$ rpki-client -vvvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft File: CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json) Hash identifier: IVl2EVyTEAhTK5XkW4HIV4Hig9Nd8V925cGuo0R7cyM= Subject key identifier: 0F:1A:90:DB:21:6C:F4:A3:61:35:1D:19:27:21:8B:87:50:22:F6:D7 Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft Manifest number: 020F Signing time: Sun 27 Sep 2026 03:29:56 +0000 Manifest this update: Sun 27 Sep 2026 03:29:55 +0000 Manifest next update: Sun 04 Oct 2026 03:29:55 +0000 Files and hashes: 1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: TqWJa6xbgmSawTFlrygnEO5gfvLgMbrjIXUcj/UHvZ0=) 2: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: g8MO/QgVBv9RweRV0mXs2iLPhyz7OUiWR60sGCOPFiA=) 3: 041950007AF711F1B5389C4A7CA30FBC.roa (hash: ZQm4gg0UcoRXA3T9IbH6qYG20ZeLgRrEo6RJPrcej1U=) 4: 02B26A4E7AF711F1B5389C4A7CA30FBC.roa (hash: 5qfHQNG0aq9493/lfw8uRLZyVq2LvrMtJfsh9yp6uaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 03:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Validity Not Before: Sep 27 03:29:55 2026 GMT Not After : Oct 4 03:29:55 2026 GMT Subject: CN=6ab88db4-b978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:e0:dd:c1:3f:91:34:34:a6:b3:6e:2b:19: 16:0f:54:29:0b:03:6e:89:8f:39:8b:d2:98:ef:cf: 57:9f:8c:09:02:e6:6f:bf:4d:00:00:b7:c8:12:83: cb:7c:92:6f:dd:d1:c7:be:73:7d:60:3f:58:65:13: 10:50:80:be:bd:d3:f9:3f:98:27:11:4c:02:04:d4: 7e:98:75:e2:ac:db:cd:3a:0c:b5:22:43:0c:9d:4c: 1f:7f:03:16:26:78:14:df:2f:f6:57:e4:fe:32:65: f6:a5:6d:ff:2f:f6:06:90:77:1d:bc:c6:b7:ed:a9: ec:5a:b0:3c:e4:e9:4f:8e:55:92:83:47:2e:34:d5: 68:70:31:c6:43:cf:50:75:04:ba:d7:64:f9:44:a8: 59:d6:bf:11:4d:b3:0f:20:6a:4a:d3:76:a5:2b:3a: c7:e3:3d:31:f5:7d:13:f2:94:86:06:b4:95:42:b4: 89:8b:b0:40:66:3b:fd:16:cb:87:e1:41:23:87:49: fd:7f:b8:e3:be:16:fc:f3:9f:36:3d:8d:8b:9c:66: 5a:17:85:43:49:3f:ab:95:8f:37:4b:fd:98:cb:49: c9:36:5f:52:98:ab:d0:84:45:89:8b:b6:85:34:95: 08:a8:40:e8:13:2e:7c:a0:da:d4:95:1e:3d:f7:57: b4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1A:90:DB:21:6C:F4:A3:61:35:1D:19:27:21:8B:87:50:22:F6:D7 X509v3 Authority Key Identifier: keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5c:90:75:81:ef:d7:42:54:bf:c5:36:b0:dc:ff:f9:15:23: f2:4d:da:e6:fe:c9:5b:e2:ed:ad:2a:54:d8:02:5d:b1:42:46: ff:23:49:f1:05:84:4b:c6:eb:e7:e9:81:b8:b5:35:ff:b2:49: 2b:7c:1c:ed:d0:12:74:ae:be:7b:48:36:ab:64:e3:fc:81:86: 43:99:23:22:53:d2:99:46:16:c3:fe:11:cf:e5:7d:e9:d2:e6: 8c:70:bc:f7:88:a8:21:09:53:10:6b:a5:76:e7:28:0f:1d:c8: d8:db:dd:e2:66:8b:2b:e6:61:fd:69:8c:7e:a9:ae:30:d4:be: 2c:4f:3e:5d:cc:d0:27:d1:3d:ad:6f:9f:e1:dd:a0:79:4b:97: d6:7c:63:d5:d8:35:f1:f0:89:44:2c:d3:8b:ed:b4:35:fc:04: 77:62:01:98:64:06:57:ab:a4:b8:72:4d:f1:0e:a0:b8:78:e0: a2:95:5e:cb:eb:c6:8f:d9:26:01:b0:5d:ec:ec:7c:0d:03:ce: b7:49:bf:3e:4f:37:1e:91:13:f8:c1:0f:a6:22:8e:87:85:c4: 40:af:ad:8f:1f:42:6c:24:74:ff:c9:e0:f0:91:35:a3:1f:56: 27:f0:8c:91:54:47:89:35:f4:10:3f:9f:35:76:f1:ef:c9:36: 08:37:8e:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OUUxMTAvBgNVBAUTKDA5NDA3RjcwRjk3NzE2MDBGNEZCQUE3NUMwRkU5Njkw RDhDNjVBMzAwHhcNMjYwOTI3MDMyOTU1WhcNMjYxMDA0MDMyOTU1WjAYMRYwFAYD VQQDEw02YWI4OGRiNC1iOTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyG/g3cE/kTQ0prNuKxkWD1QpCwNuiY85i9KY789Xn4wJAuZvv00AALfIEoPL fJJv3dHHvnN9YD9YZRMQUIC+vdP5P5gnEUwCBNR+mHXirNvNOgy1IkMMnUwffwMW JngU3y/2V+T+MmX2pW3/L/YGkHcdvMa37ansWrA85OlPjlWSg0cuNNVocDHGQ89Q dQS612T5RKhZ1r8RTbMPIGpK03alKzrH4z0x9X0T8pSGBrSVQrSJi7BAZjv9FsuH 4UEjh0n9f7jjvhb88582PY2LnGZaF4VDST+rlY83S/2Yy0nJNl9SmKvQhEWJi7aF NJUIqEDoEy58oNrUlR4991e0gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8akNsh bPSjYTUdGSchi4dQIvbXMB8GA1UdIwQYMBaAFAlAf3D5dxYA9PuqdcD+lpDYxlow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5RS8zNTBBRkVCRUE0 NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0ZnRDAtNnAxd1A2V2tOakdX akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5RS8zNTBBRkVCRUE0NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0Zn RDAtNnAxd1A2V2tOakdXakEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjlyQdYHv10JUv8U2sNz/+RUj8k3a5v7JW+LtrSpU2AJdsUJG/yNJ8QWES8br 5+mBuLU1/7JJK3wc7dASdK6+e0g2q2Tj/IGGQ5kjIlPSmUYWw/4Rz+V96dLmjHC8 94ioIQlTEGulducoDx3I2Nvd4maLK+Zh/WmMfqmuMNS+LE8+XczQJ9E9rW+f4d2g eUuX1nxj1dg18fCJRCzTi+20NfwEd2IBmGQGV6ukuHJN8Q6guHjgopVey+vGj9km AbBd7Ox8DQPOt0m/Pk83HpET+MEPpiKOh4XEQK+tjx9CbCR0/8ng8JE1ox9WJ/CM kVRHiTX0ED+fNXbx78k2CDeOKQ== -----END CERTIFICATE-----Generated at Mon Sep 28 06:23:26 2026 by rpki-client