$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: wsoR1FGpseS7M8rFgo2UVgdxr9j469VlEEpoNqYUdPU= Subject key identifier: 43:64:9B:0A:9B:3F:99:0D:27:FA:73:EF:78:D8:15:9E:4A:D0:66:7E Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: 017B Signing time: Mon 03 Nov 2025 03:44:05 +0000 Manifest this update: Mon 03 Nov 2025 03:44:04 +0000 Manifest next update: Mon 10 Nov 2025 03:44:04 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: 1P8g/bB1boCBSG1KEbNMTYx/OajqLPMLVumKxM2DFR0=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: QC/j4NdVMfLjJvi/tC4R1izEoPS35TLtB/DKzQHPD7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Validity Not Before: Nov 3 03:44:04 2025 GMT Not After : Nov 10 03:44:04 2025 GMT Subject: CN=69082505-300c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c4:9e:ad:fb:ac:b6:12:d4:af:78:78:61:80: d0:fc:e8:92:90:bc:f4:3e:0d:89:0f:f4:fb:44:40: c5:3e:47:40:6f:d1:80:ef:b0:1c:dd:8e:f8:81:cd: ea:36:cc:45:63:14:d7:51:a3:cc:56:97:7f:b7:e8: 9f:55:7c:b2:9d:e9:31:75:e5:b3:9f:ec:bf:25:e0: 2f:b6:7d:a7:1d:02:1e:7c:5b:ba:4a:2c:2d:14:28: 5b:72:35:5a:58:ec:bd:e2:e1:b2:e1:43:b6:90:d1: 7f:82:22:b5:bc:f8:10:10:a9:96:94:97:2f:ee:90: 76:ef:a6:9f:f4:ea:c8:07:4b:63:30:d0:19:63:01: 48:d0:ed:ea:dc:c7:0c:0b:f3:5e:8f:1d:28:41:73: 9c:a7:57:17:35:c9:d2:22:85:02:bb:dd:91:7b:30: b9:2f:5e:e0:7b:ea:37:25:f1:8e:07:a3:1d:48:35: b9:1d:fa:52:63:fb:8e:2a:fd:70:aa:dd:c9:52:c7: 42:ae:68:fb:2a:03:1f:fb:63:61:bc:50:46:01:ed: 19:33:79:c8:14:08:6f:ca:fb:7c:64:c7:5b:67:97: 15:c4:ef:c0:bc:64:ea:2f:7c:88:53:67:51:33:81: 5b:1a:d0:cb:0b:04:7f:c4:a5:8d:be:7c:d4:60:ab: 1a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:64:9B:0A:9B:3F:99:0D:27:FA:73:EF:78:D8:15:9E:4A:D0:66:7E X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e9:cd:17:d1:16:4d:46:c2:b9:8b:e8:13:d3:d0:3a:93:70: ca:be:53:75:08:8d:8f:23:bb:f5:67:1b:f3:15:b9:56:08:9c: 2e:f4:8b:3a:af:ae:c8:d9:96:a4:e0:7e:6c:bb:f2:19:94:ec: cd:74:47:ac:f7:59:5a:83:9c:8c:5a:0b:02:94:6e:5c:ee:b1: 73:3a:23:4f:e7:af:37:05:7f:7a:41:90:b6:ff:87:f3:14:5b: 08:c8:6d:f1:98:c0:1e:c0:26:45:8c:99:d3:80:57:91:58:61: 96:7c:cd:e1:ed:56:28:4b:29:02:f6:13:d0:09:34:28:ce:12: b8:57:19:37:b2:c5:a4:d3:d9:a3:6a:90:e7:79:58:40:32:5c: bc:08:2b:b5:46:e8:e3:f7:88:cf:9d:81:54:d9:8e:11:52:c9: d2:6e:c7:e4:fe:9b:b0:13:4b:5e:75:b4:1c:81:bf:77:7a:2b: ba:ff:9a:f1:7c:e9:38:5c:a3:aa:c8:80:d2:d5:24:92:25:42: 70:66:1c:0f:5d:e4:e0:b5:48:6a:17:3a:42:a9:98:69:e9:9c: 37:11:d6:b1:d0:c6:a3:e2:ff:a7:74:75:0b:b4:e5:c5:83:36: 9d:e3:71:6b:32:14:b9:05:63:33:91:84:93:49:c0:9b:09:9d: 2c:6f:61:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4 MzJBOTI3OUIwHhcNMjUxMTAzMDM0NDA0WhcNMjUxMTEwMDM0NDA0WjAYMRYwFAYD VQQDEw02OTA4MjUwNS0zMDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cSerfusthLUr3h4YYDQ/OiSkLz0Pg2JD/T7REDFPkdAb9GA77Ac3Y74gc3q NsxFYxTXUaPMVpd/t+ifVXyynekxdeWzn+y/JeAvtn2nHQIefFu6SiwtFChbcjVa WOy94uGy4UO2kNF/giK1vPgQEKmWlJcv7pB276af9OrIB0tjMNAZYwFI0O3q3McM C/Nejx0oQXOcp1cXNcnSIoUCu92RezC5L17ge+o3JfGOB6MdSDW5HfpSY/uOKv1w qt3JUsdCrmj7KgMf+2NhvFBGAe0ZM3nIFAhvyvt8ZMdbZ5cVxO/AvGTqL3yIU2dR M4FbGtDLCwR/xKWNvnzUYKsagQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENkmwqb P5kNJ/pz73jYFZ5K0GZ+MB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t MllqQ0M5cTY4ZmVES3BKNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN6c0X0RZNRsK5i+gT09A6k3DKvlN1CI2PI7v1ZxvzFblWCJwu9Is6 r67I2Zak4H5su/IZlOzNdEes91lag5yMWgsClG5c7rFzOiNP5683BX96QZC2/4fz FFsIyG3xmMAewCZFjJnTgFeRWGGWfM3h7VYoSykC9hPQCTQozhK4Vxk3ssWk09mj apDneVhAMly8CCu1Rujj94jPnYFU2Y4RUsnSbsfk/puwE0tedbQcgb93eiu6/5rx fOk4XKOqyIDS1SSSJUJwZhwPXeTgtUhqFzpCqZhp6Zw3Edax0Maj4v+ndHULtOXF gzad43FrMhS5BWMzkYSTScCbCZ0sb2GO -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:11 2025 by rpki-client