$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft File: CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json) Hash identifier: TNdWnNke5R8hpBCtIYVdUcWMSJ8x4NcNHYcgvRRCfA0= Subject key identifier: 4B:9B:F3:DA:D3:D7:4E:8A:25:6A:20:30:AC:56:27:23:76:C1:7E:54 Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft Manifest number: 019F Signing time: Mon 02 Mar 2026 01:36:44 +0000 Manifest this update: Mon 02 Mar 2026 01:36:43 +0000 Manifest next update: Mon 09 Mar 2026 01:36:43 +0000 Files and hashes: 1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: KsSKQVnNh788GuHj0qpL/1pQY50uX0cVzLaTgXyftNA=) 2: AB501A702CDE11EFBC062E74C4F9AE02.roa (hash: VEN+vwTbn8fqzsJJwcL5sX4yPIqb2hmetuXIhOmSJ9Y=) 3: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: g8MO/QgVBv9RweRV0mXs2iLPhyz7OUiWR60sGCOPFiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Validity Not Before: Mar 2 01:36:43 2026 GMT Not After : Mar 9 01:36:43 2026 GMT Subject: CN=69a4e9ac-1013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1a:07:7e:a3:88:9e:ba:67:db:a6:d9:c1:b3: 6c:dc:1b:eb:e7:c4:06:d4:0d:d6:50:38:fc:85:f9: ff:d6:0a:41:ad:56:e6:2d:96:b5:6b:c5:76:4e:57: ad:30:64:28:fc:bf:fe:d2:b6:8b:80:ed:96:41:90: 85:5f:60:c8:7c:9d:e5:3c:fe:05:4f:07:f2:d5:9f: 4f:d9:08:00:e8:b6:8b:1d:09:79:d8:1d:4e:1e:45: ff:dd:d5:7e:fc:04:c6:f1:31:24:69:3e:26:d7:fa: 29:6c:2c:12:e9:66:0e:c3:1a:57:73:6b:4e:1e:75: 83:60:26:d2:df:df:66:6d:41:7a:5a:0f:27:7d:ea: 54:b2:b5:6f:b9:25:d4:96:75:6c:bc:a1:58:27:7f: 22:83:ca:bc:24:7b:1f:38:26:a7:1d:9a:4f:61:8d: 84:af:a4:ff:79:ed:e6:8b:ac:ef:14:ce:69:0e:56: 86:64:99:7d:fd:9a:9f:89:0f:ca:9b:60:9e:e8:1c: 75:d3:4e:8b:50:d8:17:5c:98:d0:00:1d:e9:d6:cb: 4d:f3:e7:31:8e:6c:0a:c1:14:76:6e:cd:ab:3d:8b: 30:44:ce:c5:d9:0e:26:09:51:0a:72:06:30:82:7b: 15:6c:03:22:33:0a:24:7d:fd:44:d1:7e:95:cd:6a: f5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9B:F3:DA:D3:D7:4E:8A:25:6A:20:30:AC:56:27:23:76:C1:7E:54 X509v3 Authority Key Identifier: keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:8b:e1:20:e6:09:25:df:ff:13:07:c6:5c:e5:bb:94:81:77: 37:52:57:e1:d9:8f:17:e9:26:56:c8:b4:cc:24:48:62:f4:8d: 9e:d0:22:85:4b:73:b7:b1:fa:b8:c8:1a:91:8e:81:d3:db:23: 85:10:6a:c0:07:70:4a:89:ba:ad:85:d1:de:68:9c:fa:9f:0c: e3:5d:f1:db:20:a6:0d:98:27:06:e7:da:45:a8:3d:bb:d2:c0: 32:0a:e2:94:ce:f9:23:09:b7:66:14:94:54:cd:41:1b:9f:4c: c6:c8:3d:de:d0:a5:d8:8c:94:b5:95:2b:0d:3b:e3:a4:42:de: c5:be:f0:86:7d:e6:bc:e4:a8:61:cd:f4:2a:a1:8b:50:ad:7f: 01:d7:f6:d4:fd:e1:25:9e:aa:42:70:22:d0:6f:da:75:1a:c4: f3:32:f2:f3:a6:db:23:05:e4:a9:15:49:8e:39:2b:02:7e:9f: bb:ce:fa:54:2b:7d:21:fb:34:72:7d:1f:74:32:22:eb:fe:27: 97:72:49:d8:69:09:b4:09:a2:a4:e6:7d:a1:19:fa:39:04:dd: 15:fd:fc:4c:4c:ac:36:99:d6:58:c5:6f:b0:1f:1e:c6:8e:4e: 4e:f9:bc:ac:bc:79:3a:66:6e:de:3f:ab:81:d5:be:1f:50:60: ff:02:9b:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OUUxMTAvBgNVBAUTKDA5NDA3RjcwRjk3NzE2MDBGNEZCQUE3NUMwRkU5Njkw RDhDNjVBMzAwHhcNMjYwMzAyMDEzNjQzWhcNMjYwMzA5MDEzNjQzWjAYMRYwFAYD VQQDEw02OWE0ZTlhYy0xMDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRoHfqOInrpn26bZwbNs3Bvr58QG1A3WUDj8hfn/1gpBrVbmLZa1a8V2Tlet MGQo/L/+0raLgO2WQZCFX2DIfJ3lPP4FTwfy1Z9P2QgA6LaLHQl52B1OHkX/3dV+ /ATG8TEkaT4m1/opbCwS6WYOwxpXc2tOHnWDYCbS399mbUF6Wg8nfepUsrVvuSXU lnVsvKFYJ38ig8q8JHsfOCanHZpPYY2Er6T/ee3mi6zvFM5pDlaGZJl9/ZqfiQ/K m2Ce6Bx1006LUNgXXJjQAB3p1stN8+cxjmwKwRR2bs2rPYswRM7F2Q4mCVEKcgYw gnsVbAMiMwokff1E0X6VzWr1lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEub89rT 106KJWogMKxWJyN2wX5UMB8GA1UdIwQYMBaAFAlAf3D5dxYA9PuqdcD+lpDYxlow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5RS8zNTBBRkVCRUE0 NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0ZnRDAtNnAxd1A2V2tOakdX akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5RS8zNTBBRkVCRUE0NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0Zn RDAtNnAxd1A2V2tOakdXakEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZIvhIOYJJd//EwfGXOW7lIF3N1JX4dmPF+kmVsi0zCRIYvSNntAihUtzt7H6 uMgakY6B09sjhRBqwAdwSom6rYXR3mic+p8M413x2yCmDZgnBufaRag9u9LAMgri lM75Iwm3ZhSUVM1BG59Mxsg93tCl2IyUtZUrDTvjpELexb7whn3mvOSoYc30KqGL UK1/Adf21P3hJZ6qQnAi0G/adRrE8zLy86bbIwXkqRVJjjkrAn6fu876VCt9Ifs0 cn0fdDIi6/4nl3JJ2GkJtAmipOZ9oRn6OQTdFf38TEysNpnWWMVvsB8exo5OTvm8 rLx5OmZu3j+rgdW+H1Bg/wKbmA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:20:24 2026 by rpki-client