$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: kAnrOstAkok/QzRjs5OJhPrIzY0Yr0AR0g5MKoNpqa4= Subject key identifier: 08:56:2A:CE:92:16:22:25:4D:73:CF:EC:ED:4D:13:58:2D:4F:56:99 Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 0551 Signing time: Thu 23 Jul 2026 00:15:01 +0000 Manifest this update: Thu 23 Jul 2026 00:15:00 +0000 Manifest next update: Thu 30 Jul 2026 00:15:00 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: bLQ8YCCTof27qjIgL5eDrRhXks+y7HYDsqS6tKKK9B4=) 2: C7C191A0D7D911F0BE4EFACC9BD3641D.roa (hash: sqcrt85hjI/CWb6Tl9YpgII8XhmMaCxThxd4ltFmZn8=) 3: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: QJFt+Fh28ycFA2bY3p/1aFUcMAQ/zsdWuppebsHA2m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Jul 23 00:15:00 2026 GMT Not After : Jul 30 00:15:00 2026 GMT Subject: CN=6a615d04-91a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2c:72:b2:3d:84:f4:3a:24:48:8a:54:1b:33: 29:00:ba:81:fa:df:ad:91:ac:f4:09:c4:05:f8:4b: d6:8b:5e:6f:f3:05:dc:d8:bc:24:3f:1e:cb:40:e1: 52:71:93:4f:09:f6:b0:97:e6:22:ae:21:ad:f3:1d: d4:ea:9e:96:a5:b0:d1:fa:cc:6c:80:d4:1c:a7:40: bd:3b:84:37:bd:05:ce:4c:86:9b:93:c0:a6:e6:9c: 82:9f:9e:10:5f:6e:01:43:8b:9a:ba:fb:cd:b5:7d: 70:78:bc:11:5c:e8:e7:ce:4c:e6:2e:65:72:9d:a6: 16:f4:d0:3c:c0:00:75:89:b7:f8:d5:38:bd:9b:02: ed:3a:2d:44:1b:64:12:a6:c7:a6:71:58:f4:e6:31: 22:7b:f4:b9:b0:23:86:34:b4:af:4b:06:f1:d2:f6: 84:d4:70:0f:d5:f7:e4:1a:f7:75:0a:f2:c3:56:90: 9f:53:ef:91:1c:4b:02:23:a4:25:7e:63:1c:63:33: a0:69:ba:23:b9:9f:16:8b:15:38:0b:0e:81:0b:fd: 45:08:3d:98:5c:bb:2e:f3:f5:73:c0:f3:11:79:36: cc:42:d0:25:cd:7b:01:08:80:b7:ef:72:3c:e8:00: 1a:12:24:95:2f:4a:ea:72:a5:4b:bf:ec:ce:ad:5d: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:56:2A:CE:92:16:22:25:4D:73:CF:EC:ED:4D:13:58:2D:4F:56:99 X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:b5:bc:2e:0e:f7:f8:b6:f4:c5:d3:ed:6e:69:8b:da:4a:57: fc:0c:a2:e2:60:bd:2c:a5:3e:60:a3:c1:c5:b1:e0:df:d5:4d: f8:69:ad:49:2d:61:06:9f:0e:e4:34:19:0b:1d:41:9d:9a:2e: ff:30:81:fe:e8:a1:92:d5:1f:95:99:9d:8d:36:b2:d4:eb:30: 91:cb:df:fa:4c:ef:f5:da:b0:fa:f3:fb:d1:9e:07:93:50:53: 37:8d:96:95:06:94:5c:64:70:82:1e:ad:ad:9c:6f:4c:81:84: f6:80:a8:5b:f3:32:c1:4e:b8:c3:35:50:3a:80:23:16:d2:f2: 0f:84:f5:40:16:01:33:4f:c4:06:d5:93:50:f7:9e:a3:8f:49: f3:db:94:08:38:73:b4:94:72:dc:c8:48:bb:1c:50:5c:c9:81: f9:e9:16:05:e5:e5:99:f7:3a:c2:23:b0:1d:c3:88:67:91:e0: 36:03:fd:91:5f:12:bf:f1:31:ea:0f:8c:61:f2:fa:53:e4:73: a9:34:fa:28:4b:3a:fc:e1:1f:52:1c:1d:9e:01:ad:a3:a5:3a: 61:71:a7:05:71:ce:f7:c2:fc:15:d2:77:db:9c:b7:32:0f:c0: 29:b1:32:61:b4:29:dc:a3:bb:15:e9:ee:f6:98:2d:9e:2e:fe: 30:10:fe:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjYwNzIzMDAxNTAwWhcNMjYwNzMwMDAxNTAwWjAYMRYwFAYD VQQDEw02YTYxNWQwNC05MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApixysj2E9DokSIpUGzMpALqB+t+tkaz0CcQF+EvWi15v8wXc2LwkPx7LQOFS cZNPCfawl+YiriGt8x3U6p6WpbDR+sxsgNQcp0C9O4Q3vQXOTIabk8Cm5pyCn54Q X24BQ4uauvvNtX1weLwRXOjnzkzmLmVynaYW9NA8wAB1ibf41Ti9mwLtOi1EG2QS psemcVj05jEie/S5sCOGNLSvSwbx0vaE1HAP1ffkGvd1CvLDVpCfU++RHEsCI6Ql fmMcYzOgabojuZ8WixU4Cw6BC/1FCD2YXLsu8/VzwPMReTbMQtAlzXsBCIC373I8 6AAaEiSVL0rqcqVLv+zOrV1czQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhWKs6S FiIlTXPP7O1NE1gtT1aZMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApbW8Lg73+Lb0xdPtbmmL2kpX/Ayi4mC9LKU+YKPBxbHg39VN+GmtSS1hBp8O 5DQZCx1BnZou/zCB/uihktUflZmdjTay1Oswkcvf+kzv9dqw+vP70Z4Hk1BTN42W lQaUXGRwgh6trZxvTIGE9oCoW/MywU64wzVQOoAjFtLyD4T1QBYBM0/EBtWTUPee o49J89uUCDhztJRy3MhIuxxQXMmB+ekWBeXlmfc6wiOwHcOIZ5HgNgP9kV8Sv/Ex 6g+MYfL6U+RzqTT6KEs6/OEfUhwdngGto6U6YXGnBXHO98L8FdJ325y3Mg/AKbEy YbQp3KO7Fenu9pgtni7+MBD+Kw== -----END CERTIFICATE-----Generated at Fri Jul 24 10:05:21 2026 by rpki-client