
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json)
Hash identifier: uthbE2AZrs2kdmOK+GCmrXwIKNrvZPytdrIj+CwRlcU=
Subject key identifier: 29:74:8A:EE:8F:6F:9D:28:93:54:D8:EF:BF:74:B4:EC:6E:AC:EB:CF
Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B
Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
Manifest number: 0205
Signing time: Mon 27 Jul 2026 04:42:27 +0000
Manifest this update: Mon 27 Jul 2026 04:42:26 +0000
Manifest next update: Mon 03 Aug 2026 04:42:26 +0000
Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: kySBJGDacqI2C377plafEYMjwiXOj9WCtHnV6Fi7o9w=)
2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: /r8YzB+3Ermc5mHFzYv0oDUZxQd5lLv3vmeCAA8WE5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl
rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E847, serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B
Validity
Not Before: Jul 27 04:42:26 2026 GMT
Not After : Aug 3 04:42:26 2026 GMT
Subject: CN=6a66e1b3-fcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:d4:94:9c:83:2d:b9:05:9e:41:ee:1f:10:
c2:34:5d:d6:1d:9a:b5:a8:1b:88:e2:6f:2e:85:4b:
b7:bc:66:67:92:3b:5d:d2:22:4b:86:c3:30:43:b6:
39:a7:26:a7:29:44:77:8c:75:d5:4f:43:bb:48:6e:
96:41:65:22:ba:27:61:b9:d3:65:d8:dd:e7:9c:4c:
98:44:aa:13:e2:6f:ad:24:04:17:5b:83:d0:64:1c:
73:ed:54:8b:6a:23:b6:12:26:d5:a8:06:dc:3f:49:
28:df:48:62:76:07:fe:ee:d3:9d:89:59:ab:bc:19:
4b:1d:70:01:6c:bf:3f:98:1c:8f:6d:77:d8:c4:ea:
6f:22:65:54:00:38:25:69:cd:18:7b:6b:22:9c:ee:
79:57:c8:ca:69:8b:2d:dc:9b:ba:fb:50:fb:f8:8b:
38:bb:41:f6:7f:e1:d6:29:cf:56:b8:27:89:a0:c4:
1e:46:35:9a:91:46:ee:9b:e8:cc:b7:63:c6:91:dd:
c5:5e:30:0f:60:03:18:86:2c:44:c2:ee:db:0a:ba:
5c:68:ee:8d:cf:7e:4a:a2:61:dd:29:44:fb:2f:c1:
39:24:89:29:b7:e6:4a:7c:65:1e:01:00:ec:85:10:
ca:5d:ca:72:58:39:c7:08:36:b4:c8:34:12:b5:3f:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:74:8A:EE:8F:6F:9D:28:93:54:D8:EF:BF:74:B4:EC:6E:AC:EB:CF
X509v3 Authority Key Identifier:
keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7e:f9:b8:ac:20:45:4c:67:fd:aa:fd:c4:33:90:e9:fe:65:
f2:4f:d5:c1:84:56:ca:8d:1d:e1:32:a8:4b:6d:4a:73:a2:e9:
8c:fd:af:e8:d4:3f:9d:f5:f2:64:ae:b1:19:5f:bc:7c:60:1d:
d4:bc:e1:bb:32:7b:1f:cd:b8:a5:d2:e9:d7:21:4a:61:d1:7d:
97:ce:a6:8f:da:e0:88:cc:96:62:ec:3f:4a:61:56:e2:e0:b2:
f4:3e:c8:27:36:e6:d6:7d:e2:72:2a:de:5b:ce:23:2d:8a:c8:
54:70:f2:6a:cf:fb:3a:4e:13:21:9f:01:4a:74:02:a0:68:74:
41:09:9a:3a:44:1c:bc:57:a2:1e:de:fc:bf:8d:71:f2:54:19:
de:1d:d7:35:5c:5a:06:75:bd:03:53:1e:bb:8c:c8:27:32:0b:
e6:cf:39:c9:34:83:45:a6:bb:21:cc:71:89:94:82:d4:a9:44:
d3:7a:0a:6e:21:06:35:54:1a:2e:58:0b:07:d1:00:58:89:11:
0d:cd:47:59:86:7c:f6:ea:2d:0b:1d:4b:d7:6b:d0:c1:85:ee:
db:66:4b:e6:71:ae:ca:35:2e:f9:c8:fb:4b:52:21:65:41:2f:
1d:38:69:ce:3a:1f:c5:a7:c6:b4:95:60:c6:46:e1:7b:f0:82:
dd:9b:93:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4
MzJBOTI3OUIwHhcNMjYwNzI3MDQ0MjI2WhcNMjYwODAzMDQ0MjI2WjAYMRYwFAYD
VQQDEw02YTY2ZTFiMy1mY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAszvUlJyDLbkFnkHuHxDCNF3WHZq1qBuI4m8uhUu3vGZnkjtd0iJLhsMwQ7Y5
pyanKUR3jHXVT0O7SG6WQWUiuidhudNl2N3nnEyYRKoT4m+tJAQXW4PQZBxz7VSL
aiO2EibVqAbcP0ko30hidgf+7tOdiVmrvBlLHXABbL8/mByPbXfYxOpvImVUADgl
ac0Ye2sinO55V8jKaYst3Ju6+1D7+Is4u0H2f+HWKc9WuCeJoMQeRjWakUbum+jM
t2PGkd3FXjAPYAMYhixEwu7bCrpcaO6Nz35KomHdKUT7L8E5JIkpt+ZKfGUeAQDs
hRDKXcpyWDnHCDa0yDQStT9BrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCl0iu6P
b50ok1TY7790tOxurOvPMB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz
REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t
MllqQ0M5cTY4ZmVES3BKNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyX75uKwgRUxn/ar9xDOQ6f5l8k/VwYRWyo0d4TKoS21Kc6LpjP2v6NQ/nfXy
ZK6xGV+8fGAd1LzhuzJ7H824pdLp1yFKYdF9l86mj9rgiMyWYuw/SmFW4uCy9D7I
Jzbm1n3icireW84jLYrIVHDyas/7Ok4TIZ8BSnQCoGh0QQmaOkQcvFeiHt78v41x
8lQZ3h3XNVxaBnW9A1Meu4zIJzIL5s85yTSDRaa7IcxxiZSC1KlE03oKbiEGNVQa
LlgLB9EAWIkRDc1HWYZ89uotCx1L12vQwYXu22ZL5nGuyjUu+cj7S1IhZUEvHThp
zjofxafGtJVgxkbhe/CC3ZuTZQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:29 2026 by rpki-client