$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft File: CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json) Hash identifier: MAQX35vFrzSHgCHehnYnged5v0ac+xnVB35eIXAE9CE= Subject key identifier: 71:40:87:E3:76:B6:AA:F5:72:34:30:20:44:37:15:0F:31:0B:3C:C6 Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft Manifest number: F0 Signing time: Sat 29 Mar 2025 04:43:56 +0000 Manifest this update: Sat 29 Mar 2025 04:43:56 +0000 Manifest next update: Sat 05 Apr 2025 04:43:56 +0000 Files and hashes: 1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: Ya6WoWprL877s9N2w8wMEvqUCktWGsQNDRg18xkGaf0=) 2: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: lEc4QJGwk5bvYmoYAomdEIkxOdB1PEJOkUqud1Iy0CI=) 3: AB501A702CDE11EFBC062E74C4F9AE02.roa (hash: oNFEmYACURX8AL5CKdRsG7Ba4gG8bP0+lhNlBuOmVKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912559E Validity Not Before: Mar 29 04:43:56 2025 GMT Not After : Apr 5 04:43:56 2025 GMT Subject: CN=67e77a8c-2377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:5c:31:37:18:0d:32:ad:f7:c4:ad:36:98: 57:90:79:bc:a7:c2:65:cb:67:e9:cb:d1:6b:9b:f5: fa:18:20:2e:83:5b:8f:74:a9:92:ac:60:36:d8:2f: ca:a8:7c:b1:fa:8f:bc:84:d9:11:4e:6e:63:93:22: e2:a6:1e:09:39:a8:39:32:c1:fa:7e:d5:0a:dc:ac: bf:f6:b2:f0:a2:a8:27:af:84:a2:9e:f3:a3:0d:a8: 8b:26:76:12:22:9e:7b:fe:32:d8:3b:d9:97:1b:7f: ec:26:95:a2:94:76:a1:9c:a7:ce:e3:22:bb:4e:55: 97:fe:b6:17:85:f0:e3:88:2c:8e:2f:c7:8e:96:09: a9:43:6c:cd:07:9d:45:fe:6a:a5:d7:36:96:b8:cc: 19:fe:23:a9:59:81:4d:5b:3d:0f:9b:ec:63:82:62: 60:7b:af:ab:19:7e:63:ea:86:b8:cd:7d:74:f8:f2: 5f:c8:76:3d:bb:19:93:80:f9:b4:1d:74:cb:31:41: 1c:98:62:b1:f7:c7:ed:24:2a:6a:b5:a7:e2:ff:76: 42:26:ce:ba:17:f6:c3:5b:ed:df:33:1c:f3:18:d6: 16:1e:6f:0d:94:d7:f9:ad:e0:e4:81:39:1e:ab:92: 94:6a:75:3b:25:62:0c:cd:c2:b2:a5:4c:da:2d:7e: d6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:40:87:E3:76:B6:AA:F5:72:34:30:20:44:37:15:0F:31:0B:3C:C6 X509v3 Authority Key Identifier: keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:4e:f7:c4:17:8c:98:ba:d9:13:ef:c4:9f:6a:52:3f:45:f0: 4c:fc:57:52:f4:dd:07:b2:31:8a:6b:a9:3d:97:16:54:5e:66: 25:15:32:a0:79:6e:44:c9:8c:61:4f:7b:ce:18:8b:b6:d1:77: 3c:6d:19:4a:99:27:a4:d5:da:2b:d7:d0:f0:35:1b:87:32:74: 14:ad:18:83:cb:45:52:f7:84:bc:07:da:17:24:5f:f1:76:b2: 32:0f:05:4c:2a:92:07:62:1f:c9:7c:fa:14:ff:e6:8c:82:a5: 3d:2b:29:c1:30:ec:26:d0:47:fe:bf:14:09:2c:c7:4a:5d:c6: 4d:f2:91:18:7a:dc:af:1e:f2:05:cc:91:20:5d:80:2b:46:18: 95:27:21:3e:8b:ea:be:b3:e5:4a:6f:0e:fe:8e:17:87:71:e8: 51:81:6b:07:0f:8f:9d:64:59:f2:91:c3:0d:07:16:7b:d0:1c: 82:45:16:ae:01:4f:43:e8:20:57:58:1f:83:35:df:7b:8e:e8: 72:c8:79:d7:23:1b:23:a8:0e:ac:81:5f:c9:9a:e7:3e:91:6e: f4:ef:b4:a8:5d:7c:94:84:d4:9c:5e:5e:14:1c:12:23:2b:bb: 50:ef:a1:80:3a:1d:57:fb:97:0a:08:56:ca:22:63:c0:41:a0: 4e:ae:23:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OUUxMTAvBgNVBAUTKDA5NDA3RjcwRjk3NzE2MDBGNEZCQUE3NUMwRkU5Njkw RDhDNjVBMzAwHhcNMjUwMzI5MDQ0MzU2WhcNMjUwNDA1MDQ0MzU2WjAYMRYwFAYD VQQDEw02N2U3N2E4Yy0yMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArD5cMTcYDTKt98StNphXkHm8p8Jly2fpy9Frm/X6GCAug1uPdKmSrGA22C/K qHyx+o+8hNkRTm5jkyLiph4JOag5MsH6ftUK3Ky/9rLwoqgnr4SinvOjDaiLJnYS Ip57/jLYO9mXG3/sJpWilHahnKfO4yK7TlWX/rYXhfDjiCyOL8eOlgmpQ2zNB51F /mql1zaWuMwZ/iOpWYFNWz0Pm+xjgmJge6+rGX5j6oa4zX10+PJfyHY9uxmTgPm0 HXTLMUEcmGKx98ftJCpqtafi/3ZCJs66F/bDW+3fMxzzGNYWHm8NlNf5reDkgTke q5KUanU7JWIMzcKypUzaLX7WQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFAh+N2 tqr1cjQwIEQ3FQ8xCzzGMB8GA1UdIwQYMBaAFAlAf3D5dxYA9PuqdcD+lpDYxlow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5RS8zNTBBRkVCRUE0 NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0ZnRDAtNnAxd1A2V2tOakdX akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5RS8zNTBBRkVCRUE0NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0Zn RDAtNnAxd1A2V2tOakdXakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBATvfEF4yYutkT78SfalI/RfBM/FdS9N0HsjGKa6k9lxZUXmYlFTKg eW5EyYxhT3vOGIu20Xc8bRlKmSek1dor19DwNRuHMnQUrRiDy0VS94S8B9oXJF/x drIyDwVMKpIHYh/JfPoU/+aMgqU9KynBMOwm0Ef+vxQJLMdKXcZN8pEYetyvHvIF zJEgXYArRhiVJyE+i+q+s+VKbw7+jheHcehRgWsHD4+dZFnykcMNBxZ70ByCRRau AU9D6CBXWB+DNd97juhyyHnXIxsjqA6sgV/Jmuc+kW7077SoXXyUhNScXl4UHBIj K7tQ76GAOh1X+5cKCFbKImPAQaBOriOA -----END CERTIFICATE-----Generated at Fri Apr 4 18:24:34 2025 by rpki-client