$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft File: CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json) Hash identifier: rCpM8/BPoUndJQ2InID2uYji84IZto9q1aZOG8Oqbds= Subject key identifier: FA:A8:14:D1:F0:79:8D:38:FF:AE:48:4D:C2:54:BF:A3:21:29:82:4F Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft Manifest number: 0107 Signing time: Tue 13 May 2025 04:15:57 +0000 Manifest this update: Tue 13 May 2025 04:15:56 +0000 Manifest next update: Tue 20 May 2025 04:15:56 +0000 Files and hashes: 1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: MMdAzL9gKaxUnWkyl+KM3rwFLCic1Yjsk0hElgvPTaA=) 2: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: lEc4QJGwk5bvYmoYAomdEIkxOdB1PEJOkUqud1Iy0CI=) 3: AB501A702CDE11EFBC062E74C4F9AE02.roa (hash: oNFEmYACURX8AL5CKdRsG7Ba4gG8bP0+lhNlBuOmVKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Validity Not Before: May 13 04:15:56 2025 GMT Not After : May 20 04:15:56 2025 GMT Subject: CN=6822c77c-90c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:65:37:d1:23:a8:a0:7c:5e:f0:84:60:ac: 3b:00:4b:66:76:77:e1:11:2f:79:d0:b3:1f:0b:e6: 40:e2:e8:e7:a8:af:89:da:9a:0a:86:68:4b:07:da: 64:d7:65:02:b0:37:08:6e:14:03:fe:1e:d3:1c:09: fc:a8:d2:aa:25:47:4f:49:de:c2:b1:ef:cb:c6:36: b3:b7:23:a2:41:1f:4d:b0:83:e3:56:a5:2c:50:de: ea:c8:ec:23:5c:b9:39:3b:19:59:30:2c:36:97:f4: 44:a6:1b:b7:21:8f:0c:f9:29:eb:af:e7:bc:a1:d0: 48:41:70:63:35:0a:14:50:79:89:58:61:cf:75:0c: 2c:bf:ef:15:6c:bd:75:db:4d:a8:de:66:22:c7:0f: f7:34:68:ad:40:a9:34:d1:26:46:34:e9:6d:98:86: 7d:4b:54:76:f7:75:2c:16:c8:9e:7d:e0:94:59:0d: 34:19:a4:b7:dd:10:17:22:d7:71:14:57:c7:fb:21: 37:80:83:02:9b:fc:98:ca:f5:df:5a:24:d5:8b:31: 20:8d:1b:a1:54:ba:62:b9:72:ba:76:27:bb:22:55: c6:85:6e:7b:a1:ea:50:2f:86:9f:f1:44:54:ed:df: 00:63:ae:87:54:f0:27:a0:72:56:b3:23:fd:d5:ff: 7d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A8:14:D1:F0:79:8D:38:FF:AE:48:4D:C2:54:BF:A3:21:29:82:4F X509v3 Authority Key Identifier: keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:9e:22:f8:89:16:37:65:f8:bf:11:51:f9:fa:4d:0c:9a:04: 92:db:89:5f:9b:a0:1f:33:71:33:e5:13:6e:c0:09:fd:1c:28: 94:ff:97:b3:30:ad:a8:69:25:ab:46:e9:6b:1e:49:70:92:4b: b7:3d:5d:69:84:b3:67:77:65:6b:19:eb:13:a3:ee:02:0b:68: d3:3d:6f:6d:3a:bc:f8:82:bb:32:16:d4:7d:a6:dc:74:e3:79: 1f:22:01:8d:18:a0:75:ba:fd:10:9a:73:d9:7c:df:01:dc:40: 03:bb:00:82:63:d5:62:35:2f:55:4a:6a:89:1a:c3:2e:b1:80: e6:b9:36:08:66:83:b1:3a:26:d4:8b:32:20:ef:9d:25:74:eb: c0:af:96:7d:c3:1b:26:c4:b3:68:3e:77:61:97:23:ee:90:dd: cf:59:af:f4:a6:cd:a2:77:bc:6a:4d:9d:40:87:fd:88:dc:5b: a9:e8:26:ae:9a:10:32:35:d5:ba:7f:d0:ab:9a:e7:71:62:c1: ca:21:17:49:0a:7f:bd:55:22:1d:5d:46:c3:bd:d8:f2:7b:8d: ae:49:74:a9:da:32:77:7b:ab:dd:95:b3:25:c7:63:ae:32:8c: eb:77:cd:6c:1e:40:d6:b1:dd:56:6a:c4:69:20:4f:2e:08:b6: 0d:24:1d:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OUUxMTAvBgNVBAUTKDA5NDA3RjcwRjk3NzE2MDBGNEZCQUE3NUMwRkU5Njkw RDhDNjVBMzAwHhcNMjUwNTEzMDQxNTU2WhcNMjUwNTIwMDQxNTU2WjAYMRYwFAYD VQQDEw02ODIyYzc3Yy05MGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkRlN9EjqKB8XvCEYKw7AEtmdnfhES950LMfC+ZA4ujnqK+J2poKhmhLB9pk 12UCsDcIbhQD/h7THAn8qNKqJUdPSd7Cse/LxjaztyOiQR9NsIPjVqUsUN7qyOwj XLk5OxlZMCw2l/REphu3IY8M+Snrr+e8odBIQXBjNQoUUHmJWGHPdQwsv+8VbL11 202o3mYixw/3NGitQKk00SZGNOltmIZ9S1R293UsFsiefeCUWQ00GaS33RAXItdx FFfH+yE3gIMCm/yYyvXfWiTVizEgjRuhVLpiuXK6die7IlXGhW57oepQL4af8URU 7d8AY66HVPAnoHJWsyP91f99jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqoFNHw eY04/65ITcJUv6MhKYJPMB8GA1UdIwQYMBaAFAlAf3D5dxYA9PuqdcD+lpDYxlow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5RS8zNTBBRkVCRUE0 NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0ZnRDAtNnAxd1A2V2tOakdX akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5RS8zNTBBRkVCRUE0NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0Zn RDAtNnAxd1A2V2tOakdXakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiniL4iRY3Zfi/EVH5+k0MmgSS24lfm6AfM3Ez5RNuwAn9HCiU/5ez MK2oaSWrRulrHklwkku3PV1phLNnd2VrGesTo+4CC2jTPW9tOrz4grsyFtR9ptx0 43kfIgGNGKB1uv0QmnPZfN8B3EADuwCCY9ViNS9VSmqJGsMusYDmuTYIZoOxOibU izIg750ldOvAr5Z9wxsmxLNoPndhlyPukN3PWa/0ps2id7xqTZ1Ah/2I3Fup6Cau mhAyNdW6f9CrmudxYsHKIRdJCn+9VSIdXUbDvdjye42uSXSp2jJ3e6vdlbMlx2Ou Mozrd81sHkDWsd1WasRpIE8uCLYNJB3k -----END CERTIFICATE-----Generated at Wed May 14 17:13:04 2025 by rpki-client