$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: E7X2TbYlFKmgjdLZ1sq7sfwQtfKoO76uy3BCxX03pIY= Subject key identifier: 92:74:F1:0C:74:8A:94:41:2D:08:27:47:B6:C4:27:B4:A0:2A:D1:5E Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: 0126 Signing time: Sat 17 May 2025 04:17:10 +0000 Manifest this update: Sat 17 May 2025 04:17:10 +0000 Manifest next update: Sat 24 May 2025 04:17:10 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: jsOZQJ/cbONTiYZ9j0OQt5eHnN9GHrp2vVjF66U7+gU=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: QC/j4NdVMfLjJvi/tC4R1izEoPS35TLtB/DKzQHPD7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 04:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Validity Not Before: May 17 04:17:10 2025 GMT Not After : May 24 04:17:10 2025 GMT Subject: CN=68280dc6-7389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ca:6e:f9:89:67:fe:db:67:e6:86:48:70:68: 93:2f:a3:91:e2:b3:9b:18:28:36:06:e8:f6:ed:82: 3c:7e:35:b8:10:30:71:92:5b:aa:0c:00:d5:91:de: d4:1c:ff:f4:fa:23:98:bb:72:10:4c:49:7f:58:01: 73:2d:36:3e:98:19:cb:55:8e:59:ea:33:02:89:95: f7:1d:d7:1b:c6:cb:2d:69:2b:e9:d2:6d:0f:f0:10: fd:3d:a3:bc:b2:f1:f7:df:1c:13:96:2e:ba:e8:37: f3:72:33:56:ea:5a:a8:6b:31:c1:8e:ac:88:d9:ff: 6c:b7:d0:36:3e:d0:34:8e:e1:bd:d5:c9:1a:d5:57: 88:3a:3e:d0:af:a8:af:14:21:bb:69:e3:9a:7d:6e: 21:33:0c:d3:1a:f5:ff:df:00:0b:a1:a0:e0:b2:66: f6:a5:dd:bc:1a:2c:58:3e:82:23:da:71:b8:42:d8: eb:6a:01:42:ed:1e:54:ca:fe:cc:22:fd:35:6f:84: 9d:05:cb:b2:79:b2:22:0d:eb:15:21:7c:f0:26:78: 24:f8:6d:67:b1:e2:f0:0e:83:5a:2a:e7:e8:5d:01: 20:f0:a4:b3:52:64:cf:ef:d3:47:98:5f:86:95:bb: 29:95:73:f4:13:3c:09:1f:df:b6:e1:d5:35:67:82: 8a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:74:F1:0C:74:8A:94:41:2D:08:27:47:B6:C4:27:B4:A0:2A:D1:5E X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:84:6f:f8:88:39:ca:03:f7:b4:f5:b4:1d:c0:52:57:1f:7c: 68:8d:71:59:26:72:29:55:d6:04:68:bf:6b:f8:e8:4e:c8:93: b4:e2:ac:ef:9c:85:57:20:95:19:fe:52:7c:cd:be:1e:bf:a6: ac:8a:8a:3b:51:6c:f6:25:93:ab:d4:7b:68:32:e1:d8:63:1f: 05:a4:3f:ab:df:db:e4:3e:95:05:d8:05:56:5a:8b:ab:e9:ab: e9:fc:50:cf:07:0a:d2:f6:30:a3:e5:b9:d0:00:dc:28:41:81: ed:be:06:11:c8:75:86:fa:94:a2:20:7b:25:ab:aa:ed:99:d4: 3f:5d:fa:ff:2d:8e:3e:a8:05:9e:8c:85:05:cf:99:f2:c0:a0: 31:28:d4:16:35:72:69:81:bb:06:20:ab:83:95:47:78:d8:ea: 07:4b:6a:1d:7b:36:8a:40:5a:9a:07:a6:a3:38:d3:70:f4:8b: 62:c9:45:d4:14:4f:46:66:be:d9:84:ab:8f:ab:ac:aa:d2:e7: e9:08:54:8b:3b:8a:82:91:a8:7d:4a:4f:65:3a:78:b3:b2:44: 3e:6f:1d:79:c7:19:de:13:87:04:32:34:53:77:c2:a8:71:9f: 22:b2:82:6a:e5:eb:b6:d5:d4:ca:36:10:63:7c:78:8a:19:92: 06:99:1d:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4 MzJBOTI3OUIwHhcNMjUwNTE3MDQxNzEwWhcNMjUwNTI0MDQxNzEwWjAYMRYwFAYD VQQDEw02ODI4MGRjNi03Mzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58pu+Yln/ttn5oZIcGiTL6OR4rObGCg2Buj27YI8fjW4EDBxkluqDADVkd7U HP/0+iOYu3IQTEl/WAFzLTY+mBnLVY5Z6jMCiZX3HdcbxsstaSvp0m0P8BD9PaO8 svH33xwTli666DfzcjNW6lqoazHBjqyI2f9st9A2PtA0juG91cka1VeIOj7Qr6iv FCG7aeOafW4hMwzTGvX/3wALoaDgsmb2pd28GixYPoIj2nG4QtjragFC7R5Uyv7M Iv01b4SdBcuyebIiDesVIXzwJngk+G1nseLwDoNaKufoXQEg8KSzUmTP79NHmF+G lbsplXP0EzwJH9+24dU1Z4KKlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJ08Qx0 ipRBLQgnR7bEJ7SgKtFeMB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t MllqQ0M5cTY4ZmVES3BKNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDhG/4iDnKA/e09bQdwFJXH3xojXFZJnIpVdYEaL9r+OhOyJO04qzv nIVXIJUZ/lJ8zb4ev6asioo7UWz2JZOr1HtoMuHYYx8FpD+r39vkPpUF2AVWWour 6avp/FDPBwrS9jCj5bnQANwoQYHtvgYRyHWG+pSiIHslq6rtmdQ/Xfr/LY4+qAWe jIUFz5nywKAxKNQWNXJpgbsGIKuDlUd42OoHS2odezaKQFqaB6ajONNw9ItiyUXU FE9GZr7ZhKuPq6yq0ufpCFSLO4qCkah9Sk9lOnizskQ+bx15xxneE4cEMjRTd8Ko cZ8isoJq5eu21dTKNhBjfHiKGZIGmR2m -----END CERTIFICATE-----Generated at Sat May 17 14:15:28 2025 by rpki-client