$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft File: CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json) Hash identifier: p8lqtX0IlWLTgdFhExpvgqlgzwup4/RjC7RuLRzQpVo= Subject key identifier: EA:28:E6:36:4C:BC:D7:F9:F0:D6:C8:58:AB:65:DF:7D:F7:66:AA:0B Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft Manifest number: 0117 Signing time: Sun 15 Jun 2025 04:03:02 +0000 Manifest this update: Sun 15 Jun 2025 04:03:01 +0000 Manifest next update: Sun 22 Jun 2025 04:03:01 +0000 Files and hashes: 1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: UQQ4+ErkeL9ovkSjT8cTplI5KIyTYDafFFeBpz1NIXc=) 2: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: lEc4QJGwk5bvYmoYAomdEIkxOdB1PEJOkUqud1Iy0CI=) 3: AB501A702CDE11EFBC062E74C4F9AE02.roa (hash: oNFEmYACURX8AL5CKdRsG7Ba4gG8bP0+lhNlBuOmVKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Validity Not Before: Jun 15 04:03:01 2025 GMT Not After : Jun 22 04:03:01 2025 GMT Subject: CN=684e45f5-1a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:a3:c6:70:45:3a:c5:9e:2c:6c:94:be:bd: 74:69:92:17:6f:9f:87:54:88:da:26:fb:fb:48:38: 51:ee:0d:9b:7e:1c:bf:66:bf:0d:fd:3a:ac:d8:ed: 7f:69:fa:c5:23:5c:a3:13:24:83:98:33:1c:ea:16: 4d:a4:86:84:b5:41:e6:af:1e:cd:dc:a4:e5:c8:e7: 6a:88:ee:40:b0:b2:5e:fb:84:d1:9a:38:34:c6:6b: 04:0e:3f:8a:01:41:18:8f:83:73:64:4b:b6:ac:dc: 32:49:68:a5:8f:ee:e8:e8:e2:5c:3e:72:4b:e6:13: 70:1f:75:7e:9c:14:78:3c:cb:eb:0a:d9:57:7a:d4: 7a:1e:f5:b7:b0:31:9a:5a:a9:19:af:a9:71:a1:7b: d3:ef:f4:8c:17:ef:fa:be:93:46:90:bb:38:c7:83: 13:d3:31:56:8a:73:bc:d1:3a:de:17:ba:a0:a9:44: 79:d9:b7:ed:5c:4c:63:21:47:a4:d8:51:6d:d5:44: 57:b3:08:00:b6:80:9a:f6:54:42:1f:d4:f4:fa:1a: aa:fe:aa:f4:a8:82:7f:4a:9e:db:64:4a:c8:91:0e: 7b:4f:71:66:d8:16:f0:01:f0:2a:12:ee:f8:c9:d1: af:7c:c2:31:4c:47:2a:63:ad:2d:75:2e:51:34:6a: f6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:28:E6:36:4C:BC:D7:F9:F0:D6:C8:58:AB:65:DF:7D:F7:66:AA:0B X509v3 Authority Key Identifier: keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:76:4a:21:a0:fb:ec:18:37:9e:e1:47:9e:21:f7:8d:bf:04: 8a:1f:11:b9:5f:55:e2:c3:e6:ba:4d:c8:09:e1:96:c8:15:17: 37:66:50:f4:6f:1f:80:a0:10:a4:45:71:fc:97:a9:99:f2:0a: 51:3e:db:6b:bf:5e:23:c3:35:88:b5:2c:75:11:09:f5:55:ba: 16:ca:62:68:d9:5c:9d:b4:37:25:66:54:e4:6d:0f:c7:e2:e0: a0:0f:21:a2:e5:4f:d1:12:e4:ae:4d:07:2b:5d:b9:e2:d0:33: 9a:7e:de:53:c0:1d:a0:f5:d1:cc:e4:98:e3:66:7e:8a:48:62: 78:8e:87:d8:f7:83:8f:2c:58:e5:16:bc:02:7f:7c:3e:e7:41: b3:2d:e8:80:3d:ae:a4:42:5e:61:d4:b5:92:d5:ea:9d:8b:71: 64:13:df:5d:8b:e2:1b:e0:89:09:e0:c9:3f:da:ac:81:ea:4a: 40:ed:b8:4b:ee:eb:e1:02:06:4e:44:91:33:4e:97:a0:23:26: 9c:13:8a:8f:ae:4e:52:b1:03:ba:ca:b9:6d:d2:d5:ae:a8:18: d3:f2:2c:a5:26:62:ff:72:af:ea:17:fe:25:36:18:8e:3e:c5: 1f:a3:9a:f9:e2:6f:b7:96:a2:36:d4:81:e3:d4:27:aa:02:91: 5e:8e:12:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OUUxMTAvBgNVBAUTKDA5NDA3RjcwRjk3NzE2MDBGNEZCQUE3NUMwRkU5Njkw RDhDNjVBMzAwHhcNMjUwNjE1MDQwMzAxWhcNMjUwNjIyMDQwMzAxWjAYMRYwFAYD VQQDEw02ODRlNDVmNS0xYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9CjxnBFOsWeLGyUvr10aZIXb5+HVIjaJvv7SDhR7g2bfhy/Zr8N/Tqs2O1/ afrFI1yjEySDmDMc6hZNpIaEtUHmrx7N3KTlyOdqiO5AsLJe+4TRmjg0xmsEDj+K AUEYj4NzZEu2rNwySWilj+7o6OJcPnJL5hNwH3V+nBR4PMvrCtlXetR6HvW3sDGa WqkZr6lxoXvT7/SMF+/6vpNGkLs4x4MT0zFWinO80TreF7qgqUR52bftXExjIUek 2FFt1URXswgAtoCa9lRCH9T0+hqq/qr0qIJ/Sp7bZErIkQ57T3Fm2BbwAfAqEu74 ydGvfMIxTEcqY60tdS5RNGr2owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoo5jZM vNf58NbIWKtl3333ZqoLMB8GA1UdIwQYMBaAFAlAf3D5dxYA9PuqdcD+lpDYxlow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5RS8zNTBBRkVCRUE0 NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0ZnRDAtNnAxd1A2V2tOakdX akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5RS8zNTBBRkVCRUE0NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0Zn RDAtNnAxd1A2V2tOakdXakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmdkohoPvsGDee4UeeIfeNvwSKHxG5X1Xiw+a6TcgJ4ZbIFRc3ZlD0 bx+AoBCkRXH8l6mZ8gpRPttrv14jwzWItSx1EQn1VboWymJo2VydtDclZlTkbQ/H 4uCgDyGi5U/REuSuTQcrXbni0DOaft5TwB2g9dHM5JjjZn6KSGJ4jofY94OPLFjl FrwCf3w+50GzLeiAPa6kQl5h1LWS1eqdi3FkE99di+Ib4IkJ4Mk/2qyB6kpA7bhL 7uvhAgZORJEzTpegIyacE4qPrk5SsQO6yrlt0tWuqBjT8iylJmL/cq/qF/4lNhiO PsUfo5r54m+3lqI21IHj1CeqApFejhK1 -----END CERTIFICATE-----Generated at Sun Jun 15 09:53:54 2025 by rpki-client