$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft File: CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json) Hash identifier: Y/TTlPvELAGNke1HfzEAL6zkF167shUdvLPpq56CAtg= Subject key identifier: BF:C2:AD:92:72:82:E7:58:0D:0C:58:CC:49:FF:BF:51:41:7F:19:39 Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft Manifest number: 0142 Signing time: Sun 07 Sep 2025 04:48:36 +0000 Manifest this update: Sun 07 Sep 2025 04:48:36 +0000 Manifest next update: Sun 14 Sep 2025 04:48:36 +0000 Files and hashes: 1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: 0jHFvmde9dPnPlKl08reFUQ1BtJnKklrA6VyIH0Nplg=) 2: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: lEc4QJGwk5bvYmoYAomdEIkxOdB1PEJOkUqud1Iy0CI=) 3: AB501A702CDE11EFBC062E74C4F9AE02.roa (hash: oNFEmYACURX8AL5CKdRsG7Ba4gG8bP0+lhNlBuOmVKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Validity Not Before: Sep 7 04:48:36 2025 GMT Not After : Sep 14 04:48:36 2025 GMT Subject: CN=68bd0ea4-b3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:4e:24:69:73:39:81:13:40:a0:e9:0c:f8: d6:48:25:e5:e0:57:bf:bd:7a:a7:fb:1e:1d:e8:b1: 7b:65:67:b3:2d:f0:4c:52:15:7e:51:83:09:8b:a0: ae:cb:ff:cb:99:a8:b6:71:c4:8c:01:4e:78:cc:b2: c5:0b:ff:69:1e:2a:26:41:82:42:0e:f6:91:85:1c: 65:7e:68:07:4a:c1:da:d2:a3:75:3a:eb:f4:31:63: 62:e9:3b:e9:c0:a0:ee:4b:9d:11:ba:84:a4:53:2e: fb:96:5a:ae:f5:ee:48:5b:4b:e2:b3:6b:19:2a:78: 65:c2:28:4e:b6:1f:1a:d9:14:5e:d5:14:6a:b6:22: 60:6e:a9:f1:24:4f:23:1d:ff:46:01:c5:4d:43:db: d5:d9:1e:47:78:50:1f:64:40:34:4e:53:49:dc:69: b4:ff:b6:09:27:f1:a5:49:97:89:17:f6:f7:e1:53: 21:9a:46:c2:c0:e0:6c:9d:d9:f8:da:8c:49:3d:6d: 95:34:58:c4:ec:1c:f3:a4:10:71:bc:d9:7a:ea:0d: ab:3b:c8:4e:6f:d4:92:40:22:95:f9:1d:21:1d:a8: 7c:69:a5:75:52:ec:d0:ae:b6:48:7d:b6:d0:fb:95: 21:62:65:15:77:e2:06:dc:af:77:a5:12:73:21:fa: f4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C2:AD:92:72:82:E7:58:0D:0C:58:CC:49:FF:BF:51:41:7F:19:39 X509v3 Authority Key Identifier: keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:82:28:df:61:d6:6e:ef:ed:03:32:77:df:c8:03:80:2f:3f: 64:6c:7e:3f:d6:a1:d7:89:79:8e:f6:5d:1b:18:29:b9:94:bb: 9b:70:09:bf:f7:8e:44:1a:0b:6d:aa:48:b1:9d:60:22:0f:dc: 05:82:9b:42:8b:3c:5a:e3:a2:d7:c9:e4:e5:6d:b7:34:eb:04: 06:9b:73:09:11:a1:43:2d:fe:50:96:77:39:80:da:1e:41:a5: bc:1e:5b:c3:35:3c:ab:dd:03:87:21:d3:0c:f5:31:b4:a1:c3: 02:5d:8d:5f:95:16:56:0d:6c:b3:82:a1:84:b6:ae:bd:53:98: 01:df:a9:57:d7:4a:dd:5c:8d:e7:e9:4f:d8:72:5f:01:0a:d0: 6f:13:ea:0e:29:77:51:13:0f:d4:d1:18:70:77:31:9f:44:73: c7:b0:3c:5d:d6:19:95:e5:92:fe:61:c4:f3:f8:cc:64:2c:f5: c5:6a:c3:8e:43:e6:eb:84:0b:97:57:c8:0d:b9:ae:0f:2b:ba: 5d:5c:39:cc:f4:0b:27:67:4e:72:7c:89:67:2e:76:8b:b6:16: 7b:73:f5:b8:d9:5a:05:19:e7:7d:8f:68:89:e3:e0:46:bf:e9: 03:3d:13:1f:41:ce:75:61:df:82:df:e3:4f:f4:6d:89:e0:13: d5:4c:d4:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OUUxMTAvBgNVBAUTKDA5NDA3RjcwRjk3NzE2MDBGNEZCQUE3NUMwRkU5Njkw RDhDNjVBMzAwHhcNMjUwOTA3MDQ0ODM2WhcNMjUwOTE0MDQ0ODM2WjAYMRYwFAYD VQQDEw02OGJkMGVhNC1iM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1ZOJGlzOYETQKDpDPjWSCXl4Fe/vXqn+x4d6LF7ZWezLfBMUhV+UYMJi6Cu y//Lmai2ccSMAU54zLLFC/9pHiomQYJCDvaRhRxlfmgHSsHa0qN1Ouv0MWNi6Tvp wKDuS50RuoSkUy77llqu9e5IW0vis2sZKnhlwihOth8a2RRe1RRqtiJgbqnxJE8j Hf9GAcVNQ9vV2R5HeFAfZEA0TlNJ3Gm0/7YJJ/GlSZeJF/b34VMhmkbCwOBsndn4 2oxJPW2VNFjE7BzzpBBxvNl66g2rO8hOb9SSQCKV+R0hHah8aaV1UuzQrrZIfbbQ +5UhYmUVd+IG3K93pRJzIfr0WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/CrZJy gudYDQxYzEn/v1FBfxk5MB8GA1UdIwQYMBaAFAlAf3D5dxYA9PuqdcD+lpDYxlow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5RS8zNTBBRkVCRUE0 NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0ZnRDAtNnAxd1A2V2tOakdX akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5RS8zNTBBRkVCRUE0NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0Zn RDAtNnAxd1A2V2tOakdXakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFgijfYdZu7+0DMnffyAOALz9kbH4/1qHXiXmO9l0bGCm5lLubcAm/ 945EGgttqkixnWAiD9wFgptCizxa46LXyeTlbbc06wQGm3MJEaFDLf5Qlnc5gNoe QaW8HlvDNTyr3QOHIdMM9TG0ocMCXY1flRZWDWyzgqGEtq69U5gB36lX10rdXI3n 6U/Ycl8BCtBvE+oOKXdREw/U0RhwdzGfRHPHsDxd1hmV5ZL+YcTz+MxkLPXFasOO Q+brhAuXV8gNua4PK7pdXDnM9AsnZ05yfIlnLnaLthZ7c/W42VoFGed9j2iJ4+BG v+kDPRMfQc51Yd+C3+NP9G2J4BPVTNQb -----END CERTIFICATE-----Generated at Sun Sep 7 13:52:23 2025 by rpki-client