$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft File: CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json) Hash identifier: /Bs8hZx1NXsUiJT+V0DXj1WQVSvBYTSCYBaOJh6npNQ= Subject key identifier: 43:06:A2:78:2A:AF:9F:E5:18:75:CF:95:38:03:97:AF:E0:F6:B8:E0 Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft Manifest number: 01C8 Signing time: Wed 13 May 2026 03:55:00 +0000 Manifest this update: Wed 13 May 2026 03:55:00 +0000 Manifest next update: Wed 20 May 2026 03:55:00 +0000 Files and hashes: 1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: CNWyqW0DAYlI6rbsmwsT9NwLpk1j1DDw0hf+WQ2kxG8=) 2: DE2E716626DE11F18929E99D92833773.roa (hash: M2tO02HFUs50RonBzNe9MwYdR9Tkq6+PZdU5UbshAKM=) 3: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: g8MO/QgVBv9RweRV0mXs2iLPhyz7OUiWR60sGCOPFiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Validity Not Before: May 13 03:55:00 2026 GMT Not After : May 20 03:55:00 2026 GMT Subject: CN=6a03f614-c8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:51:f6:f5:6c:d3:cb:1d:24:26:26:c4:e7:30: 49:1b:3c:a7:c4:2b:d2:e2:98:aa:1a:6d:ff:4d:74: 04:6d:c9:a7:8a:a9:37:89:56:99:8e:2b:65:0f:a3: 94:93:85:2e:bb:d2:a8:9e:4b:13:7f:40:fa:52:bb: ca:db:e1:0a:24:33:68:fe:e0:8e:68:ff:b9:39:00: f6:5a:06:3d:40:3e:9b:be:3d:06:f8:36:0e:79:e8: 83:82:fd:92:be:4f:00:c7:3b:01:d5:a1:4f:d8:8f: 19:74:ee:56:e6:d0:38:82:14:a1:6e:79:15:5b:64: 3d:8f:25:40:ae:ac:35:70:53:df:77:6a:28:b9:03: 1a:85:c2:92:94:5b:b5:67:bf:8b:3d:0a:4b:cb:ab: c9:1e:3e:3e:aa:9f:1f:bf:ac:8e:2a:2b:4b:33:0f: fe:91:0e:0b:4e:76:b7:5d:9c:d4:85:1c:38:e3:6b: a6:f0:12:11:f9:fc:56:9b:d7:38:b0:e6:bf:17:b9: 3f:89:3c:b7:e1:b2:83:2a:97:c7:eb:e5:50:4c:48: 80:7f:22:ce:c1:9c:13:2a:11:8f:14:79:ee:05:4b: b6:fa:24:8e:19:d9:04:ab:fa:e5:d2:fc:07:fa:72: c7:64:48:f6:ba:62:d2:db:8c:ad:50:d6:64:30:47: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:06:A2:78:2A:AF:9F:E5:18:75:CF:95:38:03:97:AF:E0:F6:B8:E0 X509v3 Authority Key Identifier: keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:55:95:97:dc:e1:d1:bd:44:17:52:23:3e:38:1b:5a:a0:f1: de:07:c2:3e:be:d0:92:2d:95:c5:6e:15:c0:7a:5f:7e:f1:f9: a4:fe:c0:bd:50:e7:3c:33:44:5b:16:d5:ac:2f:3e:55:36:c2: 0c:88:6d:21:20:18:24:5a:a6:35:06:9d:89:b5:83:b6:b4:0c: 9b:21:2f:67:66:9c:50:5a:a8:c3:d3:53:06:06:6b:82:e1:6e: 90:4a:ec:c6:b4:ec:bd:55:0e:7e:f5:4e:d6:80:34:26:10:a8: 13:41:72:f0:79:60:e6:10:43:b3:0e:83:e2:20:cf:f0:27:68: 79:d3:44:25:84:cf:50:b7:32:66:0a:58:a3:cf:b6:a5:20:20: 2b:8a:01:79:e8:05:ba:86:6a:66:7d:ff:da:1b:f3:58:d2:39: 90:92:c9:fa:21:38:c4:33:dc:ec:fd:e8:51:0f:d8:a9:98:e7: 51:2a:13:e7:13:69:ea:7d:be:91:da:99:bc:0f:22:97:ba:6a: ba:8d:b5:16:6b:b0:40:74:9f:db:6c:67:ae:9d:90:7b:f6:ed: 98:ce:85:e2:fb:73:46:7c:1b:85:7d:b5:ab:27:50:96:31:76: 3d:5a:67:87:69:c5:bf:54:11:45:88:fd:5e:81:59:b8:c0:f6: 1e:65:cf:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OUUxMTAvBgNVBAUTKDA5NDA3RjcwRjk3NzE2MDBGNEZCQUE3NUMwRkU5Njkw RDhDNjVBMzAwHhcNMjYwNTEzMDM1NTAwWhcNMjYwNTIwMDM1NTAwWjAYMRYwFAYD VQQDEw02YTAzZjYxNC1jOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolH29WzTyx0kJibE5zBJGzynxCvS4piqGm3/TXQEbcmniqk3iVaZjitlD6OU k4Uuu9KonksTf0D6UrvK2+EKJDNo/uCOaP+5OQD2WgY9QD6bvj0G+DYOeeiDgv2S vk8AxzsB1aFP2I8ZdO5W5tA4ghShbnkVW2Q9jyVArqw1cFPfd2oouQMahcKSlFu1 Z7+LPQpLy6vJHj4+qp8fv6yOKitLMw/+kQ4LTna3XZzUhRw442um8BIR+fxWm9c4 sOa/F7k/iTy34bKDKpfH6+VQTEiAfyLOwZwTKhGPFHnuBUu2+iSOGdkEq/rl0vwH +nLHZEj2umLS24ytUNZkMEdkTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMGongq r5/lGHXPlTgDl6/g9rjgMB8GA1UdIwQYMBaAFAlAf3D5dxYA9PuqdcD+lpDYxlow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5RS8zNTBBRkVCRUE0 NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0ZnRDAtNnAxd1A2V2tOakdX akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5RS8zNTBBRkVCRUE0NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0Zn RDAtNnAxd1A2V2tOakdXakEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAClWVl9zh0b1EF1IjPjgbWqDx3gfCPr7Qki2VxW4VwHpffvH5pP7AvVDnPDNE WxbVrC8+VTbCDIhtISAYJFqmNQadibWDtrQMmyEvZ2acUFqow9NTBgZrguFukErs xrTsvVUOfvVO1oA0JhCoE0Fy8Hlg5hBDsw6D4iDP8CdoedNEJYTPULcyZgpYo8+2 pSAgK4oBeegFuoZqZn3/2hvzWNI5kJLJ+iE4xDPc7P3oUQ/YqZjnUSoT5xNp6n2+ kdqZvA8il7pquo21FmuwQHSf22xnrp2Qe/btmM6F4vtzRnwbhX21qydQljF2PVpn h2nFv1QRRYj9XoFZuMD2HmXPCg== -----END CERTIFICATE-----Generated at Wed May 13 14:19:25 2026 by rpki-client