$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft File: CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json) Hash identifier: lVdvbn/sgPwwjcbxHmVnmi6WnYwqjFCADvU928UXlxk= Subject key identifier: 77:4E:AA:7A:E5:7D:D3:61:DE:32:16:7D:F8:1F:69:93:E9:38:A5:8D Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft Manifest number: 01AF Signing time: Wed 25 Mar 2026 03:25:32 +0000 Manifest this update: Wed 25 Mar 2026 03:25:31 +0000 Manifest next update: Wed 01 Apr 2026 03:25:31 +0000 Files and hashes: 1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: lttwslVAsPrSCgFtN3/FetWUfMXBGlT1TGuFEOe3wLM=) 2: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: g8MO/QgVBv9RweRV0mXs2iLPhyz7OUiWR60sGCOPFiA=) 3: DE2E716626DE11F18929E99D92833773.roa (hash: M2tO02HFUs50RonBzNe9MwYdR9Tkq6+PZdU5UbshAKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Validity Not Before: Mar 25 03:25:31 2026 GMT Not After : Apr 1 03:25:31 2026 GMT Subject: CN=69c355ac-b0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8a:82:ee:63:29:b8:7a:90:e5:df:1e:cb:bc: db:8b:be:6c:49:fd:7e:7c:9c:54:5a:df:a2:53:1c: ea:29:71:71:45:55:a3:7e:2b:3f:7e:8c:11:bd:bf: fe:99:5a:30:55:5c:85:95:06:3e:82:ef:ab:0b:ed: 6c:d6:e5:7d:04:80:41:25:97:9d:b0:2c:ec:b0:0e: bf:0c:d2:d1:3a:83:cb:62:7b:45:23:d7:0e:52:2a: d2:58:3a:2a:ca:6f:f2:58:b9:91:36:d6:cf:72:b9: c0:6f:bd:83:3e:38:e1:7f:2f:a9:e0:3d:b1:57:64: 35:1d:80:0e:89:dd:03:06:91:e2:75:91:2f:9a:0f: e1:84:ec:76:e6:b5:8f:e3:ad:13:68:c5:97:6c:93: 83:be:5e:96:5c:26:f4:6b:6c:51:27:76:08:61:80: 3f:fd:ab:1a:82:4c:60:e8:84:b0:70:f3:94:98:36: 81:90:56:df:3a:60:65:c4:e1:08:b6:ef:54:a4:6c: 36:10:b9:44:28:b7:89:0f:a5:a0:a7:44:a7:f2:79: 2c:17:66:17:9d:24:43:88:73:e0:ee:94:74:33:70: ed:10:c7:83:b4:98:27:67:56:55:03:b5:f8:07:b0: fe:63:21:74:12:cf:82:af:5e:43:19:8b:4d:17:e8: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4E:AA:7A:E5:7D:D3:61:DE:32:16:7D:F8:1F:69:93:E9:38:A5:8D X509v3 Authority Key Identifier: keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:0f:28:1f:3c:cc:67:4f:d1:32:dc:41:bf:08:6f:ae:8f:ea: df:c2:2a:8d:65:30:c2:cb:90:bc:59:bd:f7:f3:34:35:7d:e8: 1d:4e:65:37:aa:6c:b8:7c:c9:1a:99:5b:28:af:7a:83:58:4c: a7:f7:77:c7:74:b2:b0:bc:a9:96:cc:5c:24:b5:6f:b9:c6:30: 86:37:25:e5:07:87:15:26:9d:ac:e7:2f:a6:6b:6b:c4:16:55: 50:9d:1e:fc:4e:65:97:28:ad:e7:80:6f:eb:84:35:dd:01:15: b3:fe:f2:d0:0a:56:b7:df:e5:e0:bb:c3:2b:bf:0e:e1:6c:5f: 84:d8:4a:1f:ad:91:bb:ea:2c:c4:f3:5c:4f:92:02:09:ab:90: f0:19:ca:4d:c4:49:f4:f8:8a:2d:b7:fa:14:3c:69:27:ee:eb: 54:13:ec:9f:61:a1:00:d1:4c:99:3d:cb:dd:82:5b:bb:0e:8f: 8b:87:1c:47:a5:5b:11:ab:1c:2f:ac:93:fe:0e:1d:68:c3:e4: dc:25:7e:ce:28:0f:9e:e1:5e:0a:7c:06:f7:6f:50:aa:a8:a8: e7:15:76:26:f9:04:c1:9b:e9:bb:9a:24:80:8a:38:63:3b:f6: 08:8c:eb:f4:f2:2e:50:d3:a2:3d:b9:b4:ce:cd:46:bc:f3:c3: 8d:6b:43:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OUUxMTAvBgNVBAUTKDA5NDA3RjcwRjk3NzE2MDBGNEZCQUE3NUMwRkU5Njkw RDhDNjVBMzAwHhcNMjYwMzI1MDMyNTMxWhcNMjYwNDAxMDMyNTMxWjAYMRYwFAYD VQQDEw02OWMzNTVhYy1iMGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooqC7mMpuHqQ5d8ey7zbi75sSf1+fJxUWt+iUxzqKXFxRVWjfis/fowRvb/+ mVowVVyFlQY+gu+rC+1s1uV9BIBBJZedsCzssA6/DNLROoPLYntFI9cOUirSWDoq ym/yWLmRNtbPcrnAb72DPjjhfy+p4D2xV2Q1HYAOid0DBpHidZEvmg/hhOx25rWP 460TaMWXbJODvl6WXCb0a2xRJ3YIYYA//asagkxg6ISwcPOUmDaBkFbfOmBlxOEI tu9UpGw2ELlEKLeJD6Wgp0Sn8nksF2YXnSRDiHPg7pR0M3DtEMeDtJgnZ1ZVA7X4 B7D+YyF0Es+Cr15DGYtNF+hoJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHdOqnrl fdNh3jIWffgfaZPpOKWNMB8GA1UdIwQYMBaAFAlAf3D5dxYA9PuqdcD+lpDYxlow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5RS8zNTBBRkVCRUE0 NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0ZnRDAtNnAxd1A2V2tOakdX akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5RS8zNTBBRkVCRUE0NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0Zn RDAtNnAxd1A2V2tOakdXakEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUw8oHzzMZ0/RMtxBvwhvro/q38IqjWUwwsuQvFm99/M0NX3oHU5lN6psuHzJ GplbKK96g1hMp/d3x3SysLyplsxcJLVvucYwhjcl5QeHFSadrOcvpmtrxBZVUJ0e /E5llyit54Bv64Q13QEVs/7y0ApWt9/l4LvDK78O4WxfhNhKH62Ru+osxPNcT5IC CauQ8BnKTcRJ9PiKLbf6FDxpJ+7rVBPsn2GhANFMmT3L3YJbuw6Pi4ccR6VbEasc L6yT/g4daMPk3CV+zigPnuFeCnwG929Qqqio5xV2JvkEwZvpu5okgIo4Yzv2CIzr 9PIuUNOiPbm0zs1GvPPDjWtDcQ== -----END CERTIFICATE-----Generated at Thu Mar 26 06:07:30 2026 by rpki-client