
$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
File: CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json)
Hash identifier: rcLpPR9uCrVX8ChJ6Ll1hSoVUdtI/J4sN4hJr6B7qzM=
Subject key identifier: A5:AD:E5:D5:D4:23:AD:5E:BA:EA:11:2E:1B:4C:5A:B3:3A:69:D9:EF
Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30
Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
Manifest number: 01CC
Signing time: Thu 21 May 2026 03:50:31 +0000
Manifest this update: Thu 21 May 2026 03:50:30 +0000
Manifest next update: Thu 28 May 2026 03:50:30 +0000
Files and hashes: 1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: o2XmXR2iDIPDDvyO7MwxKNftVy0uZec4EQpAJ+d9tsY=)
2: DE2E716626DE11F18929E99D92833773.roa (hash: M2tO02HFUs50RonBzNe9MwYdR9Tkq6+PZdU5UbshAKM=)
3: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: g8MO/QgVBv9RweRV0mXs2iLPhyz7OUiWR60sGCOPFiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl
rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
Validity
Not Before: May 21 03:50:30 2026 GMT
Not After : May 28 03:50:30 2026 GMT
Subject: CN=6a0e8106-2aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:53:3a:57:16:d1:90:24:1c:f8:55:54:6f:
ad:78:22:b4:d2:c2:b0:be:f9:81:43:fa:43:81:1d:
22:ed:34:c7:a8:9e:a5:31:11:54:d2:5a:a2:bd:2a:
dc:ee:dd:bb:d1:c6:be:1d:5e:c6:8c:4c:db:cd:bc:
12:a7:b5:44:4d:90:fc:11:fb:14:22:27:db:b6:3e:
6c:de:5e:24:5e:6e:5d:0a:49:90:e3:b7:60:42:94:
5f:33:48:bf:2c:6d:ce:4a:0c:75:58:6a:da:88:02:
92:da:68:52:2d:13:30:c8:c2:9a:24:c9:2d:7b:14:
47:ab:9f:98:0b:7c:b3:df:88:bc:71:fa:3d:bd:09:
a2:1c:2c:c1:c1:a9:f4:23:4d:42:36:a8:6b:65:6a:
95:64:e5:00:eb:59:7f:99:a8:ba:c3:d0:38:a5:26:
7f:f0:4f:18:13:57:b0:69:47:d0:e0:67:5a:c8:e6:
d4:22:75:bf:29:2c:f9:e9:d2:8b:58:89:14:80:af:
9d:e1:08:27:c2:e8:17:c3:54:9f:b5:ad:08:e6:23:
45:36:0f:15:13:b0:a9:65:69:e6:60:1c:6e:3b:16:
e1:e2:b2:a5:47:84:ea:18:26:88:45:90:10:4a:ac:
1a:f6:d5:3d:e2:b9:d5:2c:d0:73:53:dd:33:60:1f:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AD:E5:D5:D4:23:AD:5E:BA:EA:11:2E:1B:4C:5A:B3:3A:69:D9:EF
X509v3 Authority Key Identifier:
keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:83:26:f0:8f:cd:ce:be:e8:0c:f3:fb:5e:2a:f8:17:4d:62:
0f:10:0d:0c:46:e3:04:cc:03:ca:7b:23:55:df:40:99:62:aa:
07:62:8c:28:5d:29:ce:c3:3b:98:15:83:05:5a:29:24:f9:5f:
3f:72:da:15:92:63:cb:3e:05:48:fa:96:db:28:ea:e1:ce:7f:
c2:df:e1:c4:51:df:04:4a:1f:9d:2e:f5:c5:81:67:8c:1a:6d:
fe:2f:fa:eb:42:63:cd:e5:58:cb:4a:86:5c:b7:21:fd:64:e7:
22:8a:4f:f5:1e:39:8d:94:ea:21:13:ed:c9:68:63:b5:2a:8c:
cc:43:54:b6:6f:fd:16:55:15:78:98:d5:19:5f:99:4b:b3:ee:
d9:ff:de:91:82:14:4c:33:88:7b:87:d9:c3:53:2c:7b:7a:71:
ee:39:1c:38:1e:6f:2b:37:75:99:8e:cf:1e:6c:f7:7e:5c:d5:
c8:d0:01:28:28:c7:b2:55:37:25:34:02:ff:58:36:81:64:a3:
72:77:0a:ae:c8:1c:8d:f8:4a:cd:6d:95:8d:a9:1d:bf:8d:29:
bc:b0:1b:86:b6:89:4b:2f:2d:bf:2c:47:c4:bd:18:6c:a3:0c:
5d:6e:d0:05:ac:ad:74:f1:df:85:82:f5:7a:d4:28:55:1a:a9:
42:49:cc:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU1OUUxMTAvBgNVBAUTKDA5NDA3RjcwRjk3NzE2MDBGNEZCQUE3NUMwRkU5Njkw
RDhDNjVBMzAwHhcNMjYwNTIxMDM1MDMwWhcNMjYwNTI4MDM1MDMwWjAYMRYwFAYD
VQQDEw02YTBlODEwNi0yYWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApylTOlcW0ZAkHPhVVG+teCK00sKwvvmBQ/pDgR0i7TTHqJ6lMRFU0lqivSrc
7t270ca+HV7GjEzbzbwSp7VETZD8EfsUIifbtj5s3l4kXm5dCkmQ47dgQpRfM0i/
LG3OSgx1WGraiAKS2mhSLRMwyMKaJMktexRHq5+YC3yz34i8cfo9vQmiHCzBwan0
I01CNqhrZWqVZOUA61l/mai6w9A4pSZ/8E8YE1ewaUfQ4GdayObUInW/KSz56dKL
WIkUgK+d4QgnwugXw1Sfta0I5iNFNg8VE7CpZWnmYBxuOxbh4rKlR4TqGCaIRZAQ
Sqwa9tU94rnVLNBzU90zYB+TeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKWt5dXU
I61euuoRLhtMWrM6adnvMB8GA1UdIwQYMBaAFAlAf3D5dxYA9PuqdcD+lpDYxlow
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5RS8zNTBBRkVCRUE0
NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0ZnRDAtNnAxd1A2V2tOakdX
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTU5RS8zNTBBRkVCRUE0NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0Zn
RDAtNnAxd1A2V2tOakdXakEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo4Mm8I/Nzr7oDPP7Xir4F01iDxANDEbjBMwDynsjVd9AmWKqB2KMKF0pzsM7
mBWDBVopJPlfP3LaFZJjyz4FSPqW2yjq4c5/wt/hxFHfBEofnS71xYFnjBpt/i/6
60JjzeVYy0qGXLch/WTnIopP9R45jZTqIRPtyWhjtSqMzENUtm/9FlUVeJjVGV+Z
S7Pu2f/ekYIUTDOIe4fZw1Mse3px7jkcOB5vKzd1mY7PHmz3flzVyNABKCjHslU3
JTQC/1g2gWSjcncKrsgcjfhKzW2Vjakdv40pvLAbhraJSy8tvyxHxL0YbKMMXW7Q
BaytdPHfhYL1etQoVRqpQknMeQ==
-----END CERTIFICATE-----
Generated at Thu May 21 11:15:32 2026 by rpki-client