$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: GAhpc8LTio39SW5lKHUMKC0vKmBZYIGasCd0ome/TJ0= Subject key identifier: F9:69:93:4D:9F:45:22:9B:0F:BA:7E:34:24:2C:77:CA:6B:E9:0C:AD Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 0548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 0531 Signing time: Wed 20 May 2026 23:37:06 +0000 Manifest this update: Wed 20 May 2026 23:37:06 +0000 Manifest next update: Wed 27 May 2026 23:37:06 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: lWM6IPrZbi0E1MBgdlRtU5zaJPQNqJD2zHbXjZ+3iSc=) 2: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: QJFt+Fh28ycFA2bY3p/1aFUcMAQ/zsdWuppebsHA2m0=) 3: C7C191A0D7D911F0BE4EFACC9BD3641D.roa (hash: sqcrt85hjI/CWb6Tl9YpgII8XhmMaCxThxd4ltFmZn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1352 (0x548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: May 20 23:37:06 2026 GMT Not After : May 27 23:37:06 2026 GMT Subject: CN=6a0e45a2-5a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:a5:f9:4d:39:c2:e1:9b:da:1e:68:41:16: 1b:cc:03:28:79:26:5d:62:77:65:dc:31:5e:60:78: 07:f5:1b:2e:49:fe:01:4a:35:f2:06:12:4d:b6:86: 44:1a:a6:0a:9f:d0:f0:4a:a6:38:f4:52:23:38:da: 00:ce:51:e7:49:87:85:36:2c:46:d9:58:72:b6:ab: 7f:de:19:ab:c6:23:69:c2:4a:f8:3c:80:b2:50:d7: b4:5a:f2:6d:f3:6e:b2:58:1f:d0:f8:03:12:df:da: ee:93:5f:ff:5d:10:50:52:2f:e8:a8:42:ef:55:32: a6:8d:d3:37:ee:e6:a9:34:51:1f:70:e7:58:7d:81: 3d:11:b6:2b:e6:8b:4c:34:fd:07:16:ea:a8:ca:38: 23:96:da:b1:eb:70:72:bf:83:2c:3e:40:32:be:99: 04:57:53:63:0a:d4:79:31:20:0b:3e:ed:3b:1c:d8: 43:f6:b0:81:e9:83:cd:7d:41:ec:82:e3:8d:88:55: df:6b:9a:8c:4b:7a:65:4d:45:06:ed:38:92:1f:8e: 3c:9c:5f:13:8e:2b:18:0c:a0:6d:3b:7d:46:1a:7b: 1e:cf:77:1c:2f:ad:8c:b3:22:69:81:f3:d7:12:c4: b4:25:e6:a2:53:30:bf:aa:02:bc:ce:11:3e:48:93: 7f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:69:93:4D:9F:45:22:9B:0F:BA:7E:34:24:2C:77:CA:6B:E9:0C:AD X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8f:14:45:d6:1e:69:cd:f0:fc:a9:a2:46:0e:50:6e:14:a9: 12:4c:25:83:ee:d8:6d:65:9d:9b:9e:11:3d:a8:b2:d0:e1:1c: cb:b4:ca:e5:0b:46:0e:39:22:bc:b0:77:5c:61:df:6f:ce:15: e3:fa:3c:91:d6:11:67:2f:96:d4:ef:ff:56:d7:e2:cd:13:e2: bc:0f:f8:7a:64:12:4b:5c:d9:d3:77:fc:9f:5a:cd:28:0c:dc: 91:3b:e5:0b:b1:06:76:ab:58:72:6d:2a:f8:23:bb:1f:8c:74: 8c:a7:4d:28:24:84:4d:a1:6b:a1:0b:bc:79:a2:13:c4:23:bc: 96:f5:9d:0c:3a:ef:70:52:ee:64:54:40:73:41:95:43:ce:b7: a6:40:fb:1b:47:e1:6b:27:ca:ea:1b:b4:a1:a1:db:1f:49:48: c2:e1:ad:18:e2:9d:74:25:0f:5b:2d:13:3a:d0:71:c5:9c:d5: 0d:3c:f7:69:3e:a1:d3:72:90:41:fd:74:19:a0:55:e9:6d:6c: 73:57:f4:a8:25:a9:b9:69:00:78:8b:c3:d1:de:7d:80:06:f1: 00:11:56:97:41:ac:c9:c6:e6:66:60:19:97:39:12:dd:92:c2: d4:f6:6d:97:af:71:51:30:74:30:ed:ac:8a:f6:92:8e:ab:a8: ec:06:2f:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjYwNTIwMjMzNzA2WhcNMjYwNTI3MjMzNzA2WjAYMRYwFAYD VQQDEw02YTBlNDVhMi01YTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGCl+U05wuGb2h5oQRYbzAMoeSZdYndl3DFeYHgH9RsuSf4BSjXyBhJNtoZE GqYKn9DwSqY49FIjONoAzlHnSYeFNixG2Vhytqt/3hmrxiNpwkr4PICyUNe0WvJt 826yWB/Q+AMS39ruk1//XRBQUi/oqELvVTKmjdM37uapNFEfcOdYfYE9EbYr5otM NP0HFuqoyjgjltqx63Byv4MsPkAyvpkEV1NjCtR5MSALPu07HNhD9rCB6YPNfUHs guONiFXfa5qMS3plTUUG7TiSH448nF8TjisYDKBtO31GGnsez3ccL62MsyJpgfPX EsS0JeaiUzC/qgK8zhE+SJN/jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPlpk02f RSKbD7p+NCQsd8pr6QytMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb48URdYeac3w/KmiRg5QbhSpEkwlg+7YbWWdm54RPaiy0OEcy7TK5QtGDjki vLB3XGHfb84V4/o8kdYRZy+W1O//VtfizRPivA/4emQSS1zZ03f8n1rNKAzckTvl C7EGdqtYcm0q+CO7H4x0jKdNKCSETaFroQu8eaITxCO8lvWdDDrvcFLuZFRAc0GV Q863pkD7G0fhayfK6hu0oaHbH0lIwuGtGOKddCUPWy0TOtBxxZzVDTz3aT6h03KQ Qf10GaBV6W1sc1f0qCWpuWkAeIvD0d59gAbxABFWl0GsycbmZmAZlzkS3ZLC1PZt l69xUTB0MO2sivaSjquo7AYvbQ== -----END CERTIFICATE-----Generated at Thu May 21 11:03:46 2026 by rpki-client