$ rpki-client -vvvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: 0KbEcFMyLOc7fT0zQlba1MGsatDjI6rNjxLVCESjyns= Subject key identifier: FB:8B:4D:91:32:C5:3F:DC:36:BA:02:46:D8:E1:39:52:17:2B:12:ED Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 057A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 0563 Signing time: Wed 26 Aug 2026 23:13:06 +0000 Manifest this update: Wed 26 Aug 2026 23:13:06 +0000 Manifest next update: Wed 02 Sep 2026 23:13:06 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: z6xTPrOaLWEh5P9OfVGdEs933WpWVVU0XBXNAROXXJg=) 2: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: QJFt+Fh28ycFA2bY3p/1aFUcMAQ/zsdWuppebsHA2m0=) 3: C7C191A0D7D911F0BE4EFACC9BD3641D.roa (hash: sqcrt85hjI/CWb6Tl9YpgII8XhmMaCxThxd4ltFmZn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 23:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1402 (0x57a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Aug 26 23:13:06 2026 GMT Not After : Sep 2 23:13:06 2026 GMT Subject: CN=6a8f7302-660e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e8:80:11:9b:ed:df:04:49:6a:31:db:9d:bf: 59:74:0e:a2:38:6b:71:63:41:6e:b6:84:ed:c3:c5: 6f:28:d8:b2:4f:7b:af:65:d7:b3:c2:d9:ed:4c:07: f6:28:37:a0:0c:83:e7:10:b8:ba:bc:4f:d0:02:0b: e7:62:6f:40:5d:c8:79:1a:6a:21:07:ab:a1:ea:f9: b8:8d:2a:5f:f0:fe:f4:33:cf:49:a1:75:5c:59:af: 77:3d:d6:6b:0b:5c:90:f9:33:df:07:49:5b:94:60: b3:d0:bb:ae:2d:07:89:11:05:44:1c:7e:d5:0e:ea: 65:a5:b9:19:c5:f4:c4:a2:7a:e1:cd:c7:7c:3d:d7: 73:67:99:08:f8:b2:02:6f:d1:bb:e4:56:04:08:76: 34:9c:ad:76:43:b1:12:cf:cd:ff:99:98:61:89:b4: 19:26:8b:c4:ce:7a:6a:c0:ee:4b:c9:4f:14:bf:8c: ce:1e:7e:26:f0:02:e9:ab:0d:ce:a3:e1:20:23:24: 6d:98:26:9f:85:cd:d5:f8:0c:05:ab:36:5f:dc:65: 61:b6:48:ef:fb:44:35:0b:15:ba:95:b3:ca:bb:da: 3f:51:b7:fb:6a:67:7c:16:dd:75:7a:38:13:f6:2b: b4:61:4c:02:d0:85:58:bc:78:04:cc:b0:72:c5:07: 11:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8B:4D:91:32:C5:3F:DC:36:BA:02:46:D8:E1:39:52:17:2B:12:ED X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:16:68:1b:78:63:48:44:54:b4:e8:e8:ab:78:df:44:27:34: 78:bb:49:26:0d:24:15:9b:60:dd:33:5c:0b:82:b5:87:19:34: 74:ab:62:da:a3:1c:fc:55:60:17:23:39:7e:35:17:80:61:9c: 32:05:10:fb:6c:eb:8c:61:ab:a5:47:9d:87:cc:dc:0f:a8:9a: b1:66:d1:12:9a:0e:1d:e1:10:cc:8d:0a:bc:4b:02:aa:38:a4: fa:34:44:99:ad:06:85:10:bb:8f:c0:71:7c:4e:6a:4d:01:3f: dd:f7:5e:26:71:98:0d:42:2e:53:fe:1d:a9:58:6f:55:54:bb: 1f:83:5d:cf:3a:28:91:04:3f:c2:eb:83:82:b2:97:bd:f7:b7: ef:33:df:7b:12:06:72:15:42:bd:69:e2:6b:51:53:d5:3d:81: 05:67:a9:e1:34:dc:bf:3b:c6:5f:dd:62:70:36:03:c6:ec:e7: 33:82:6d:3b:02:3f:6e:17:ee:17:d5:94:8e:e6:76:cc:a9:7a: d1:0f:97:80:e9:a9:c3:a3:81:4a:cc:eb:01:79:7f:10:fc:c8: 38:d0:a6:e0:37:75:6e:a9:7c:67:7e:eb:b3:f0:73:57:14:93: ba:32:51:b2:d5:2d:22:0e:17:d7:07:13:4d:f6:55:77:44:81: cd:0b:e7:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjYwODI2MjMxMzA2WhcNMjYwOTAyMjMxMzA2WjAYMRYwFAYD VQQDEw02YThmNzMwMi02NjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmeiAEZvt3wRJajHbnb9ZdA6iOGtxY0FutoTtw8VvKNiyT3uvZdezwtntTAf2 KDegDIPnELi6vE/QAgvnYm9AXch5GmohB6uh6vm4jSpf8P70M89JoXVcWa93PdZr C1yQ+TPfB0lblGCz0LuuLQeJEQVEHH7VDuplpbkZxfTEonrhzcd8PddzZ5kI+LIC b9G75FYECHY0nK12Q7ESz83/mZhhibQZJovEznpqwO5LyU8Uv4zOHn4m8ALpqw3O o+EgIyRtmCafhc3V+AwFqzZf3GVhtkjv+0Q1CxW6lbPKu9o/Ubf7amd8Ft11ejgT 9iu0YUwC0IVYvHgEzLByxQcRoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPuLTZEy xT/cNroCRtjhOVIXKxLtMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfxZoG3hjSERUtOjoq3jfRCc0eLtJJg0kFZtg3TNcC4K1hxk0dKti2qMc/FVg FyM5fjUXgGGcMgUQ+2zrjGGrpUedh8zcD6iasWbREpoOHeEQzI0KvEsCqjik+jRE ma0GhRC7j8BxfE5qTQE/3fdeJnGYDUIuU/4dqVhvVVS7H4NdzzookQQ/wuuDgrKX vfe37zPfexIGchVCvWnia1FT1T2BBWep4TTcvzvGX91icDYDxuznM4JtOwI/bhfu F9WUjuZ2zKl60Q+XgOmpw6OBSszrAXl/EPzIONCm4Dd1bql8Z37rs/BzVxSTujJR stUtIg4X1wcTTfZVd0SBzQvndA== -----END CERTIFICATE-----Generated at Thu Aug 27 14:14:47 2026 by rpki-client