$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: jVRf3HEZPD1TxNH2kTG064xzD/9oVRk44tVLwnCdXkA= Subject key identifier: 4D:71:7A:B9:C4:50:2A:D3:BF:02:CC:43:59:CE:02:8D:7C:DC:DE:34 Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 051A Signing time: Sat 04 Apr 2026 23:24:32 +0000 Manifest this update: Sat 04 Apr 2026 23:24:32 +0000 Manifest next update: Sat 11 Apr 2026 23:24:32 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: XR82rP33TXvFBN0Z/uKRdJxM6Ot9TZXesL5ktUrl/TI=) 2: C7C191A0D7D911F0BE4EFACC9BD3641D.roa (hash: sqcrt85hjI/CWb6Tl9YpgII8XhmMaCxThxd4ltFmZn8=) 3: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: QJFt+Fh28ycFA2bY3p/1aFUcMAQ/zsdWuppebsHA2m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Apr 4 23:24:32 2026 GMT Not After : Apr 11 23:24:32 2026 GMT Subject: CN=69d19db0-6aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:17:fa:74:bb:d9:24:92:bf:7d:19:9c:52: 62:68:7d:45:d3:ab:45:bc:27:f0:7e:3f:f2:33:82: d5:32:da:f3:89:38:4b:ba:d8:49:e8:c3:b6:55:7f: 3e:80:88:d3:74:57:bc:54:e3:de:fc:90:87:00:73: 10:c4:63:65:fe:9d:48:ba:8f:d7:13:29:63:42:ce: df:21:ff:c2:62:09:3f:86:03:3f:68:b6:e4:36:6e: c8:c3:e9:83:60:7a:db:44:84:0d:17:56:13:fa:73: 80:39:52:8e:70:cd:de:2a:a4:f7:28:bd:af:a9:0a: f4:09:20:0d:90:ce:e7:5c:08:10:3f:9a:3a:c0:30: 59:72:ae:6b:3e:18:04:b0:7a:ad:a8:fe:10:55:a8: 5c:57:e6:7f:2b:9f:07:7e:e2:6d:8c:6c:14:72:f9: 1c:df:8e:c2:42:5f:6f:bf:0a:52:ad:3e:ff:c2:d1: ca:e6:cb:5d:c0:41:ee:d0:ee:3c:8d:d3:7a:b2:d2: 02:0b:7d:a7:4c:27:94:99:b2:63:0c:0e:18:de:34: 7e:27:da:2c:73:d4:02:b6:e2:3e:54:d7:81:a2:41: 7d:ed:59:64:1b:9a:74:3f:5c:3b:5b:2c:a1:41:3a: ba:62:04:9f:30:b8:5b:96:56:34:ab:57:af:ff:17: d1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:71:7A:B9:C4:50:2A:D3:BF:02:CC:43:59:CE:02:8D:7C:DC:DE:34 X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:00:8b:df:3b:73:73:8a:f4:cc:a1:98:85:c6:6f:38:2a:eb: 5e:33:f3:36:76:93:26:78:c2:45:2f:81:88:df:e1:17:86:1f: e9:b6:aa:68:67:27:21:d6:6c:de:a0:9b:9a:e5:70:65:f2:7c: 3c:c7:e7:a4:f9:b3:61:88:a8:cc:20:1f:d4:11:ea:c3:f0:1b: e5:3e:c1:b6:41:f3:b4:2b:aa:65:ec:20:2e:b5:53:98:1e:86: 5e:d5:1e:70:fc:58:d2:23:05:cf:37:44:78:b3:c5:86:3b:36: f5:94:9d:0a:9b:1f:5e:03:dd:58:91:01:53:67:7b:27:d1:99: 34:7a:62:ee:65:c7:03:13:35:65:b9:eb:0b:a1:5c:20:30:3f: 4e:eb:8e:ce:e6:6d:1d:4f:26:f8:dc:90:c9:3c:32:ab:71:51: 46:5a:de:f4:28:2f:c1:98:fe:45:df:6a:c6:e8:68:8d:7b:44: 52:41:92:f9:e8:0e:96:f8:cd:b8:a9:73:17:6b:da:d4:01:70: 33:75:59:cd:8c:af:03:47:aa:d0:d9:47:90:16:a0:d9:8e:45: c3:61:e2:21:0e:c5:b4:21:35:a4:4a:38:3d:c7:26:fd:be:c6: a2:19:bb:d3:59:28:88:83:22:86:15:dc:bc:96:c9:96:d7:55: fc:5e:8d:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjYwNDA0MjMyNDMyWhcNMjYwNDExMjMyNDMyWjAYMRYwFAYD VQQDEw02OWQxOWRiMC02YWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUoX+nS72SSSv30ZnFJiaH1F06tFvCfwfj/yM4LVMtrziThLuthJ6MO2VX8+ gIjTdFe8VOPe/JCHAHMQxGNl/p1Iuo/XEyljQs7fIf/CYgk/hgM/aLbkNm7Iw+mD YHrbRIQNF1YT+nOAOVKOcM3eKqT3KL2vqQr0CSANkM7nXAgQP5o6wDBZcq5rPhgE sHqtqP4QVahcV+Z/K58HfuJtjGwUcvkc347CQl9vvwpSrT7/wtHK5stdwEHu0O48 jdN6stICC32nTCeUmbJjDA4Y3jR+J9osc9QCtuI+VNeBokF97VlkG5p0P1w7Wyyh QTq6YgSfMLhbllY0q1ev/xfRMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE1xernE UCrTvwLMQ1nOAo183N40MB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiQCL3ztzc4r0zKGYhcZvOCrrXjPzNnaTJnjCRS+BiN/hF4Yf6baqaGcnIdZs 3qCbmuVwZfJ8PMfnpPmzYYiozCAf1BHqw/Ab5T7BtkHztCuqZewgLrVTmB6GXtUe cPxY0iMFzzdEeLPFhjs29ZSdCpsfXgPdWJEBU2d7J9GZNHpi7mXHAxM1ZbnrC6Fc IDA/TuuOzuZtHU8m+NyQyTwyq3FRRlre9CgvwZj+Rd9qxuhojXtEUkGS+egOlvjN uKlzF2va1AFwM3VZzYyvA0eq0NlHkBag2Y5Fw2HiIQ7FtCE1pEo4Pccm/b7Gohm7 01koiIMihhXcvJbJltdV/F6NPw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:15 2026 by rpki-client