$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: ttS3KYZ5CvWikDahPeQU6/W5HfFzVcK7TYS7AVXag2w= Subject key identifier: BC:DA:F2:C1:41:3D:9D:BC:A2:32:F9:62:A6:1C:42:CE:4A:CA:FB:66 Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: 0157 Signing time: Sat 23 Aug 2025 04:16:20 +0000 Manifest this update: Sat 23 Aug 2025 04:16:19 +0000 Manifest next update: Sat 30 Aug 2025 04:16:19 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: TlDJo19ZCwkD8uQve/kJgg1W+RTai4muycmsnQzbu/g=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: QC/j4NdVMfLjJvi/tC4R1izEoPS35TLtB/DKzQHPD7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Validity Not Before: Aug 23 04:16:19 2025 GMT Not After : Aug 30 04:16:19 2025 GMT Subject: CN=68a94093-9ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:16:88:a6:11:05:6f:6e:ad:12:31:0d:38: 7b:98:86:99:d7:eb:d1:8e:b0:ca:59:2d:6a:73:70: 0a:4e:c0:09:55:00:e9:dc:b2:b1:f4:dd:fb:81:9b: a9:9b:22:a2:e7:ea:50:07:e3:9a:40:d4:cb:9f:0d: a5:f3:7d:ea:0d:ea:07:33:94:c1:bd:2d:84:fe:36: 9c:ba:80:dc:e8:ba:af:fd:42:b3:97:e3:ff:9b:56: 37:a0:5c:4c:b4:71:e7:07:41:10:0f:1b:41:17:35: 25:a9:85:44:a1:cc:34:0f:a5:6f:d9:dc:71:49:ca: da:d3:82:f1:05:41:59:96:46:74:17:15:97:87:24: 8c:11:eb:2e:55:f8:fb:16:fe:7f:95:8b:2f:ed:44: 9f:d6:37:8c:27:36:63:58:66:a4:59:61:bc:44:14: bc:a0:11:e4:e4:56:fc:90:6f:8c:9b:f0:2e:43:35: 63:81:4a:1a:6a:3d:56:1f:e9:6f:7b:34:92:14:ec: a7:01:79:1f:8f:a8:e6:d6:99:35:3a:c2:d1:2c:42: 2e:f2:3c:c4:51:3c:0a:15:90:b1:d3:e5:da:58:bb: ce:68:09:f1:72:75:0a:e1:61:08:c0:73:5b:72:fa: 47:d2:4a:43:0e:5a:70:f4:82:fb:ad:05:86:14:8e: 9d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DA:F2:C1:41:3D:9D:BC:A2:32:F9:62:A6:1C:42:CE:4A:CA:FB:66 X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:39:87:0d:48:b0:0f:da:75:31:ec:9a:54:9c:cf:e6:9a:0b: 0e:46:d1:6d:40:86:73:48:3a:31:ae:ed:54:27:00:99:12:d2: d3:6c:84:d8:5c:7c:f4:71:eb:92:08:a3:79:4f:82:1b:64:61: a3:7d:35:48:7b:d6:b4:1c:d7:81:c5:26:d1:65:36:6c:e1:ec: 63:62:6c:0d:ac:ac:0b:9a:4d:f2:06:9b:6d:cc:24:cd:47:10: f0:df:45:95:90:49:8d:0a:06:5a:90:57:49:6a:3e:96:ab:82: d3:fb:25:b2:7e:8a:73:16:18:60:0f:de:ac:4d:45:8c:b9:e6: 36:23:7d:20:78:08:aa:a4:4a:35:b0:5d:92:d2:72:23:31:cb: 81:5e:80:6e:ba:9a:e2:d7:ab:ae:ff:b3:66:19:8e:df:c4:71: 40:ef:cd:e5:0d:f9:01:e5:e7:90:d0:e0:a2:39:84:01:e2:8b: 5c:0e:c0:b2:bb:ec:24:82:b3:d6:dc:30:a2:78:a8:61:d2:8e: d5:8c:b4:fe:a0:14:40:61:66:1c:7f:24:4e:b0:a8:8c:01:53: 7f:0a:f5:3a:11:a7:3d:88:59:67:e0:d2:c7:6f:04:85:4d:02: ef:95:c1:55:a7:f3:b3:ff:f9:eb:fa:97:25:13:da:6b:ff:ec: 62:cc:99:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4 MzJBOTI3OUIwHhcNMjUwODIzMDQxNjE5WhcNMjUwODMwMDQxNjE5WjAYMRYwFAYD VQQDEw02OGE5NDA5My05ZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiUWiKYRBW9urRIxDTh7mIaZ1+vRjrDKWS1qc3AKTsAJVQDp3LKx9N37gZup myKi5+pQB+OaQNTLnw2l833qDeoHM5TBvS2E/jacuoDc6Lqv/UKzl+P/m1Y3oFxM tHHnB0EQDxtBFzUlqYVEocw0D6Vv2dxxScra04LxBUFZlkZ0FxWXhySMEesuVfj7 Fv5/lYsv7USf1jeMJzZjWGakWWG8RBS8oBHk5Fb8kG+Mm/AuQzVjgUoaaj1WH+lv ezSSFOynAXkfj6jm1pk1OsLRLEIu8jzEUTwKFZCx0+XaWLvOaAnxcnUK4WEIwHNb cvpH0kpDDlpw9IL7rQWGFI6dFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLza8sFB PZ28ojL5YqYcQs5KyvtmMB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t MllqQ0M5cTY4ZmVES3BKNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHOYcNSLAP2nUx7JpUnM/mmgsORtFtQIZzSDoxru1UJwCZEtLTbITY XHz0ceuSCKN5T4IbZGGjfTVIe9a0HNeBxSbRZTZs4exjYmwNrKwLmk3yBpttzCTN RxDw30WVkEmNCgZakFdJaj6Wq4LT+yWyfopzFhhgD96sTUWMueY2I30geAiqpEo1 sF2S0nIjMcuBXoBuupri16uu/7NmGY7fxHFA783lDfkB5eeQ0OCiOYQB4otcDsCy u+wkgrPW3DCieKhh0o7VjLT+oBRAYWYcfyROsKiMAVN/CvU6Eac9iFln4NLHbwSF TQLvlcFVp/Oz//nr+pclE9pr/+xizJnx -----END CERTIFICATE-----Generated at Sun Aug 24 05:06:40 2025 by rpki-client