$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: 9sq7rb1zVBK88Smd+x03+SpGuJXzIs+9VogafaUvcx4= Subject key identifier: AE:1E:F4:6F:10:B6:CB:E4:AD:8E:2D:09:AF:6D:1B:E5:E5:B0:69:3E Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: 01D3 Signing time: Fri 17 Apr 2026 03:22:26 +0000 Manifest this update: Fri 17 Apr 2026 03:22:25 +0000 Manifest next update: Fri 24 Apr 2026 03:22:25 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: 43c9X7gaBY1FCyyasvVjRrS8aQHzWBjA02LWAIbGM2E=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: /r8YzB+3Ermc5mHFzYv0oDUZxQd5lLv3vmeCAA8WE5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Validity Not Before: Apr 17 03:22:25 2026 GMT Not After : Apr 24 03:22:25 2026 GMT Subject: CN=69e1a772-76d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:0d:78:e5:60:e6:f9:19:9a:3c:02:ce:fc: ad:b3:3c:e6:19:f5:09:67:b7:03:c7:ba:ec:d6:ad: 4a:52:e8:89:34:f3:cd:19:0c:da:ae:d0:bd:f4:34: 97:4c:1b:4f:75:7e:b3:52:27:1f:7f:27:31:07:8a: 7f:af:3a:40:05:5e:c5:b5:b6:fb:3d:26:11:82:65: 8a:90:8f:a8:a8:25:3d:f2:00:74:c5:5f:54:27:e3: 28:8d:5d:ec:a2:ed:41:0d:9f:92:28:b7:51:82:1e: fd:af:0b:56:61:d8:ac:19:fe:0b:1d:78:ae:fc:1d: f7:a7:16:de:86:38:cd:c5:b2:c4:fb:c6:73:f9:82: 09:a8:e9:3d:ad:7e:e1:30:08:70:a7:14:fe:2b:88: 97:44:27:75:46:22:19:05:0a:35:02:cb:d3:a6:8f: b5:65:16:e6:e3:80:ae:76:2a:55:78:99:ba:2d:9c: a5:8c:87:25:d4:6a:3f:5b:d6:cc:89:c7:1e:7a:4e: d8:16:91:34:9f:97:aa:84:b4:5c:c1:db:e4:d0:da: 0b:a1:f9:85:fd:03:e2:90:9c:f4:bd:8e:05:e0:bb: 78:99:2f:6b:30:20:01:70:97:27:e9:1f:c0:cb:7a: 09:b5:9b:ee:6f:42:f9:1d:f8:0b:12:e5:e0:5b:9f: 90:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1E:F4:6F:10:B6:CB:E4:AD:8E:2D:09:AF:6D:1B:E5:E5:B0:69:3E X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:31:fc:ea:b7:e7:52:73:91:bd:92:d7:86:87:a2:a1:49:94: e5:7d:31:81:e4:01:1f:3d:10:a9:83:c1:4d:89:60:93:18:3b: 73:70:69:dc:46:85:d3:b6:55:ee:95:4e:c5:a7:8f:6f:46:2f: f9:7f:dd:d7:d7:c8:25:e8:6f:6d:ae:d8:36:f8:5b:03:bf:75: 06:9c:7d:e7:e3:dc:df:73:69:62:2b:68:09:55:a6:6f:20:4b: 02:b6:25:77:a7:e3:63:9e:38:17:c0:f0:32:00:d6:fe:1e:6a: 2e:8f:82:c0:4d:fb:f6:c1:a6:4e:8e:b6:52:eb:45:78:fb:c2: 93:d3:53:d7:38:d0:6a:d0:32:e1:ba:ed:96:91:60:e6:47:fb: 41:87:91:43:05:f6:04:9c:c9:ab:e1:6f:df:d2:86:71:3f:63: 6e:d7:77:f7:39:1c:d8:ca:35:c8:48:fa:0c:10:bb:6c:1d:3a: 70:d9:82:1e:d3:20:9c:b1:70:a8:a8:79:db:0d:5a:ef:31:9b: 2b:8d:4f:05:44:b9:7b:a3:57:5c:fa:69:eb:12:3c:5b:2b:3b: e1:ca:23:4e:83:f0:b1:b4:3a:31:3b:d1:6c:a0:8f:2e:11:01: 1d:09:5e:c1:a8:92:32:a4:d8:0a:b6:e3:77:1e:f5:98:50:9a: 03:09:d5:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4 MzJBOTI3OUIwHhcNMjYwNDE3MDMyMjI1WhcNMjYwNDI0MDMyMjI1WjAYMRYwFAYD VQQDEw02OWUxYTc3Mi03NmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoswNeOVg5vkZmjwCzvytszzmGfUJZ7cDx7rs1q1KUuiJNPPNGQzartC99DSX TBtPdX6zUicffycxB4p/rzpABV7Ftbb7PSYRgmWKkI+oqCU98gB0xV9UJ+MojV3s ou1BDZ+SKLdRgh79rwtWYdisGf4LHXiu/B33pxbehjjNxbLE+8Zz+YIJqOk9rX7h MAhwpxT+K4iXRCd1RiIZBQo1AsvTpo+1ZRbm44CudipVeJm6LZyljIcl1Go/W9bM icceek7YFpE0n5eqhLRcwdvk0NoLofmF/QPikJz0vY4F4Lt4mS9rMCABcJcn6R/A y3oJtZvub0L5HfgLEuXgW5+Q7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK4e9G8Q tsvkrY4tCa9tG+XlsGk+MB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t MllqQ0M5cTY4ZmVES3BKNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiDH86rfnUnORvZLXhoeioUmU5X0xgeQBHz0QqYPBTYlgkxg7c3Bp3EaF07ZV 7pVOxaePb0Yv+X/d19fIJehvba7YNvhbA791Bpx95+Pc33NpYitoCVWmbyBLArYl d6fjY544F8DwMgDW/h5qLo+CwE379sGmTo62UutFePvCk9NT1zjQatAy4brtlpFg 5kf7QYeRQwX2BJzJq+Fv39KGcT9jbtd39zkc2Mo1yEj6DBC7bB06cNmCHtMgnLFw qKh52w1a7zGbK41PBUS5e6NXXPpp6xI8Wys74cojToPwsbQ6MTvRbKCPLhEBHQle waiSMqTYCrbjdx71mFCaAwnVXQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:48:50 2026 by rpki-client