
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier: I6Pe0vwYvaITDssW/FsKoQLBIg7LMvMACDz2rVnKQ6k=
Subject key identifier: 5B:A5:F0:69:E0:2D:76:7E:DD:68:C5:01:54:91:11:4D:2F:F1:09:E8
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 2652
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number: 235A
Signing time: Thu 16 Apr 2026 15:53:11 +0000
Manifest this update: Thu 16 Apr 2026 15:53:10 +0000
Manifest next update: Thu 23 Apr 2026 15:53:10 +0000
Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: FBRqvOpTtLhAXHPY32eCZMSyirBWzttiwhdDrxUmO3s=)
2: BA007060162D11EEB79F703CC4F9AE02.roa (hash: 2tT35KvgWT6eSD3SMEte/ai9jtMm9HHJLln3LtY/FIM=)
3: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: lcNCXN4ALK0VGFhT1zX6j/V2lOrX3RIWe+TEHrIIfGM=)
4: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: s40dhU8PVwSIJYyVny3a6mMwcd7oSGfD4g601KJOsFI=)
5: DB8ED438DEFD11F0BBECA30E5A6F56BC.roa (hash: jV0ZsDmL7pYqG2HVwEL0ijFnLx0iNQWRnJh++Keye64=)
6: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: gU89Q3UCcTfIuonWf4oM4J8bmG7V6fm6L0kNg0N/Yj8=)
7: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 0nUZjvvfEq+idlxORxZdIF54lHoOJDVXKimVebHznwY=)
8: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: u5rpKj8Hh6LNPUmnAjTjSQjEw6FcWzoOU3Lk+UX8OeQ=)
9: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: dg5M28BM7Q9OSqEdMHsSLtI4cW3tbLsfo6oxRxnZkgU=)
10: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: 5aSuYQAxBrg4hpOCVUyocxVAo2M2ZMhQd9eXn7fmUUM=)
11: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: utZF48o+V1iqViyrul4ouJSJVWfTBOJgEF5i7OYCMAk=)
12: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: Tc0OP8h4p96K0lAWOjeLDMbCL1ZxKDKH+Zne0effYn4=)
13: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: YhmFklQYNFuVzlZwVyl13/fVO2Rx5D3vIX4W/p/maYc=)
14: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: Xj0L2cktFCj9AGPASACSNG1ar3gPj1CqHZie3Ff3N/Y=)
15: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: rI2XTb2R2MdCZIREOxF9HZq/Z6L/AhVI3hF8SVkg8es=)
16: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: icqWlmP2zqUN+YwmSN6Rkge3B7PWW5GQPImLsSSVMmQ=)
17: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: hrBe2Pa2BarjYurRPqX3BOavVRlDYYYGwxyR3VQWUl4=)
18: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: THinSV3E5HHG0rxGiH9voTblutCDfr1lVuBD4GRI9cI=)
19: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: cIljgUX9u7LYo/eVcmfxQWxLdJQ7vsFk54U+nDFtBl4=)
20: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: NyTfYihU81GPEUaJYODhHs69mOq8Zj00EZITNDmiBc4=)
21: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: 8ih8ohTFBlcOehmTFPg4QmBKSI75XqIdXYTzNP+mssw=)
22: 671E584437AE11F1ABA62586B7833773.roa (hash: GzaXvrIFA4BOnQROAThS0GwnqIbgRcENtuZ0H8vPDOE=)
23: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: +3uZuY7OlFyg2jsDB/Kz4JEWGg0yxvoM0a3nsJBXDX0=)
24: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: /zsZlwDj2pT6fAq7GkplNYrQROZ2c4fzOAUgQTDgsk4=)
25: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: 5zBpGvGX5c+RGNoV+CNfoI4jKn3SVtOSoGuIjJJwB/4=)
26: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: xeXe0W9LGadlWUHbrq3B2ViS6+U7W91OTOihQY9/fWg=)
27: 94C16496222811EF99153155C4F9AE02.roa (hash: IhQ1zSbXXf4rr1X3pECpva9uGFFRgEG7ArayUjxk3XY=)
28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: ohZ0rNcC4o/lvqqhJ5dRQl2sFSNT+9W0ZljDeoeU/f8=)
29: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: s4JLvZfEEcVWrVTGXPW1vZiV5kDqzl4x/TrNjlyz8lg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9810 (0x2652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Apr 16 15:53:10 2026 GMT
Not After : Apr 23 15:53:10 2026 GMT
Subject: CN=69e105e7-1976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:80:1c:03:39:ce:01:da:1b:5e:dc:50:6d:
ed:9c:a9:a5:17:93:af:45:1e:76:cd:cb:4c:fa:9e:
34:b6:44:59:69:c0:cd:46:24:f2:7a:f6:c7:11:68:
25:7c:b0:d5:34:d1:1d:2a:be:3d:c0:99:21:62:2b:
d8:97:4b:8d:82:7b:41:96:ad:87:44:02:60:97:a2:
f1:42:8c:8a:2f:04:f6:38:3b:69:3c:3c:cc:42:74:
e0:af:22:29:be:a3:57:10:3c:0f:1f:cf:78:07:95:
12:19:8e:7b:ca:2b:5e:a9:30:06:ae:ed:07:53:8f:
29:20:7d:de:9a:7c:6b:3d:28:c9:b4:ca:01:76:00:
95:99:51:6c:51:39:1c:ff:ee:80:75:20:95:8c:a9:
14:92:05:5d:76:fd:20:67:91:78:5e:fc:dd:d0:0c:
3f:14:3d:44:99:9f:9c:bb:61:0a:e0:72:d4:1f:67:
92:fc:77:fc:46:03:8a:61:9e:25:fa:a5:1d:4b:79:
93:87:40:f9:7d:d0:9b:8b:6d:68:04:d3:19:97:4f:
76:d6:17:4f:18:a6:8e:74:9a:41:dd:f5:e0:c8:7c:
59:5a:72:3c:1b:ad:4d:e1:bc:4e:fe:64:bd:88:26:
72:26:91:3e:3b:de:12:2a:24:20:1d:75:54:68:2e:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A5:F0:69:E0:2D:76:7E:DD:68:C5:01:54:91:11:4D:2F:F1:09:E8
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:fc:42:6e:19:dd:7d:d9:c0:b4:02:37:77:a7:e3:85:38:78:
dc:cf:72:1c:b3:99:ce:4d:19:f7:e7:f4:57:a2:1d:8f:ba:1f:
7c:c5:d7:6e:5e:06:f8:1b:36:c9:1d:90:80:c7:b3:e0:c1:58:
d1:e0:b6:0f:7d:38:ce:01:c8:ae:3b:b0:a3:64:46:39:70:ee:
17:f2:d3:b4:2d:0b:8a:5c:3d:e5:bc:e1:5d:87:22:a1:93:93:
f3:88:13:e4:ba:76:9c:a2:6c:a3:7a:f9:8d:b0:f4:ff:05:9c:
ce:b8:e7:ec:f0:ba:b7:68:c9:e5:51:ce:f0:03:36:66:13:86:
84:68:e2:45:08:d1:29:7b:b0:d2:49:9e:fa:45:fc:af:c5:37:
dc:5a:93:8d:5f:5c:3c:fb:9a:86:0c:9c:87:bb:b6:f0:1c:f2:
1e:28:10:9c:f1:b7:4e:3f:9f:57:92:01:3d:af:cc:7f:77:72:
4b:be:c0:51:23:f8:6e:ab:9d:72:8f:2e:55:c1:fc:ec:18:80:
22:18:a0:75:77:96:05:df:9b:ec:c5:ee:85:bf:64:96:95:03:
c3:3f:8f:a8:f0:c7:b2:44:d3:47:b8:19:51:37:9f:6a:eb:5e:
97:59:d2:c3:07:36:46:53:15:81:df:9a:1f:ba:3d:30:7a:c4:
43:2c:f0:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC
OEIyNDAwMkIwHhcNMjYwNDE2MTU1MzEwWhcNMjYwNDIzMTU1MzEwWjAYMRYwFAYD
VQQDEw02OWUxMDVlNy0xOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqhiAHAM5zgHaG17cUG3tnKmlF5OvRR52zctM+p40tkRZacDNRiTyevbHEWgl
fLDVNNEdKr49wJkhYivYl0uNgntBlq2HRAJgl6LxQoyKLwT2ODtpPDzMQnTgryIp
vqNXEDwPH894B5USGY57yiteqTAGru0HU48pIH3emnxrPSjJtMoBdgCVmVFsUTkc
/+6AdSCVjKkUkgVddv0gZ5F4Xvzd0Aw/FD1EmZ+cu2EK4HLUH2eS/Hf8RgOKYZ4l
+qUdS3mTh0D5fdCbi21oBNMZl0921hdPGKaOdJpB3fXgyHxZWnI8G61N4bxO/mS9
iCZyJpE+O94SKiQgHXVUaC4HIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFul8Gng
LXZ+3WjFAVSREU0v8QnoMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy
Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL
ejVRS0lveEx3Sk80c2tBQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAafxCbhndfdnAtAI3d6fjhTh43M9yHLOZzk0Z9+f0V6Idj7offMXXbl4G+Bs2
yR2QgMez4MFY0eC2D304zgHIrjuwo2RGOXDuF/LTtC0Lilw95bzhXYcioZOT84gT
5Lp2nKJso3r5jbD0/wWczrjn7PC6t2jJ5VHO8AM2ZhOGhGjiRQjRKXuw0kme+kX8
r8U33FqTjV9cPPuahgych7u28BzyHigQnPG3Tj+fV5IBPa/Mf3dyS77AUSP4bqud
co8uVcH87BiAIhigdXeWBd+b7MXuhb9klpUDwz+PqPDHskTTR7gZUTefautel1nS
wwc2RlMVgd+aH7o9MHrEQyzwPg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:13 2026 by rpki-client