$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft File: CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json) Hash identifier: U/LHD/ELUdf5tvVoD9ye38dvOXNp8Atw3QKVVQLocOs= Subject key identifier: 3D:9B:C6:EC:31:72:B5:CB:50:6B:76:21:1A:92:1F:F4:1B:54:1F:AF Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft Manifest number: 015F Signing time: Wed 05 Nov 2025 04:13:41 +0000 Manifest this update: Wed 05 Nov 2025 04:13:40 +0000 Manifest next update: Wed 12 Nov 2025 04:13:40 +0000 Files and hashes: 1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: Vwe51UKtQVY69ENxBx38ucS4SbwD8MGx1vReT7lU/x0=) 2: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: lEc4QJGwk5bvYmoYAomdEIkxOdB1PEJOkUqud1Iy0CI=) 3: AB501A702CDE11EFBC062E74C4F9AE02.roa (hash: oNFEmYACURX8AL5CKdRsG7Ba4gG8bP0+lhNlBuOmVKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Validity Not Before: Nov 5 04:13:40 2025 GMT Not After : Nov 12 04:13:40 2025 GMT Subject: CN=690acef5-6952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:71:77:5f:48:37:4d:68:d6:f5:f7:e1:d9: fd:6e:21:b9:2c:a7:3e:55:e6:d7:a5:ea:38:02:9d: ba:e6:75:94:28:b6:a7:f2:4e:0f:06:e2:f3:f9:2a: 06:1e:08:1c:a6:eb:94:d5:d3:78:31:f8:6c:e3:87: 7f:c4:5e:6a:84:b7:4f:3b:10:71:d0:c4:39:9b:0e: 34:56:fe:f7:e9:62:b7:30:8d:3f:e6:3e:93:48:5f: ed:79:d8:45:29:0a:08:7f:a2:fd:78:49:45:36:15: e1:3c:0c:e0:b6:d6:a9:22:bc:5a:35:15:f4:f2:29: 8e:63:62:c2:b0:6c:22:5b:ae:56:aa:20:cf:7e:51: 4e:03:23:13:1a:1a:be:27:dc:5a:d2:84:a5:63:0f: be:20:1f:a3:7a:90:a4:d7:75:28:43:30:7d:be:7f: ea:af:e7:85:ad:04:a1:e5:12:b2:a3:fd:bf:69:c3: 39:01:92:82:fa:79:a6:8c:07:44:68:5f:c2:43:47: d3:05:8c:71:9f:ab:a5:81:7d:9e:f6:7a:84:87:0c: 7a:1c:0a:1f:d2:77:df:33:cc:e9:e3:52:d7:68:c4: 45:c9:77:e3:f2:b5:ea:7f:09:77:b9:32:75:e5:3d: d9:13:69:3f:75:52:c2:89:56:e6:23:da:bd:45:f8: 0c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9B:C6:EC:31:72:B5:CB:50:6B:76:21:1A:92:1F:F4:1B:54:1F:AF X509v3 Authority Key Identifier: keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:35:4f:7a:d8:a5:e4:dc:e5:1c:14:ad:ed:62:f9:1a:78:8a: 68:0d:95:ff:2a:a6:fd:15:46:00:b6:b8:55:b3:9d:8c:6e:22: 25:e4:ae:59:01:27:60:94:a1:82:1d:8b:36:08:da:36:a6:1b: bc:c0:f9:b2:18:ad:89:2e:c9:71:ca:88:cc:66:6b:6f:1a:dd: 80:10:92:c7:4f:37:02:6d:65:a8:bb:71:3f:cb:b2:ab:46:1d: 01:1f:f2:e4:41:11:e3:a7:2d:53:56:ca:ce:1e:ab:f0:2a:6e: 01:62:26:5f:22:49:ce:10:5f:13:8d:88:a3:af:c4:34:6d:81: 1d:ef:17:d6:8b:3a:ce:8b:39:08:8f:b1:1d:ed:37:6b:17:73: c0:5f:e3:f9:b3:b5:de:b2:f0:57:c2:ff:3b:95:c3:00:cd:d8: 8c:ce:d0:c6:67:be:af:7c:9d:49:d7:f0:f0:c8:05:15:c5:c3: d5:7a:c5:76:05:24:26:f8:65:7b:8b:c8:58:d5:93:a5:a7:f9: 86:18:00:94:64:10:39:14:fe:3a:14:53:12:08:21:aa:15:e4: a7:bd:40:e8:10:c0:40:c7:04:6d:29:b0:39:97:4d:a5:a4:fa: 67:14:c5:63:b3:29:52:e1:f9:97:e4:48:f6:b5:32:cc:f0:e1: ef:47:eb:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OUUxMTAvBgNVBAUTKDA5NDA3RjcwRjk3NzE2MDBGNEZCQUE3NUMwRkU5Njkw RDhDNjVBMzAwHhcNMjUxMTA1MDQxMzQwWhcNMjUxMTEyMDQxMzQwWjAYMRYwFAYD VQQDEw02OTBhY2VmNS02OTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMBxd19IN01o1vX34dn9biG5LKc+VebXpeo4Ap265nWUKLan8k4PBuLz+SoG HggcpuuU1dN4Mfhs44d/xF5qhLdPOxBx0MQ5mw40Vv736WK3MI0/5j6TSF/tedhF KQoIf6L9eElFNhXhPAzgttapIrxaNRX08imOY2LCsGwiW65WqiDPflFOAyMTGhq+ J9xa0oSlYw++IB+jepCk13UoQzB9vn/qr+eFrQSh5RKyo/2/acM5AZKC+nmmjAdE aF/CQ0fTBYxxn6ulgX2e9nqEhwx6HAof0nffM8zp41LXaMRFyXfj8rXqfwl3uTJ1 5T3ZE2k/dVLCiVbmI9q9RfgMPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2bxuwx crXLUGt2IRqSH/QbVB+vMB8GA1UdIwQYMBaAFAlAf3D5dxYA9PuqdcD+lpDYxlow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5RS8zNTBBRkVCRUE0 NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0ZnRDAtNnAxd1A2V2tOakdX akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5RS8zNTBBRkVCRUE0NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0Zn RDAtNnAxd1A2V2tOakdXakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfNU962KXk3OUcFK3tYvkaeIpoDZX/Kqb9FUYAtrhVs52MbiIl5K5Z ASdglKGCHYs2CNo2phu8wPmyGK2JLslxyojMZmtvGt2AEJLHTzcCbWWou3E/y7Kr Rh0BH/LkQRHjpy1TVsrOHqvwKm4BYiZfIknOEF8TjYijr8Q0bYEd7xfWizrOizkI j7Ed7TdrF3PAX+P5s7XesvBXwv87lcMAzdiMztDGZ76vfJ1J1/DwyAUVxcPVesV2 BSQm+GV7i8hY1ZOlp/mGGACUZBA5FP46FFMSCCGqFeSnvUDoEMBAxwRtKbA5l02l pPpnFMVjsylS4fmX5Ej2tTLM8OHvR+uo -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:45 2025 by rpki-client