$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: 9/qIukzi6SFpEITyMd15nbcTG6hIHxnWG5zDU/h9XJI= Subject key identifier: 0A:9D:82:56:45:54:3B:A9:50:A1:02:C4:F6:6A:5A:1F:02:C8:F3:EA Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: 0133 Signing time: Fri 13 Jun 2025 03:30:49 +0000 Manifest this update: Fri 13 Jun 2025 03:30:49 +0000 Manifest next update: Fri 20 Jun 2025 03:30:49 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: Tj6k+CUiUr9vAGL2GNxbNaASKLwtdkSo1mQ1s95GA64=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: QC/j4NdVMfLjJvi/tC4R1izEoPS35TLtB/DKzQHPD7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Validity Not Before: Jun 13 03:30:49 2025 GMT Not After : Jun 20 03:30:49 2025 GMT Subject: CN=684b9b69-ba26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2b:0c:68:fd:fb:49:0b:37:56:bb:7d:6e:9a: 3b:4e:a8:f8:21:d6:f1:e1:72:8c:86:27:39:3b:ac: 37:a3:a9:b1:2b:5c:f4:cb:3b:e7:85:69:3f:93:bd: 1a:b5:31:7e:22:16:da:04:d6:c5:0c:d5:23:4b:18: 5d:21:52:3c:bd:37:cd:ce:bb:3b:87:d8:9a:15:ea: fe:dd:86:db:c3:2d:8a:ee:53:f7:03:6a:8d:8a:10: 9d:e7:c4:ba:86:f8:6e:61:31:79:18:42:6d:99:82: 7e:f4:9c:0e:cf:9b:d1:8e:99:8c:f0:4f:f0:a8:56: da:ec:f1:ba:87:31:bd:d7:71:7c:bb:63:dc:d6:30: bf:3c:23:3c:63:5a:09:00:5a:b5:bd:b3:fc:ff:6a: 47:86:99:3f:06:d9:9a:fc:f1:9a:ac:3e:72:de:84: 78:ae:6e:92:f0:b1:f5:99:6d:c1:5e:fe:01:cc:f6: b3:3b:a8:74:b0:77:22:ea:cd:33:75:fc:e6:52:86: 00:17:44:42:64:17:09:06:7e:4e:3a:c1:6a:c2:d3: 31:2e:0b:e0:8a:ad:15:ca:75:14:95:8a:fc:51:e8: be:89:09:69:56:72:c5:6f:eb:0d:5f:9f:06:5f:3d: ce:87:06:ed:28:05:6c:d0:b1:f2:f4:e5:8a:df:90: d7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9D:82:56:45:54:3B:A9:50:A1:02:C4:F6:6A:5A:1F:02:C8:F3:EA X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:15:d5:8b:8f:c4:a8:99:47:2d:8e:f0:cb:a7:90:a9:b6:f5: b4:c7:8b:ab:91:0b:a0:e6:a0:d7:89:66:34:68:99:07:57:ed: f3:16:75:47:54:7d:4f:a3:0b:e7:8f:67:65:b2:83:2e:be:2d: 26:7f:1f:2a:f4:f7:25:c9:49:b2:30:25:f2:a5:c0:2c:93:d3: 99:87:dd:68:5f:9c:fe:d6:03:a6:a1:16:2d:41:32:15:dc:af: ca:71:ca:f2:70:d8:56:6e:c2:54:ed:e9:b1:88:2f:1f:59:0e: 66:e4:41:49:7c:1f:a4:d4:a6:dc:af:3c:8b:5d:fd:d0:68:3b: b7:07:4d:1a:64:46:63:97:f9:11:de:a6:9c:e2:27:63:b1:88: 10:ad:bf:c2:e8:a5:b6:19:6c:a2:eb:62:50:0d:d0:9e:31:0b: fc:84:77:97:21:67:4d:5e:71:9a:25:46:43:ce:e2:db:9e:53: e7:c6:66:bd:6a:da:77:eb:55:27:e1:40:01:12:ba:09:14:52: 27:10:b2:68:8a:ae:94:78:c8:b0:8a:e2:a9:4b:59:a6:10:15: 53:2f:d1:05:ba:36:b1:64:24:0f:85:ba:2d:6c:18:e4:84:18: 3f:ad:59:1e:29:72:81:15:a5:af:34:fc:cf:70:9f:79:bb:4a: 7b:99:54:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4 MzJBOTI3OUIwHhcNMjUwNjEzMDMzMDQ5WhcNMjUwNjIwMDMzMDQ5WjAYMRYwFAYD VQQDEw02ODRiOWI2OS1iYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8isMaP37SQs3Vrt9bpo7Tqj4Idbx4XKMhic5O6w3o6mxK1z0yzvnhWk/k70a tTF+IhbaBNbFDNUjSxhdIVI8vTfNzrs7h9iaFer+3Ybbwy2K7lP3A2qNihCd58S6 hvhuYTF5GEJtmYJ+9JwOz5vRjpmM8E/wqFba7PG6hzG913F8u2Pc1jC/PCM8Y1oJ AFq1vbP8/2pHhpk/Btma/PGarD5y3oR4rm6S8LH1mW3BXv4BzPazO6h0sHci6s0z dfzmUoYAF0RCZBcJBn5OOsFqwtMxLgvgiq0VynUUlYr8Uei+iQlpVnLFb+sNX58G Xz3OhwbtKAVs0LHy9OWK35DX0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqdglZF VDupUKECxPZqWh8CyPPqMB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t MllqQ0M5cTY4ZmVES3BKNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAFdWLj8SomUctjvDLp5CptvW0x4urkQug5qDXiWY0aJkHV+3zFnVH VH1Powvnj2dlsoMuvi0mfx8q9PclyUmyMCXypcAsk9OZh91oX5z+1gOmoRYtQTIV 3K/KccrycNhWbsJU7emxiC8fWQ5m5EFJfB+k1KbcrzyLXf3QaDu3B00aZEZjl/kR 3qac4idjsYgQrb/C6KW2GWyi62JQDdCeMQv8hHeXIWdNXnGaJUZDzuLbnlPnxma9 atp361Un4UABEroJFFInELJoiq6UeMiwiuKpS1mmEBVTL9EFujaxZCQPhbotbBjk hBg/rVkeKXKBFaWvNPzPcJ95u0p7mVR8 -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:59 2025 by rpki-client