
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json)
Hash identifier: +ft+HqK3+yWJnunZeEqjlVv+3p9opSVHlXJ9KCLXxXg=
Subject key identifier: 69:29:99:7A:4E:48:41:DE:C7:B3:1D:CD:27:6A:F4:D8:6D:EE:4C:74
Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B
Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
Manifest number: 01E0
Signing time: Wed 13 May 2026 03:34:50 +0000
Manifest this update: Wed 13 May 2026 03:34:49 +0000
Manifest next update: Wed 20 May 2026 03:34:49 +0000
Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: heDpE6kywkuWgZrbcZFfD2S+tWmynLPJa82qqxl9/ec=)
2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: /r8YzB+3Ermc5mHFzYv0oDUZxQd5lLv3vmeCAA8WE5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl
rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
Validity
Not Before: May 13 03:34:49 2026 GMT
Not After : May 20 03:34:49 2026 GMT
Subject: CN=6a03f15a-d540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:f3:15:06:76:82:42:f4:44:a2:f2:bf:82:
57:22:b5:9b:2b:ca:30:ab:18:7e:1e:62:fd:71:76:
e6:97:95:9b:b4:c1:0b:f8:7e:0f:57:81:64:91:ba:
9c:93:73:fc:30:7e:c9:ae:d2:1e:ae:d1:15:01:f4:
05:26:7b:bd:b5:52:87:4e:60:cb:2b:01:81:58:c5:
d1:d8:93:04:57:d9:df:0c:38:81:c7:40:e3:88:39:
3c:08:17:03:34:cf:ac:dd:33:69:46:06:fb:93:41:
ac:df:c0:43:87:89:78:a0:1e:e1:ef:fe:be:60:c9:
84:4d:d4:ab:7a:20:75:f6:55:ea:77:fe:34:62:80:
c3:d2:57:bd:ea:fe:2b:13:57:6d:85:b6:73:f3:b0:
6e:55:f2:8e:fc:c8:9b:b7:06:ec:c5:25:cd:99:d6:
99:74:71:4a:5b:ed:cb:9e:a1:a5:cd:f1:06:6a:03:
7e:42:08:1d:d7:66:64:0e:48:c1:a8:e3:6d:60:5b:
14:50:24:ec:37:6f:15:83:17:be:5e:f0:26:d7:b8:
f3:ae:57:2a:ef:e1:7e:d9:d0:2d:1b:50:2a:0e:49:
fd:b0:aa:de:22:3e:5d:ea:2f:ff:52:b8:44:7a:2b:
e7:a8:48:20:05:1c:1d:44:af:b9:28:ca:30:52:47:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:29:99:7A:4E:48:41:DE:C7:B3:1D:CD:27:6A:F4:D8:6D:EE:4C:74
X509v3 Authority Key Identifier:
keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:74:89:47:76:3b:af:d6:9d:e1:2f:ab:cb:d4:1d:be:14:66:
d2:d6:fa:df:d9:50:01:c5:60:35:92:28:7b:d8:56:b0:25:38:
0c:62:e6:84:10:32:1d:0d:b7:9b:8a:0b:30:c7:0a:36:64:1b:
ea:b4:af:a5:2c:8c:c7:27:4b:e3:80:2f:e4:20:db:73:14:b0:
33:53:78:05:d3:09:a8:d7:4f:3f:c2:02:a1:c2:10:db:1a:aa:
83:63:8a:a4:9c:3a:8d:31:ca:71:93:ed:27:cc:5b:96:00:51:
0f:61:60:25:48:27:c0:9d:6b:86:38:f6:cc:70:a8:6f:52:87:
85:e7:4a:95:ea:c7:e6:84:69:ec:c0:b6:e3:c8:8f:f2:56:f8:
07:a5:17:22:de:8d:78:21:b6:f6:66:7b:9d:60:49:55:2f:51:
c3:32:72:c8:b6:86:53:c5:96:c4:3b:55:46:1c:1a:45:70:20:
e5:22:59:bb:01:73:e1:f1:b2:e3:38:bc:b8:0f:9d:24:34:40:
96:21:ba:ea:fd:1d:05:67:18:e4:d2:53:91:93:79:92:f7:b0:
2c:8e:09:29:20:6e:b7:8c:1f:49:25:3e:6c:06:65:1f:a2:b6:
65:ab:0d:3b:82:62:29:6a:74:a9:b2:cc:ae:bd:1a:a0:4e:b4:
0a:2d:da:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4
MzJBOTI3OUIwHhcNMjYwNTEzMDMzNDQ5WhcNMjYwNTIwMDMzNDQ5WjAYMRYwFAYD
VQQDEw02YTAzZjE1YS1kNTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsU/zFQZ2gkL0RKLyv4JXIrWbK8owqxh+HmL9cXbml5WbtMEL+H4PV4Fkkbqc
k3P8MH7JrtIertEVAfQFJnu9tVKHTmDLKwGBWMXR2JMEV9nfDDiBx0DjiDk8CBcD
NM+s3TNpRgb7k0Gs38BDh4l4oB7h7/6+YMmETdSreiB19lXqd/40YoDD0le96v4r
E1dthbZz87BuVfKO/MibtwbsxSXNmdaZdHFKW+3LnqGlzfEGagN+Qggd12ZkDkjB
qONtYFsUUCTsN28Vgxe+XvAm17jzrlcq7+F+2dAtG1AqDkn9sKreIj5d6i//UrhE
eivnqEggBRwdRK+5KMowUkdNLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkpmXpO
SEHex7MdzSdq9Nht7kx0MB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz
REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t
MllqQ0M5cTY4ZmVES3BKNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAonSJR3Y7r9ad4S+ry9QdvhRm0tb639lQAcVgNZIoe9hWsCU4DGLmhBAyHQ23
m4oLMMcKNmQb6rSvpSyMxydL44Av5CDbcxSwM1N4BdMJqNdPP8ICocIQ2xqqg2OK
pJw6jTHKcZPtJ8xblgBRD2FgJUgnwJ1rhjj2zHCob1KHhedKlerH5oRp7MC248iP
8lb4B6UXIt6NeCG29mZ7nWBJVS9RwzJyyLaGU8WWxDtVRhwaRXAg5SJZuwFz4fGy
4zi8uA+dJDRAliG66v0dBWcY5NJTkZN5kvewLI4JKSBut4wfSSU+bAZlH6K2ZasN
O4JiKWp0qbLMrr0aoE60Ci3aZw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:18:42 2026 by rpki-client