
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json)
Hash identifier: RoRX4W1LqzjxmbeO4n965o9sCKHZ8lzHVbqbVm9aVvs=
Subject key identifier: AA:8A:D0:8A:B2:68:BF:44:8D:9A:3E:2E:B4:1D:DB:E7:A5:3A:90:2E
Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B
Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
Manifest number: 0211
Signing time: Wed 19 Aug 2026 03:34:42 +0000
Manifest this update: Wed 19 Aug 2026 03:34:41 +0000
Manifest next update: Wed 26 Aug 2026 03:34:41 +0000
Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: kAGKlg387kl6OESbsyewlFz65GiakN86J6l78Z/2Lug=)
2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: /r8YzB+3Ermc5mHFzYv0oDUZxQd5lLv3vmeCAA8WE5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl
rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
Validity
Not Before: Aug 19 03:34:41 2026 GMT
Not After : Aug 26 03:34:41 2026 GMT
Subject: CN=6a852452-c0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:3a:a9:37:94:89:c8:0e:f4:91:68:54:17:
de:5e:55:72:e3:49:c2:c7:e0:eb:b2:c1:af:ca:96:
b7:82:df:4d:06:ac:30:9f:96:c3:4f:42:65:45:de:
a1:d2:b4:b9:9e:e8:31:c9:6b:f5:f2:78:9b:bf:b5:
5e:31:31:59:cf:b8:a8:02:e7:7e:97:ec:e1:af:de:
1b:56:74:6a:45:42:07:c3:3b:fb:ba:a7:c0:ae:00:
bc:70:3d:70:c6:5f:d9:dd:24:16:83:f2:8c:f4:03:
db:c6:36:38:0d:41:a6:35:d6:a5:16:9c:9e:11:76:
a5:d2:81:cf:68:bd:23:70:24:c0:db:bb:6e:59:19:
f6:31:8a:38:30:b4:08:59:ec:b0:83:10:b1:c7:72:
d0:2b:36:1a:aa:25:20:38:5d:58:74:e2:cf:11:ea:
73:fe:d0:02:23:e9:02:d9:b1:45:71:f9:b5:6e:19:
59:ae:e4:fd:39:be:66:0b:d5:58:a8:99:67:c3:bb:
42:fa:18:bc:51:08:0c:e0:a6:ac:7e:01:1a:f7:1e:
50:e7:30:5f:eb:7e:26:42:df:20:4c:25:a4:dd:28:
6d:67:08:9a:8c:59:55:70:ac:0d:be:8e:33:8e:55:
b2:b4:38:e4:0a:62:5b:cc:bf:50:74:22:79:a0:9e:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8A:D0:8A:B2:68:BF:44:8D:9A:3E:2E:B4:1D:DB:E7:A5:3A:90:2E
X509v3 Authority Key Identifier:
keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:92:48:fb:a2:d8:c3:f1:0c:0c:2d:77:21:94:8a:d0:ef:4e:
da:2c:14:42:2c:77:46:f7:c8:89:9b:38:95:ff:27:66:bd:b1:
07:9a:73:e7:05:26:46:ba:87:16:de:69:61:c2:e9:84:46:da:
b1:cb:58:76:ae:63:e1:c7:17:cc:89:36:bb:19:99:32:70:b5:
9a:b1:8e:80:12:01:93:54:b6:24:61:88:8a:9b:a7:c7:81:a6:
2a:11:50:84:3f:67:8b:1c:6a:67:36:2b:c1:87:a7:5e:f5:c5:
1e:32:31:f1:64:2f:27:ea:6b:e9:5e:44:15:f2:9b:1d:c0:48:
22:a5:db:ee:0c:1c:a0:c4:b7:32:1c:66:40:b2:11:03:ad:27:
f4:d5:41:c8:a1:ce:a5:d4:fd:41:43:a7:f9:64:52:ed:b2:46:
f2:63:7e:d4:22:e5:46:ee:a7:10:30:fc:1d:28:ab:5a:25:0b:
48:b9:d5:bb:c8:81:91:b8:28:41:82:f8:db:44:c6:30:39:5b:
a7:48:4c:47:bb:ef:d6:71:61:da:c2:2f:d1:1c:d1:06:60:56:
82:74:b3:c4:17:63:63:7a:7a:6c:03:a0:8f:db:da:e5:59:d8:
b6:de:84:bf:00:98:cd:1d:65:75:7b:b7:09:25:3d:fa:74:c6:
c7:95:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:32 2026 by rpki-client