
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json)
Hash identifier: 7p0r/wxeHzSvIuWjIlDrpd4dnxtFF7dEpcPy6dhMTMU=
Subject key identifier: 5F:C4:E4:E7:E6:60:4E:4E:98:C5:10:6B:73:DD:29:3D:4E:81:E5:87
Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B
Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
Manifest number: 01C7
Signing time: Wed 25 Mar 2026 03:05:09 +0000
Manifest this update: Wed 25 Mar 2026 03:05:09 +0000
Manifest next update: Wed 01 Apr 2026 03:05:09 +0000
Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: E9vSmpx7vB4WhwUTF6ij9GRtgq4frZzUarFTaUI4MmQ=)
2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: /r8YzB+3Ermc5mHFzYv0oDUZxQd5lLv3vmeCAA8WE5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl
rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
Validity
Not Before: Mar 25 03:05:09 2026 GMT
Not After : Apr 1 03:05:09 2026 GMT
Subject: CN=69c350e5-fe38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:60:3f:a2:c0:88:89:c3:dc:46:71:06:c6:
09:64:d8:ea:c8:3e:a0:17:6b:f3:99:89:83:2e:c5:
65:1f:e6:9d:4a:59:18:bf:cb:1e:e8:b5:f5:47:9f:
7f:4b:91:eb:ea:cf:10:0c:8d:00:a0:1c:10:fc:24:
52:61:1d:96:68:4d:22:96:1b:81:ee:67:ad:f9:03:
fe:83:56:48:56:77:bb:f7:a7:27:ec:ae:63:76:f2:
76:28:fa:ca:61:b0:80:05:1c:df:25:a6:83:26:31:
f1:a8:52:e6:0e:5f:f6:df:54:e7:f6:13:a5:bc:c1:
56:a8:a3:f4:23:92:6c:c6:4d:95:fd:55:b0:0b:3b:
ae:35:a4:66:ec:5e:e9:92:60:63:19:4e:75:91:ad:
00:4f:99:bd:79:fb:5d:44:6f:ab:4d:b7:91:e2:8e:
50:3f:0f:91:c1:17:b4:5d:31:65:a8:08:45:fc:1e:
76:4b:72:d1:94:37:81:dd:a2:95:1c:6a:db:da:2d:
03:d9:6c:1f:89:e6:12:e4:19:fa:ac:88:8b:23:59:
e7:75:b2:f2:1f:d5:df:a9:d0:5b:01:1a:70:96:53:
9f:b8:7e:9d:c1:30:3d:9e:97:49:89:10:0e:64:21:
e7:99:5e:d8:f0:9a:6e:c8:4c:15:24:11:c4:fb:dc:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C4:E4:E7:E6:60:4E:4E:98:C5:10:6B:73:DD:29:3D:4E:81:E5:87
X509v3 Authority Key Identifier:
keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:01:c9:af:ce:16:3c:b6:be:47:7b:27:ad:3a:8c:f9:93:f6:
06:9b:19:b5:c0:c3:c2:b9:d5:53:c0:3a:08:3c:25:2e:0e:c3:
b2:40:fc:bb:a0:91:b9:12:3d:9c:3a:bd:49:0d:d0:bf:4b:3b:
78:a2:2c:ab:9f:23:f0:ba:60:b1:27:cf:0a:cb:31:85:ef:70:
ca:54:a3:59:c7:e8:3a:1a:a9:9d:96:bd:80:82:d3:0d:94:8f:
df:50:f6:25:21:f0:09:4f:81:7f:ee:43:1d:fe:c6:b8:9b:b0:
92:6d:bf:9e:8d:6a:81:73:ae:9b:97:e5:ac:da:11:81:d4:f2:
22:cf:8f:bc:90:2f:43:01:da:a9:80:ae:e0:92:1e:bb:9e:51:
3b:ad:69:27:91:c3:45:2f:2a:cf:74:a7:14:fd:ae:09:9b:f1:
49:50:16:69:e1:83:51:8d:c1:07:ac:03:bd:4f:46:69:bc:2d:
0a:64:ba:e2:c3:53:59:9a:a9:dc:05:a9:6d:9c:e6:d5:58:58:
a4:df:21:a6:c1:68:e2:00:84:f4:6b:ed:62:da:1e:5d:05:5f:
ce:3b:64:c2:65:64:a4:f4:79:f0:79:85:94:d2:cd:a7:38:21:
6d:e4:bb:a0:85:df:e2:86:b9:74:de:57:ab:58:a1:d6:eb:ef:
cf:7c:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:38 2026 by rpki-client