$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: TsAYlhYBuyEdTcdURTMQAn48HboJj2CQTjcZkSVTiuk= Subject key identifier: 70:70:69:64:58:86:C9:D5:29:2A:1A:1E:98:E5:E8:C5:0A:01:8F:2E Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 0553 Signing time: Mon 27 Jul 2026 00:24:28 +0000 Manifest this update: Mon 27 Jul 2026 00:24:27 +0000 Manifest next update: Mon 03 Aug 2026 00:24:27 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: EmCgdEidzbMTWTSm8jSdtH56EOxZ5pUPeU5sx92A904=) 2: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: QJFt+Fh28ycFA2bY3p/1aFUcMAQ/zsdWuppebsHA2m0=) 3: C7C191A0D7D911F0BE4EFACC9BD3641D.roa (hash: sqcrt85hjI/CWb6Tl9YpgII8XhmMaCxThxd4ltFmZn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Jul 27 00:24:27 2026 GMT Not After : Aug 3 00:24:27 2026 GMT Subject: CN=6a66a53c-76c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3a:ac:e7:28:d8:00:4e:37:e7:aa:ec:37:fe: 47:d8:b2:79:cf:9b:12:2b:c3:55:04:67:da:68:6f: 0e:f9:8a:63:80:8c:61:73:38:46:09:d2:d5:f6:19: 29:1c:22:11:e9:b1:28:f6:12:99:9b:dc:91:48:bb: fa:d4:6b:37:ff:d0:ae:67:85:b4:30:9d:b0:64:3a: 31:7b:12:26:2c:bd:f4:7a:78:75:72:4c:12:d9:41: 3b:cd:30:4b:89:9a:2b:ba:9f:61:a6:6e:9d:2b:e6: 91:be:c1:08:2c:d6:36:f9:df:2f:96:b4:79:3e:e8: b7:22:14:b5:62:7a:4c:fa:6e:66:45:32:4e:83:01: a2:dd:22:75:5d:d2:93:a9:ae:cc:c0:76:66:80:84: 0a:bf:6b:72:7a:16:05:eb:23:54:7a:05:a4:26:d6: 8d:c0:6b:2d:4d:1e:83:b5:62:9f:b2:77:0c:06:c0: d5:ad:e1:61:ea:e8:44:e1:01:b6:bc:78:0a:f2:5d: a0:63:5b:54:b8:f6:64:0f:75:34:59:13:77:35:a1: 0c:8d:58:c7:79:77:cf:37:8b:0f:90:ef:f6:dd:dd: 5e:27:20:07:3f:7b:7f:e3:de:4e:3b:9e:81:fb:33: 42:ec:7c:dd:2f:e0:76:68:81:ac:86:37:4f:f3:e6: 15:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:70:69:64:58:86:C9:D5:29:2A:1A:1E:98:E5:E8:C5:0A:01:8F:2E X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8a:eb:28:b7:51:cd:e9:aa:46:a0:71:be:e5:6e:f9:4e:6a: f0:fb:c5:75:ef:fd:0f:ee:63:a6:67:76:e6:10:3b:f8:e2:62: 28:23:bd:2d:87:8a:d8:cd:d8:f0:e7:a4:ce:21:85:39:ab:5c: a4:14:3f:c4:ec:b6:f6:2c:e5:34:6c:3a:c3:cb:aa:2e:08:b6: 5a:4f:b9:40:bc:ed:81:35:1c:f7:a5:6b:c3:d7:bf:db:b9:be: e2:04:70:1f:cc:ca:e2:83:77:77:93:3d:83:38:0b:46:f3:59: e1:e3:6d:92:dc:67:31:22:53:5a:9e:1d:5c:09:cd:3b:91:ca: da:0f:61:0e:bf:11:90:1d:b0:e6:cc:47:e3:26:32:0c:5e:ad: 5b:7b:f1:77:e0:e1:37:93:a5:a0:ef:06:fc:55:78:9f:6f:d8: 84:8c:21:bd:7d:d5:52:b5:13:45:22:a3:cf:5d:d4:8c:b3:f9: b8:55:9c:1b:dd:03:02:4c:9b:a1:57:6e:a9:52:a3:15:2b:79: 0d:98:11:7f:4c:5e:e9:d1:c5:40:72:a0:07:5c:e6:b8:58:4b: 0a:eb:47:10:63:d7:a9:bb:a6:8e:ac:66:ea:7c:0c:24:ab:10: 8b:0b:c5:4c:e5:4f:60:02:e5:55:fd:79:37:aa:55:73:a6:cb: c6:1d:24:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjYwNzI3MDAyNDI3WhcNMjYwODAzMDAyNDI3WjAYMRYwFAYD VQQDEw02YTY2YTUzYy03NmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkTqs5yjYAE4356rsN/5H2LJ5z5sSK8NVBGfaaG8O+YpjgIxhczhGCdLV9hkp HCIR6bEo9hKZm9yRSLv61Gs3/9CuZ4W0MJ2wZDoxexImLL30enh1ckwS2UE7zTBL iZorup9hpm6dK+aRvsEILNY2+d8vlrR5Pui3IhS1YnpM+m5mRTJOgwGi3SJ1XdKT qa7MwHZmgIQKv2tyehYF6yNUegWkJtaNwGstTR6DtWKfsncMBsDVreFh6uhE4QG2 vHgK8l2gY1tUuPZkD3U0WRN3NaEMjVjHeXfPN4sPkO/23d1eJyAHP3t/495OO56B +zNC7HzdL+B2aIGshjdP8+YVJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBwaWRY hsnVKSoaHpjl6MUKAY8uMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnIrrKLdRzemqRqBxvuVu+U5q8PvFde/9D+5jpmd25hA7+OJiKCO9LYeK2M3Y 8OekziGFOatcpBQ/xOy29izlNGw6w8uqLgi2Wk+5QLztgTUc96Vrw9e/27m+4gRw H8zK4oN3d5M9gzgLRvNZ4eNtktxnMSJTWp4dXAnNO5HK2g9hDr8RkB2w5sxH4yYy DF6tW3vxd+DhN5OloO8G/FV4n2/YhIwhvX3VUrUTRSKjz13UjLP5uFWcG90DAkyb oVduqVKjFSt5DZgRf0xe6dHFQHKgB1zmuFhLCutHEGPXqbumjqxm6nwMJKsQiwvF TOVPYALlVf15N6pVc6bLxh0kcA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:12:01 2026 by rpki-client