$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: F82h8RUf7noiXV596T0ztQNP+cccQR0FMyKwQ4HKQwI= Subject key identifier: 9C:9E:4A:87:67:0D:25:B4:D2:26:5B:1C:56:9C:62:8D:21:4E:6C:4C Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: 0156 Signing time: Thu 21 Aug 2025 04:17:17 +0000 Manifest this update: Thu 21 Aug 2025 04:17:17 +0000 Manifest next update: Thu 28 Aug 2025 04:17:17 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: fDlm2qHpqQfYUrJax53wuDzSfRq8ui1S9L6Ok92ZegQ=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: QC/j4NdVMfLjJvi/tC4R1izEoPS35TLtB/DKzQHPD7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Validity Not Before: Aug 21 04:17:17 2025 GMT Not After : Aug 28 04:17:17 2025 GMT Subject: CN=68a69dcd-0de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dc:0d:49:4c:06:59:91:bc:0a:53:6b:11:55: c5:fe:7a:4f:51:37:d7:1b:ba:0f:b1:c9:cf:f6:14: 26:8f:ac:5e:1e:22:fc:bc:db:b5:51:1a:08:da:48: 17:15:dd:fe:fc:16:24:96:80:c2:37:79:5e:1f:8b: 75:d9:0b:b1:a9:8c:f8:eb:04:04:96:21:ba:b4:d3: 95:5d:eb:e8:33:2e:87:dd:87:ea:fa:7e:ef:13:93: d0:86:ed:e7:a7:c7:ee:dd:d9:d0:a8:97:1c:2a:0f: c2:f1:e1:9e:a4:1b:23:10:07:4c:d1:fd:00:cf:84: bb:1a:37:50:e2:35:a9:5a:34:87:e0:7b:09:7a:fd: 28:ae:25:4e:d3:27:a9:bd:bf:7a:a6:47:19:09:b5: 3f:5b:28:b7:3d:17:54:ef:74:d1:3e:ac:61:6a:80: 76:df:d4:78:af:d6:ed:18:e0:9b:9e:95:02:66:73: fc:55:d3:fb:3e:d3:6d:fc:da:ff:3c:0b:55:be:cc: 34:e7:98:a2:23:c0:b5:8f:9c:e4:24:23:f6:31:10: f7:db:b1:fb:c4:85:47:f7:50:34:1d:ea:2d:c0:58: 05:d2:a0:53:af:c7:eb:82:e2:64:1c:dc:00:bf:39: 76:e6:fa:f9:a9:06:67:7d:95:6a:4a:56:a8:48:6c: b9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9E:4A:87:67:0D:25:B4:D2:26:5B:1C:56:9C:62:8D:21:4E:6C:4C X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:2c:c2:29:b7:d8:43:e8:62:21:82:92:0b:98:13:4f:f6:b3: 8e:b0:1a:4a:8e:78:73:0b:85:5c:d8:8a:ac:9d:48:5c:ab:bf: 2f:6c:2d:fe:70:75:3f:dc:60:3a:c5:7f:0c:58:13:34:f9:ea: bb:44:89:62:cd:25:63:07:90:24:af:3e:ef:db:e8:d0:18:18: 0b:bc:a1:94:bb:88:7e:29:cc:97:81:e1:a7:08:5a:37:00:20: fe:ce:40:e3:96:9e:ab:45:4e:9d:4b:f0:f3:f0:9f:9c:c9:5d: e4:2c:91:f1:f8:f2:68:13:b1:0e:4b:37:56:84:c0:38:7c:09: d8:df:12:3e:59:d0:29:dc:f8:cb:4a:80:8f:36:1d:b5:bc:9f: 36:57:87:32:07:f3:56:a6:9b:65:d9:43:83:64:3f:f3:9c:e9: c0:d7:8d:38:e3:e4:98:22:0f:c7:ad:8b:dd:19:33:e9:28:7e: 55:3b:de:38:52:95:50:4c:d1:7c:f9:c6:7a:b7:69:02:9f:f4: 48:f8:63:67:ee:3d:e2:52:db:6a:c6:cb:21:b5:15:87:5f:10: 70:25:8b:99:46:a3:3c:30:32:2b:7b:82:53:f7:62:8b:28:16: e4:1c:92:e1:82:4d:cd:39:83:9b:e3:34:ed:49:4a:d7:fb:99: 09:c5:d9:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4 MzJBOTI3OUIwHhcNMjUwODIxMDQxNzE3WhcNMjUwODI4MDQxNzE3WjAYMRYwFAYD VQQDEw02OGE2OWRjZC0wZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49wNSUwGWZG8ClNrEVXF/npPUTfXG7oPscnP9hQmj6xeHiL8vNu1URoI2kgX Fd3+/BYkloDCN3leH4t12QuxqYz46wQEliG6tNOVXevoMy6H3Yfq+n7vE5PQhu3n p8fu3dnQqJccKg/C8eGepBsjEAdM0f0Az4S7GjdQ4jWpWjSH4HsJev0oriVO0yep vb96pkcZCbU/Wyi3PRdU73TRPqxhaoB239R4r9btGOCbnpUCZnP8VdP7PtNt/Nr/ PAtVvsw055iiI8C1j5zkJCP2MRD327H7xIVH91A0HeotwFgF0qBTr8frguJkHNwA vzl25vr5qQZnfZVqSlaoSGy5zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyeSodn DSW00iZbHFacYo0hTmxMMB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t MllqQ0M5cTY4ZmVES3BKNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXLMIpt9hD6GIhgpILmBNP9rOOsBpKjnhzC4Vc2IqsnUhcq78vbC3+ cHU/3GA6xX8MWBM0+eq7RIlizSVjB5Akrz7v2+jQGBgLvKGUu4h+KcyXgeGnCFo3 ACD+zkDjlp6rRU6dS/Dz8J+cyV3kLJHx+PJoE7EOSzdWhMA4fAnY3xI+WdAp3PjL SoCPNh21vJ82V4cyB/NWpptl2UODZD/znOnA14044+SYIg/HrYvdGTPpKH5VO944 UpVQTNF8+cZ6t2kCn/RI+GNn7j3iUttqxsshtRWHXxBwJYuZRqM8MDIre4JT92KL KBbkHJLhgk3NOYOb4zTtSUrX+5kJxdnO -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:13 2025 by rpki-client