$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: /l79cFRd6/sRfPJAvRzlP/KYPvlZfXwlSfJW7FniQWA= Subject key identifier: A2:EB:B4:3B:BC:60:02:85:E1:F7:72:B1:BC:E1:BE:5E:25:22:F8:51 Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: 017C Signing time: Wed 05 Nov 2025 03:53:22 +0000 Manifest this update: Wed 05 Nov 2025 03:53:21 +0000 Manifest next update: Wed 12 Nov 2025 03:53:21 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: IiSvyCM9azVZ7EbWFKXuhjUkIrAmObwmuu7tmIPzg5I=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: QC/j4NdVMfLjJvi/tC4R1izEoPS35TLtB/DKzQHPD7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Validity Not Before: Nov 5 03:53:21 2025 GMT Not After : Nov 12 03:53:21 2025 GMT Subject: CN=690aca31-133f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e2:9c:27:21:cd:1a:bd:a8:03:b7:28:34:cf: b5:64:7e:81:16:5b:13:c1:2b:a6:43:59:56:9a:3d: 3f:1f:26:b1:8e:44:92:ca:e2:1c:5e:60:3d:c0:88: 7a:36:57:11:53:3e:94:c4:76:bc:40:43:6f:01:34: 02:b7:d2:93:0a:4d:81:8b:54:d5:7e:3e:63:4b:28: 3b:ae:49:74:d6:f2:27:67:0a:22:00:13:f0:28:50: 18:b3:19:de:7a:3a:ee:24:69:93:30:e0:4f:ec:04: 84:6a:9e:96:b7:c0:69:77:1d:d1:fc:89:d7:09:36: ef:0c:9f:f3:ff:9b:34:c0:ad:bf:19:2b:03:80:9a: 0b:af:c7:7c:fd:d9:60:99:fa:5a:02:c9:81:d5:0d: de:eb:d7:94:43:a5:9b:cc:75:be:6d:17:23:d5:45: f8:3f:32:85:de:9a:cc:61:98:2d:38:42:c2:c3:18: 36:d0:51:b5:5a:8b:c9:65:8b:e1:1a:44:04:5c:e2: 05:67:71:90:ec:ad:19:b7:8a:fe:1c:af:47:6b:f2: bd:f5:5f:8d:22:06:87:d7:93:da:34:84:08:6d:f5: 3e:ea:2f:82:e8:2e:25:a3:47:9c:30:97:6f:e0:b6: 15:36:ea:e5:18:8d:bc:54:72:75:d5:63:e9:59:10: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EB:B4:3B:BC:60:02:85:E1:F7:72:B1:BC:E1:BE:5E:25:22:F8:51 X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:9a:08:d9:f6:8d:01:fd:0f:8f:17:f8:90:06:fc:c0:c1:07: 9b:68:6a:cb:ff:29:df:63:d2:f2:a7:55:e8:b5:8b:87:23:74: 71:cb:3e:26:b2:0a:01:7e:e6:94:db:d0:f8:77:b6:f4:ac:45: 1f:f0:d1:dc:22:0f:93:bf:6a:15:84:97:2d:d5:ee:d1:8b:78: 73:97:69:3c:90:4e:30:c5:c8:c5:98:2d:8c:d8:88:79:7f:09: 0e:85:29:a1:20:b8:e2:9d:92:2e:71:41:8a:71:68:68:58:42: 85:43:f6:64:6f:78:b6:17:e8:92:e8:99:17:ea:bb:80:3e:b8: 0e:f3:e3:89:46:95:99:b1:bd:3f:97:5a:ec:31:e7:c8:70:8b: b0:ca:cd:d0:69:1e:35:96:22:a6:18:d6:9e:a0:5a:c1:52:67: 27:84:54:b2:c2:c9:0b:35:68:3b:f8:eb:15:11:9a:48:a4:97: db:69:60:90:0b:f0:51:c3:29:bc:28:99:7c:a5:5c:d0:3e:6b: f0:2b:33:3d:2f:43:05:0c:32:f7:9c:bb:d4:03:83:02:bd:00: 39:3c:c6:aa:3d:88:16:f6:16:fb:af:bc:67:93:8a:4c:74:e2: d2:7c:c2:4d:61:13:19:36:1e:a7:7b:71:f7:36:86:bc:8c:47: ee:c9:12:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4 MzJBOTI3OUIwHhcNMjUxMTA1MDM1MzIxWhcNMjUxMTEyMDM1MzIxWjAYMRYwFAYD VQQDEw02OTBhY2EzMS0xMzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eKcJyHNGr2oA7coNM+1ZH6BFlsTwSumQ1lWmj0/HyaxjkSSyuIcXmA9wIh6 NlcRUz6UxHa8QENvATQCt9KTCk2Bi1TVfj5jSyg7rkl01vInZwoiABPwKFAYsxne ejruJGmTMOBP7ASEap6Wt8Bpdx3R/InXCTbvDJ/z/5s0wK2/GSsDgJoLr8d8/dlg mfpaAsmB1Q3e69eUQ6WbzHW+bRcj1UX4PzKF3prMYZgtOELCwxg20FG1WovJZYvh GkQEXOIFZ3GQ7K0Zt4r+HK9Ha/K99V+NIgaH15PaNIQIbfU+6i+C6C4lo0ecMJdv 4LYVNurlGI28VHJ11WPpWRAIRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLrtDu8 YAKF4fdysbzhvl4lIvhRMB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t MllqQ0M5cTY4ZmVES3BKNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBmgjZ9o0B/Q+PF/iQBvzAwQebaGrL/ynfY9Lyp1XotYuHI3Rxyz4m sgoBfuaU29D4d7b0rEUf8NHcIg+Tv2oVhJct1e7Ri3hzl2k8kE4wxcjFmC2M2Ih5 fwkOhSmhILjinZIucUGKcWhoWEKFQ/Zkb3i2F+iS6JkX6ruAPrgO8+OJRpWZsb0/ l1rsMefIcIuwys3QaR41liKmGNaeoFrBUmcnhFSywskLNWg7+OsVEZpIpJfbaWCQ C/BRwym8KJl8pVzQPmvwKzM9L0MFDDL3nLvUA4MCvQA5PMaqPYgW9hb7r7xnk4pM dOLSfMJNYRMZNh6ne3H3Noa8jEfuyRIK -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:36 2025 by rpki-client