$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: qO8kIH4cKMXIFD7XKzkUYgRkEzR6eB5JJeIMwqsy/p0= Subject key identifier: 2F:5D:01:3A:D8:3B:43:46:51:79:31:42:14:BA:30:43:9E:0F:3C:11 Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: 0229 Signing time: Mon 05 Oct 2026 03:05:32 +0000 Manifest this update: Mon 05 Oct 2026 03:05:32 +0000 Manifest next update: Mon 12 Oct 2026 03:05:32 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: aFB60COcWWOKaVf59mW+skXAFz8jyU40XfdDu2i5854=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: /r8YzB+3Ermc5mHFzYv0oDUZxQd5lLv3vmeCAA8WE5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 03:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Validity Not Before: Oct 5 03:05:32 2026 GMT Not After : Oct 12 03:05:32 2026 GMT Subject: CN=6ac313fc-e869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:e8:d2:a1:66:e9:40:2b:a9:6d:54:be:c1: 10:63:16:6c:3e:62:30:64:88:ba:c1:a0:c3:df:73: 44:f2:7b:ca:33:bb:95:1c:55:ca:66:4b:92:f9:8d: 97:e3:a4:c6:62:f1:18:9a:9e:85:ab:7d:bb:1c:75: 2a:07:b6:76:62:66:25:38:1e:f5:b1:6b:0c:5a:d0: e8:7d:b5:50:04:8d:3b:9d:13:1b:be:b0:0e:25:a1: 23:e5:40:76:7f:67:7c:d1:7e:7d:cb:ab:72:bd:1e: f3:42:8f:8a:f5:35:8c:e1:13:63:d5:62:30:c7:8d: 08:ba:05:19:11:cb:8f:5d:03:b4:62:8e:e1:7d:43: 57:c1:6f:a2:26:61:0e:08:d8:75:bf:49:dd:7c:bd: bc:e1:10:d8:58:f1:80:e4:3e:0a:58:98:ed:5e:43: 18:3a:35:77:30:73:7e:94:4b:cc:66:28:14:ab:32: a0:be:d2:28:f6:62:e1:3f:65:ca:b9:c3:3a:02:92: 92:68:21:24:7e:ee:ca:14:79:fc:07:f7:e9:ae:86: 28:86:a1:8e:96:a9:60:db:bd:e7:f5:a7:87:8c:30: ad:50:29:54:bd:77:e0:33:9d:9a:1b:dc:8f:8b:e2: 53:ed:60:9c:b9:32:32:4d:a1:c6:10:6d:b1:90:7b: cd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5D:01:3A:D8:3B:43:46:51:79:31:42:14:BA:30:43:9E:0F:3C:11 X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:be:a4:d0:d2:df:b7:68:d2:fe:b3:70:32:7d:db:a5:44:08: 42:72:26:7c:28:fb:29:39:c8:46:9d:9d:7d:a6:83:40:2c:60: 54:df:0e:15:e7:82:6b:5d:0a:1b:bb:10:b9:e1:1c:67:f0:7c: 84:59:f7:5d:e1:8c:65:82:e7:ca:72:af:63:fd:7c:8d:08:1c: 79:fe:d8:fc:fd:e4:53:89:a0:60:a8:47:be:1d:fc:18:63:fa: 5c:a8:89:d6:0c:72:66:95:db:4b:f5:04:18:88:27:1d:c3:9b: 1f:09:5e:7a:4a:40:ab:21:fa:85:c7:bb:df:d1:dd:e8:85:82: 83:b9:99:f1:06:f3:90:85:f2:c3:42:ce:cd:b8:df:99:a7:f6: 53:28:d0:e8:19:28:e3:cd:9c:80:a6:c3:87:3b:af:3c:42:30: 61:71:45:d3:b0:17:75:a3:5d:1c:94:8a:22:17:61:8e:fc:c9: bf:88:c5:df:78:67:b4:15:9c:15:1e:25:ad:99:53:cb:15:58: a0:05:35:53:dc:d7:09:2f:e1:f0:bb:43:f8:e6:c0:ca:42:a5: 83:48:90:59:67:76:fa:19:0e:56:c7:d1:88:76:a8:c5:69:11: 87:3b:21:28:40:e9:55:fd:bf:91:cc:56:2d:d7:47:ef:dd:9c: 8d:ae:2c:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4 MzJBOTI3OUIwHhcNMjYxMDA1MDMwNTMyWhcNMjYxMDEyMDMwNTMyWjAYMRYwFAYD VQQDEw02YWMzMTNmYy1lODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cbo0qFm6UArqW1UvsEQYxZsPmIwZIi6waDD33NE8nvKM7uVHFXKZkuS+Y2X 46TGYvEYmp6Fq327HHUqB7Z2YmYlOB71sWsMWtDofbVQBI07nRMbvrAOJaEj5UB2 f2d80X59y6tyvR7zQo+K9TWM4RNj1WIwx40IugUZEcuPXQO0Yo7hfUNXwW+iJmEO CNh1v0ndfL284RDYWPGA5D4KWJjtXkMYOjV3MHN+lEvMZigUqzKgvtIo9mLhP2XK ucM6ApKSaCEkfu7KFHn8B/fproYohqGOlqlg273n9aeHjDCtUClUvXfgM52aG9yP i+JT7WCcuTIyTaHGEG2xkHvNzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9dATrY O0NGUXkxQhS6MEOeDzwRMB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t MllqQ0M5cTY4ZmVES3BKNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoL6k0NLft2jS/rNwMn3bpUQIQnImfCj7KTnIRp2dfaaDQCxgVN8OFeeCa10K G7sQueEcZ/B8hFn3XeGMZYLnynKvY/18jQgcef7Y/P3kU4mgYKhHvh38GGP6XKiJ 1gxyZpXbS/UEGIgnHcObHwleekpAqyH6hce739Hd6IWCg7mZ8QbzkIXyw0LOzbjf maf2UyjQ6Bko482cgKbDhzuvPEIwYXFF07AXdaNdHJSKIhdhjvzJv4jF33hntBWc FR4lrZlTyxVYoAU1U9zXCS/h8LtD+ObAykKlg0iQWWd2+hkOVsfRiHaoxWkRhzsh KEDpVf2/kcxWLddH792cja4sXw== -----END CERTIFICATE-----Generated at Mon Oct 5 20:17:50 2026 by rpki-client