$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: 3vtGh1kjdPI+eavC3uHFS7Jw3298zd3K5n7OVZL9DEk= Subject key identifier: 52:A8:99:53:43:2F:84:78:B8:B2:DB:F8:25:5E:C9:4E:E2:11:97:BB Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: 01E4 Signing time: Thu 21 May 2026 03:30:39 +0000 Manifest this update: Thu 21 May 2026 03:30:38 +0000 Manifest next update: Thu 28 May 2026 03:30:38 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: uCar+X6Ci/2beHCLYtJpz+pr1CsJcarCQS6VFOzRRcM=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: /r8YzB+3Ermc5mHFzYv0oDUZxQd5lLv3vmeCAA8WE5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Validity Not Before: May 21 03:30:38 2026 GMT Not After : May 28 03:30:38 2026 GMT Subject: CN=6a0e7c5f-3db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5d:06:2b:7e:36:ab:ac:34:47:81:c3:0d:68: 7a:5c:3d:22:9b:1e:88:ea:ee:57:9a:e5:62:9e:d4: 26:44:83:e3:b5:23:28:0a:65:61:ba:d3:ab:49:18: 32:40:6f:de:54:60:58:bb:0f:c7:01:f0:70:12:dd: 79:5b:31:c8:b7:66:75:3c:38:02:ed:30:fb:6e:05: 4b:9b:41:be:bd:4d:5f:f4:20:18:7c:6b:41:06:65: 8e:df:3f:e1:8c:1a:16:d4:6c:2f:19:d5:ac:ea:9f: 5a:5f:c0:8b:3c:ca:6e:13:c9:d0:51:d6:1e:26:24: 8f:97:1b:b6:04:d5:fc:8f:6f:0a:a5:50:0f:34:03: 03:99:f0:42:c1:e7:cc:15:72:8b:b0:bc:ba:6a:bc: 76:8e:45:0e:0c:c8:5d:33:ae:ec:a1:80:43:b0:a1: a8:7d:57:01:66:17:1a:79:1a:1d:a4:47:73:50:ae: ab:6d:b9:34:34:79:bc:8b:eb:32:f7:00:5f:56:57: 05:4e:eb:92:69:48:69:5f:09:d4:69:c9:7a:72:b8: 76:83:23:db:33:8a:14:f1:05:0e:e0:14:57:b3:d3: 90:16:13:09:86:a8:f3:fd:78:f3:0c:51:79:12:ab: 19:52:b5:1b:42:b2:4d:fd:53:bc:9a:25:26:ca:59: ab:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A8:99:53:43:2F:84:78:B8:B2:DB:F8:25:5E:C9:4E:E2:11:97:BB X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2f:3b:74:d8:e8:5a:ff:64:06:db:55:9e:2e:3f:ba:e6:da: 2b:dd:d7:42:bd:44:f9:86:18:c1:d0:8e:52:7c:ba:52:61:fd: 3d:ff:e0:86:ac:47:c9:7a:f5:bb:ab:d8:78:a3:24:4b:2b:a4: 21:34:cd:ac:77:3a:55:68:ce:60:ff:bb:21:c4:3a:0e:a3:73: 16:55:c7:56:b0:7b:07:4f:f9:ff:10:b7:c4:96:07:94:ae:d5: 73:9e:35:85:d7:62:fd:f9:a8:ed:29:20:89:51:cc:d3:a2:f7: ec:14:fa:8d:c6:76:57:a5:58:6f:c1:ad:b1:3a:1a:b4:4d:01: e0:83:8c:39:b2:24:bc:a2:c5:8e:55:c5:d7:59:b9:68:dc:b9: 60:e4:61:f4:95:a8:78:a0:82:26:98:9e:3c:e6:1c:1d:3c:1c: ae:d9:c8:a7:ea:20:9f:6a:1b:bc:4b:ba:91:d4:37:fc:88:0a: 47:df:5a:73:5c:a1:b8:2f:52:a1:69:19:fe:03:c1:6e:18:b3: f8:85:29:9d:2f:4c:bf:e6:24:a3:fe:46:37:66:fd:09:d9:e8: 95:99:0b:b2:a5:90:78:d3:d1:7e:9c:5f:74:90:e0:a4:85:17: 16:07:6d:cc:d6:3f:54:97:09:09:69:49:ba:d3:95:03:35:74: 54:5d:4c:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4 MzJBOTI3OUIwHhcNMjYwNTIxMDMzMDM4WhcNMjYwNTI4MDMzMDM4WjAYMRYwFAYD VQQDEw02YTBlN2M1Zi0zZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo10GK342q6w0R4HDDWh6XD0imx6I6u5XmuVintQmRIPjtSMoCmVhutOrSRgy QG/eVGBYuw/HAfBwEt15WzHIt2Z1PDgC7TD7bgVLm0G+vU1f9CAYfGtBBmWO3z/h jBoW1GwvGdWs6p9aX8CLPMpuE8nQUdYeJiSPlxu2BNX8j28KpVAPNAMDmfBCwefM FXKLsLy6arx2jkUODMhdM67soYBDsKGofVcBZhcaeRodpEdzUK6rbbk0NHm8i+sy 9wBfVlcFTuuSaUhpXwnUacl6crh2gyPbM4oU8QUO4BRXs9OQFhMJhqjz/XjzDFF5 EqsZUrUbQrJN/VO8miUmylmrzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKomVND L4R4uLLb+CVeyU7iEZe7MB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t MllqQ0M5cTY4ZmVES3BKNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfy87dNjoWv9kBttVni4/uubaK93XQr1E+YYYwdCOUny6UmH9Pf/ghqxHyXr1 u6vYeKMkSyukITTNrHc6VWjOYP+7IcQ6DqNzFlXHVrB7B0/5/xC3xJYHlK7Vc541 hddi/fmo7SkgiVHM06L37BT6jcZ2V6VYb8GtsToatE0B4IOMObIkvKLFjlXF11m5 aNy5YORh9JWoeKCCJpiePOYcHTwcrtnIp+ogn2obvEu6kdQ3/IgKR99ac1yhuC9S oWkZ/gPBbhiz+IUpnS9Mv+Yko/5GN2b9CdnolZkLsqWQeNPRfpxfdJDgpIUXFgdt zNY/VJcJCWlJutOVAzV0VF1M+A== -----END CERTIFICATE-----Generated at Thu May 21 10:23:59 2026 by rpki-client