$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: gAl36B34KM4lWMgJvgqN2M/dZl8zPkQkw0GijMvZEJA= Subject key identifier: 6C:17:C5:06:B1:6C:E4:45:8F:4C:38:40:14:7D:DE:88:80:FA:93:73 Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: 0151 Signing time: Mon 11 Aug 2025 04:20:41 +0000 Manifest this update: Mon 11 Aug 2025 04:20:41 +0000 Manifest next update: Mon 18 Aug 2025 04:20:41 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: kHFkstpG7yJ6XxcvE5B9++hsDkLE+AWyevmKl/MOeCc=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: QC/j4NdVMfLjJvi/tC4R1izEoPS35TLtB/DKzQHPD7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 04:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Validity Not Before: Aug 11 04:20:41 2025 GMT Not After : Aug 18 04:20:41 2025 GMT Subject: CN=68996f99-8a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:ce:86:e1:a6:fb:68:21:89:3e:f4:93:08: 39:a5:93:44:bb:60:10:43:fa:15:d7:2b:48:a9:72: 81:8f:2c:95:db:68:e0:3d:27:31:6b:54:79:5c:e3: 6d:52:97:d6:60:79:41:a9:27:82:2d:b2:4f:05:08: cb:6f:cd:88:0f:86:ab:a2:49:67:9c:6d:9f:1c:11: 51:2e:ad:c6:6b:a9:29:07:6f:7f:d4:1b:99:f0:3b: 26:f1:33:51:38:eb:71:0e:98:d3:ba:95:fa:65:2f: 97:2e:07:d3:6b:e9:e9:62:0d:49:d1:26:cb:3d:1f: 12:04:6e:7a:4e:11:5c:bf:a4:23:26:b6:b9:60:4d: 9d:e8:13:10:eb:3b:78:31:77:69:51:c8:9b:38:6f: d1:10:c9:99:68:c2:10:0d:b6:88:7f:6f:f0:26:a8: 91:65:fd:97:ba:19:28:53:38:78:4f:4e:b5:2c:e0: b6:80:d6:0c:cf:48:94:32:96:23:f7:43:bc:d8:38: f2:6d:db:49:5d:75:b6:3e:74:37:e9:48:0e:a4:dc: 2d:30:15:d4:ca:64:8c:e0:24:0d:07:24:0b:7b:2f: 86:36:07:da:4a:2d:c9:00:4d:c3:8f:70:83:a8:33: 42:1a:10:79:42:28:d3:b7:f9:d2:c4:7d:0d:2f:c7: c6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:17:C5:06:B1:6C:E4:45:8F:4C:38:40:14:7D:DE:88:80:FA:93:73 X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:36:b1:f3:4e:b2:96:73:e9:f9:98:f9:c1:68:4b:31:3a:56: 51:29:fb:e5:aa:6e:20:1c:db:16:ea:b9:34:50:39:d8:d8:b4: 4f:12:ec:1e:ef:e6:5d:bf:1c:9f:ee:4a:fd:ea:e8:e9:15:31: af:ed:3b:7a:d8:88:90:b6:48:0f:3a:49:07:a5:1e:34:ea:a0: 12:b9:ac:bb:ff:5d:d8:a1:a8:7c:6b:82:69:84:b3:3b:b0:31: c3:fa:22:81:72:8b:e9:60:d5:b1:33:25:95:46:55:16:0d:06: 2a:76:53:e3:d7:92:20:42:fc:03:45:bd:03:e7:39:55:92:4b: ef:e0:c3:3f:9f:5b:e8:1b:8d:7b:a9:09:0b:8c:a9:c7:c5:0e: ac:c9:c9:5f:ce:7d:05:ad:7a:c5:73:7f:49:d4:cd:be:18:d3: ec:e3:64:af:0b:1d:14:59:a6:c1:a9:a0:00:f5:db:11:4d:a6: 0d:e4:bd:3d:a1:c0:a5:79:58:fc:ad:1a:4f:be:43:62:62:d0: 08:05:5a:fd:f7:e8:0c:c0:c3:8c:3f:11:f4:9a:17:9c:89:07: fd:d2:f4:e8:d1:88:b6:61:41:68:f8:86:6a:e1:d3:ef:9e:9b: dd:43:a1:6f:00:a6:04:07:81:46:54:6f:f3:19:4b:83:07:07: 08:f4:6f:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4 MzJBOTI3OUIwHhcNMjUwODExMDQyMDQxWhcNMjUwODE4MDQyMDQxWjAYMRYwFAYD VQQDEw02ODk5NmY5OS04YTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDvOhuGm+2ghiT70kwg5pZNEu2AQQ/oV1ytIqXKBjyyV22jgPScxa1R5XONt UpfWYHlBqSeCLbJPBQjLb82ID4aroklnnG2fHBFRLq3Ga6kpB29/1BuZ8Dsm8TNR OOtxDpjTupX6ZS+XLgfTa+npYg1J0SbLPR8SBG56ThFcv6QjJra5YE2d6BMQ6zt4 MXdpUcibOG/REMmZaMIQDbaIf2/wJqiRZf2XuhkoUzh4T061LOC2gNYMz0iUMpYj 90O82DjybdtJXXW2PnQ36UgOpNwtMBXUymSM4CQNByQLey+GNgfaSi3JAE3Dj3CD qDNCGhB5QijTt/nSxH0NL8fGNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwXxQax bORFj0w4QBR93oiA+pNzMB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t MllqQ0M5cTY4ZmVES3BKNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWNrHzTrKWc+n5mPnBaEsxOlZRKfvlqm4gHNsW6rk0UDnY2LRPEuwe 7+Zdvxyf7kr96ujpFTGv7Tt62IiQtkgPOkkHpR406qASuay7/13Yoah8a4JphLM7 sDHD+iKBcovpYNWxMyWVRlUWDQYqdlPj15IgQvwDRb0D5zlVkkvv4MM/n1voG417 qQkLjKnHxQ6syclfzn0FrXrFc39J1M2+GNPs42SvCx0UWabBqaAA9dsRTaYN5L09 ocCleVj8rRpPvkNiYtAIBVr99+gMwMOMPxH0mheciQf90vTo0Yi2YUFo+IZq4dPv npvdQ6FvAKYEB4FGVG/zGUuDBwcI9G86 -----END CERTIFICATE-----Generated at Wed Aug 13 04:30:02 2025 by rpki-client