The only mentioned point in F5 article is that the file will be updated automatically during F5 upgrade only as per the below:
"The file is updated automatically during the BIG-IP upgrade process. Optionally, if you prefer to manually update the default CA certificate bundle, you can do so by either overwriting the default ca-bundle.crt file or updating it through the BIG-IP CA bundle manager."
