$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: BfuLEUPclWO/8Zx0w9LJ/G+x5a+/G/zlSZm4KcZVnuA= Subject key identifier: CC:35:DB:78:17:3D:A2:F7:75:A9:30:40:4A:F2:22:0C:04:10:2F:04 Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: 010B Signing time: Sat 29 Mar 2025 04:23:43 +0000 Manifest this update: Sat 29 Mar 2025 04:23:43 +0000 Manifest next update: Sat 05 Apr 2025 04:23:43 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: TIveIXEdXQar8ese+dnOIvKVNI0riz4p1ExLEEN80eM=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: N2i2agjUsHeAH/r62Q8YVpeahgIj+1qwNN91iqqJ1uM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847 Validity Not Before: Mar 29 04:23:43 2025 GMT Not After : Apr 5 04:23:43 2025 GMT Subject: CN=67e775cf-6914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:99:7c:74:90:03:01:7d:5f:e6:22:c2:7e:48: 8e:45:c2:e9:8f:76:d2:ad:f1:e2:26:85:40:d8:5d: e3:53:87:50:1b:9b:4d:fd:61:a5:ad:08:3d:74:3a: ef:73:10:2e:74:a1:67:9a:cf:03:e0:49:7d:e1:8f: 04:71:c5:46:a7:5c:11:73:af:12:87:06:1a:71:d2: f9:26:02:dc:47:8f:62:49:48:cb:b0:74:5b:eb:d5: d0:59:2c:e5:ab:f2:61:d1:63:78:72:44:a0:c9:db: 41:49:48:c2:2e:71:81:9c:b6:ac:32:53:2f:97:a2: 9a:92:2d:ce:b1:c1:85:5e:d8:d8:01:ad:33:ac:7f: 8c:c6:99:6e:b7:2b:79:07:56:5c:ad:b9:4b:90:31: 72:ae:6d:cc:2c:29:bc:51:6b:0c:ec:65:1c:bd:e8: 41:f3:db:72:04:06:a3:54:24:51:7e:9c:b8:ee:2f: 3e:53:c6:e9:7b:98:2c:ab:5c:a9:fc:f1:58:b1:d5: df:47:c2:59:1b:dc:8a:40:23:fe:f6:0d:57:6e:b4: af:fb:e8:b3:5e:66:97:3f:f9:5e:03:33:e6:76:da: d0:d7:c7:98:c3:97:34:d3:fe:49:81:e3:91:1c:38: 6d:4b:20:0e:b7:bf:f4:42:a6:18:56:b3:65:f4:ca: 5f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:35:DB:78:17:3D:A2:F7:75:A9:30:40:4A:F2:22:0C:04:10:2F:04 X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:8f:b5:b7:e5:bb:3f:d5:1a:f4:8c:a3:98:3e:b4:e2:5e:8c: 50:df:42:26:3d:45:a2:fe:c6:18:77:5d:49:65:e7:80:0c:c2: 96:1b:f8:f3:b0:57:b6:81:61:f3:6d:e3:e9:ef:10:a6:c1:8a: bf:00:84:fa:04:0a:c9:6b:a9:bf:0c:c9:92:7c:a1:a3:ff:18: 1c:0b:cb:7b:9c:6e:32:d6:33:ac:68:3e:58:c6:81:f2:77:a4: 35:70:48:12:13:32:ce:fc:d7:a9:9b:8f:a8:ba:44:25:ce:b2: 8d:72:08:aa:cd:b6:af:85:bf:41:c1:0b:1c:26:c0:c3:47:10: 01:43:e3:c0:46:2a:58:c0:38:76:a0:3a:4b:61:69:5b:c5:4b: 2f:21:23:c7:1e:9e:67:72:4a:0b:dd:b7:73:36:a6:c7:78:56: aa:33:64:1a:cb:ba:73:c6:3b:73:de:c0:09:30:48:72:e5:35: 32:c6:8b:fa:6d:24:d3:57:3e:12:e4:74:bb:b9:7d:e2:c0:92: 1a:30:99:0d:0a:4b:fb:e7:6b:91:3e:e1:d0:e6:c4:45:78:b1: 93:b3:8d:ec:9d:5b:44:a6:c5:b8:62:52:ee:72:69:29:b2:32: fd:88:5e:47:ad:8d:9b:04:48:2b:b3:5b:ff:60:1d:dc:0f:1c: d6:b6:f5:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4 MzJBOTI3OUIwHhcNMjUwMzI5MDQyMzQzWhcNMjUwNDA1MDQyMzQzWjAYMRYwFAYD VQQDEw02N2U3NzVjZi02OTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Jl8dJADAX1f5iLCfkiORcLpj3bSrfHiJoVA2F3jU4dQG5tN/WGlrQg9dDrv cxAudKFnms8D4El94Y8EccVGp1wRc68ShwYacdL5JgLcR49iSUjLsHRb69XQWSzl q/Jh0WN4ckSgydtBSUjCLnGBnLasMlMvl6Kaki3OscGFXtjYAa0zrH+Mxplutyt5 B1ZcrblLkDFyrm3MLCm8UWsM7GUcvehB89tyBAajVCRRfpy47i8+U8bpe5gsq1yp /PFYsdXfR8JZG9yKQCP+9g1XbrSv++izXmaXP/leAzPmdtrQ18eYw5c00/5JgeOR HDhtSyAOt7/0QqYYVrNl9MpflQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMw123gX PaL3dakwQEryIgwEEC8EMB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t MllqQ0M5cTY4ZmVES3BKNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3j7W35bs/1Rr0jKOYPrTiXoxQ30ImPUWi/sYYd11JZeeADMKWG/jz sFe2gWHzbePp7xCmwYq/AIT6BArJa6m/DMmSfKGj/xgcC8t7nG4y1jOsaD5YxoHy d6Q1cEgSEzLO/Nepm4+oukQlzrKNcgiqzbavhb9BwQscJsDDRxABQ+PARipYwDh2 oDpLYWlbxUsvISPHHp5nckoL3bdzNqbHeFaqM2Qay7pzxjtz3sAJMEhy5TUyxov6 bSTTVz4S5HS7uX3iwJIaMJkNCkv752uRPuHQ5sRFeLGTs43snVtEpsW4YlLucmkp sjL9iF5HrY2bBEgrs1v/YB3cDxzWtvWo -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:29 2025 by rpki-client