$ rpki-client -vvvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: cBfrAasmVPW1BVJgqBCRRl1nWnJax+8dXYEThpcGtj8= Subject key identifier: B5:AF:6B:FE:E0:17:65:40:F4:33:A2:12:D4:DA:A7:A8:BB:9D:12:C8 Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 058A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 0573 Signing time: Sat 26 Sep 2026 23:24:33 +0000 Manifest this update: Sat 26 Sep 2026 23:24:32 +0000 Manifest next update: Sat 03 Oct 2026 23:24:32 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: KZPUlMiLtjkxxDvGhjJr/UH8v1z+guJxPkSa2Il1/XY=) 2: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: QJFt+Fh28ycFA2bY3p/1aFUcMAQ/zsdWuppebsHA2m0=) 3: C7C191A0D7D911F0BE4EFACC9BD3641D.roa (hash: sqcrt85hjI/CWb6Tl9YpgII8XhmMaCxThxd4ltFmZn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 23:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1418 (0x58a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Sep 26 23:24:32 2026 GMT Not After : Oct 3 23:24:32 2026 GMT Subject: CN=6ab85431-6d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b2:ae:92:05:0c:c5:46:20:7e:aa:67:2e:7c: 2f:8b:91:0c:9f:59:59:e0:8f:fd:47:02:c2:35:70: a9:e1:8c:16:bc:fe:0a:ba:94:dd:e5:1f:b5:50:83: 01:b1:cf:4c:0d:ee:5b:d1:55:59:8a:e0:30:83:da: 2f:47:d5:34:29:33:bb:6c:be:d1:c4:91:5b:f7:6d: 18:23:72:78:ab:42:a7:71:98:5b:bd:0e:ab:c8:1a: bc:47:4f:d4:b7:e8:c1:39:8d:64:10:15:81:16:ca: a6:e9:1e:7b:25:db:1e:7f:52:03:7c:7d:11:7a:24: 41:77:11:cf:81:27:35:47:cc:bd:67:70:19:92:3f: 2d:e5:d3:d1:55:df:87:bc:a3:cc:55:d5:69:af:52: e3:0b:01:79:59:bf:26:b2:31:12:54:de:9c:54:34: 8e:fb:f8:7a:ee:ca:22:6b:ae:95:0e:3f:26:14:de: 29:9e:c0:55:b0:0e:1f:ee:9f:22:43:f3:17:7a:cd: 23:6f:4b:74:3e:aa:46:bb:ef:f1:8a:4f:17:97:ed: 45:db:a8:0a:72:ee:fe:3e:30:ba:40:a4:9b:24:7f: 80:e1:45:f4:e3:21:e1:5a:d4:eb:9f:89:1c:4f:7d: 3b:15:33:cf:1e:3d:aa:a6:77:bd:63:74:ef:84:03: 90:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AF:6B:FE:E0:17:65:40:F4:33:A2:12:D4:DA:A7:A8:BB:9D:12:C8 X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:7a:58:f3:7d:63:88:a9:47:1e:a9:94:76:15:52:bc:e9:17: 8f:78:04:ff:54:f7:8e:f4:38:b7:fa:90:0b:09:30:bf:93:d4: 01:d0:ca:23:5f:fb:6a:91:3f:ee:02:56:bb:4e:8b:75:56:0e: 88:8e:6e:6a:68:5f:7c:60:c6:3f:62:43:66:d8:5c:6f:cc:f0: 07:a6:35:55:f7:9a:c6:45:86:92:0b:17:dc:f4:28:70:12:6c: ec:ca:1d:a6:65:7b:43:a2:ad:bf:ac:a1:fd:11:bc:f3:95:3d: d2:d9:39:b8:3f:be:87:3b:9f:5c:6b:aa:14:c7:44:04:b9:6e: 7c:9e:a9:d1:d9:64:2d:75:93:15:3a:e4:a9:43:d4:da:ee:74: b0:23:c7:47:d5:38:bd:6c:fa:98:8d:a8:14:f1:37:0c:c5:9b: 85:9b:85:3d:31:3d:2a:b6:c9:dc:d9:3f:9f:ef:3e:3a:0d:a1: df:44:f2:bd:93:69:1f:02:78:b0:b9:d0:06:85:4d:da:c5:79: e3:d6:40:cc:bb:8f:ac:f3:fb:4c:49:6a:25:2b:dd:8d:a7:f9: 37:36:2e:64:72:cd:f3:2b:91:62:b3:4d:11:74:bd:9f:ad:06: d9:b4:44:e1:be:1e:d5:cd:42:ad:28:03:0e:35:13:e4:14:a7: f7:82:43:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjYwOTI2MjMyNDMyWhcNMjYxMDAzMjMyNDMyWjAYMRYwFAYD VQQDEw02YWI4NTQzMS02ZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi7KukgUMxUYgfqpnLnwvi5EMn1lZ4I/9RwLCNXCp4YwWvP4KupTd5R+1UIMB sc9MDe5b0VVZiuAwg9ovR9U0KTO7bL7RxJFb920YI3J4q0KncZhbvQ6ryBq8R0/U t+jBOY1kEBWBFsqm6R57Jdsef1IDfH0ReiRBdxHPgSc1R8y9Z3AZkj8t5dPRVd+H vKPMVdVpr1LjCwF5Wb8msjESVN6cVDSO+/h67soia66VDj8mFN4pnsBVsA4f7p8i Q/MXes0jb0t0PqpGu+/xik8Xl+1F26gKcu7+PjC6QKSbJH+A4UX04yHhWtTrn4kc T307FTPPHj2qpne9Y3TvhAOQ3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWva/7g F2VA9DOiEtTap6i7nRLIMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqnpY831jiKlHHqmUdhVSvOkXj3gE/1T3jvQ4t/qQCwkwv5PUAdDKI1/7apE/ 7gJWu06LdVYOiI5uamhffGDGP2JDZthcb8zwB6Y1VfeaxkWGkgsX3PQocBJs7Mod pmV7Q6Ktv6yh/RG885U90tk5uD++hzufXGuqFMdEBLlufJ6p0dlkLXWTFTrkqUPU 2u50sCPHR9U4vWz6mI2oFPE3DMWbhZuFPTE9KrbJ3Nk/n+8+Og2h30TyvZNpHwJ4 sLnQBoVN2sV549ZAzLuPrPP7TElqJSvdjaf5NzYuZHLN8yuRYrNNEXS9n60G2bRE 4b4e1c1CrSgDDjUT5BSn94JDtw== -----END CERTIFICATE-----Generated at Sun Sep 27 19:00:24 2026 by rpki-client