31:a6: a2:b2:7d:6d:4f:67:d3:ae:f1:29:27:9b:5c:11:7a: 20:c4:86:1d:45:4c:82:6a:25:b9:2b:d5:d7:c3:61: dc:ca:3e:0b:d5:86:24:bd:13:81:26:4b:b4:c6:d1: 16:7a:4b:54:c5:ff:a4:da:b5:be:b9:c5:d2:c6:d8: ef:78:e6:1e:33:d0:15:20:e6:1f:3a:e7:82:87:62: c8:ed:7f:01:ac:da:3b:bb:af:dd:3b:e4:4b:8e:6d: 28:2a:ad:50:22:7e:b8:f8:71:3b:49:94:17:bb:1e: 60:03:55:14:25:dc:aa:f1:64:59:f9:28:c5:8b:e6: 17:1f:7d:89:e3:eb:30:f6:5a:f0:eb:62:b1:81:94: b2:9e:c4:7e:85:ec:99:36:96:d0:69:7a:98:e9:5a: 1b:b2:3c:1b:9b:e5:2b:7d:15:1c:d8:e5:2c:70:a1: 25:4d:a5:51:30:d2:af:b5:a3:b1:4c:ea:8a:29:a6: 07:57:48:46:b3:ae:bc:c5:f7:3f:d9:ad:64:52:61: 4c:05:55:3a:bb:32:e6:65:3a:d5:8e:24:66:95:a1: 84:3e:3c:6f:0b:da:02:aa:f2:19:9b:47:16:51:d7: 6c:48:61:cb:c0:e8:9a:af:ab:fc:f4:ea:6e:62:c2: 34:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:76:C0:23:5F:02:1B:A6:3A:8B:44:94:95:D0:1D:D8:E4:9F:05:3E X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:88:39:dd:3a:34:4c:4b:a1:4b:b8:7e:ce:2a:f1:3e:0c:54: 9a:09:99:89:a3:11:25:a7:77:a6:74:2e:58:8e:95:eb:b3:07: 0a:88:f7:7d:8e:ae:51:fe:e7:dc:87:d5:e4:14:0a:bf:db:85: ef:0f:29:ec:38:09:cb:38:f9:c1:77:9e:83:8c:93:d3:e6:47: a7:03:78:66:8d:1c:05:8f:63:8f:a3:d1:4f:f6:0a:6c:8f:e3: df:ba:1d:a0:e0:29:be:2b:64:93:72:b5:bb:23:a3:21:02:43: 29:d5:e1:10:12:31:e1:93:fd:7f:66:c5:ee:04:1c:3a:3d:6e: 26:f4:14:f2:dd:98:06:15:02:f3:68:00:5c:18:2b:a0:c3:5b: 4f:b8:34:89:a3:b4:02:7a:5b:e4:d5:ef:8e:d9:bb:05:35:30: 7b:e1:90:63:dc:5a:2f:36:50:d3:de:85:33:a6:e1:17:af:e5: 9f:dd:0a:6c:cc:56:f6:66:19:54:fa:a3:d5:ef:c2:81:77:80: 8b:31:9c:41:bf:3e:04:46:cd:a4:8d:2a:33:a6:71:24:2c:b1: a3:c7:5a:b7:07:ad:f1:58:f8:50:7b:8b:ea:e4:23:46:eb:b7: 4f:eb:f6:ab:7a:18:81:ff:8f:c9:f9:ac:4f:f7:35:79:69:8e: cd:42:d6:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjYwMzI0MjMxOTQ3WhcNMjYwMzMxMjMxOTQ3WjAYMRYwFAYD VQQDEw02OWMzMWMxMy1kNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpprjDgoaWHcPbUBMaaisn1tT2fTrvEpJ5tcEXogxIYdRUyCaiW5K9XXw2Hc yj4L1YYkvROBJku0xtEWektUxf+k2rW+ucXSxtjveOYeM9AVIOYfOueCh2LI7X8B rNo7u6/dO+RLjm0oKq1QIn64+HE7SZQXux5gA1UUJdyq8WRZ+SjFi+YXH32J4+sw 9lrw62KxgZSynsR+heyZNpbQaXqY6Vobsjwbm+UrfRUc2OUscKElTaVRMNKvtaOx TOqKKaYHV0hGs668xfc/2a1kUmFMBVU6uzLmZTrVjiRmlaGEPjxvC9oCqvIZm0cW UddsSGHLwOiar6v89OpuYsI0nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCh2wCNf AhumOotElJXQHdjknwU+MB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiIg53To0TEuhS7h+zirxPgxUmgmZiaMRJad3pnQuWI6V67MHCoj3fY6uUf7n 3IfV5BQKv9uF7w8p7DgJyzj5wXeeg4yT0+ZHpwN4Zo0cBY9jj6PRT/YKbI/j37od oOApvitkk3K1uyOjIQJDKdXhEBIx4ZP9f2bF7gQcOj1uJvQU8t2YBhUC82gAXBgr oMNbT7g0iaO0Anpb5NXvjtm7BTUwe+GQY9xaLzZQ096FM6bhF6/ln90KbMxW9mYZ VPqj1e/CgXeAizGcQb8+BEbNpI0qM6ZxJCyxo8datwet8Vj4UHuL6uQjRuu3T+v2 q3oYgf+PyfmsT/c1eWmOzULW4w== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:15 2026 by rpki-client