$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json) Hash identifier: GL33NhpyrVeZohxAnKygPiKnkF9KF93g6jfSRvS4L78= Subject key identifier: A9:30:9F:D1:1B:AA:BB:2A:4A:9F:F5:8A:90:17:DC:5D:44:C7:C2:E9 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft Manifest number: 22A4 Signing time: Wed 18 Jun 2025 15:57:55 +0000 Manifest this update: Wed 18 Jun 2025 15:57:54 +0000 Manifest next update: Wed 25 Jun 2025 15:57:54 +0000 Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: 7TYM3yOkNzLdvD4O0SqG/lb8qaXrnvoksiOogFuQq0M=) 2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: n7pXi66lxgmnVUzRCaGjU+Jyqvcaobv+LRa6sWK36IE=) 3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: N/j8Xc916eNg8eHpf/TimkfEUKue+NoblWGnaKxHRm0=) 4: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: bxRIP/V3KFaeNWfQRbqaVdttFxEirD+o4UsmoISKZuc=) 5: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: CQWi2YF8MQ4UHFHqDi+xaEbH9uwwbmiWIRH/VdottEg=) 6: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: nPuyeWNG9exmJBtrhR6dKImyLvexezTrvMYpeknk12s=) 7: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: tUCXmWof0USHAd/AnTe/zIcja2f8KydMrpeti85baXA=) 8: 94C16496222811EF99153155C4F9AE02.roa (hash: Ac6cnmBtCeQwIV5PdTOpzzOyj+FEtvQgRkdEJEIsldM=) 9: BA007060162D11EEB79F703CC4F9AE02.roa (hash: i9EBn86mLgOFoT0s7Sga+CIh82Sy/UwirM5LdXIelBE=) 10: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: tS+qP2Je+Zz8kTJK21naf6pRVHAGu1cyXc5EQvZ1I6M=) 11: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: WtwbdAJs3osRQvsAOMvWgusqoBOVQjjr1Dv2FNOXu+k=) 12: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: n7jlwwjdFJ+RKwuKH29PXvEGEpKzuEPAVlddcWoawd4=) 13: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: +CGhSvKre7unc2jjZTN2h/5C4OKnNYy8AFrBlT9QgCc=) 14: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: BoIbbyMCoyjBPVVzzNzvY0re58/2xN3cHA7chKiXOvg=) 15: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: 42+AdUwxxCnW8+mpW9En0BbvfvMfDp076eo2jJL8hog=) 16: 9043DEEC36D311F0944CB44FC4F9AE02.roa (hash: uW/j/pPXhbeAEC1cTq4Sf49kqBXYvsbiA9+xtpZ3SZ4=) 17: DFED3A4A36EE11F0AB6FC454C4F9AE02.roa (hash: eLh/ozyQghqwV0kzUHtTkl4FzUqR+4Rcc4GLBzEcxdY=) 18: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 4Baklu7fz790X3t+DnvBTOz3bpmb9db78d+W2Rsz46U=) 19: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: d5k8mBEvQfUgZFSJDf+SsljLPzLne0iAQgk3UuEZ4sE=) 20: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: o/tOGxE4Ft5fX3yUC9xv485nnBbYIcg8RYaepJzupC0=) 21: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: uzN3qB5XPrhFucLN2OmQ5NTjj6qYhLZBg4aeWaCRKe4=) 22: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 94Rt3YQOo3z7AHBNPf7mUO8MdNhSBexZLfHTIqNCUWQ=) 23: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: AITRCg2vjnVWNYtFs2RtxbI+uUU9ZjuERKnWghkFVBY=) 24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: 2MFkWatEYr7ySzuIIVO+LKsoWJa2vp38UqDbLF7GUV8=) 25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: mSHVgOgebMql2vVyUMQtDn8MbI5cBn29yqk8tb1nlIk=) 26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: mmR6Uep7EqCu0nzQaonURcP5xC0tMXraR08pUCncH0A=) 27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: n/BL8NEIAHpYJ0v9wedyUGmzL2t/5O06rDGFVPPDMuI=) 28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: 6y4Mf6N4wFMfqpPJoLDOmmq0S1UQIMIv6lZqvZ9nJLY=) 29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: 6cY6Ob6u+QL6WHZfOXxaIiNx2wMqL0gPJlcRnC46fIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9529 (0x2539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jun 18 15:57:54 2025 GMT Not After : Jun 25 15:57:54 2025 GMT Subject: CN=6852e203-32f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:9f:b9:3e:40:c9:b3:a3:bc:c5:f2:ae:9f: e6:c8:6e:6b:60:63:82:86:da:14:3a:20:6d:fd:41: b0:75:a9:dc:b4:53:2f:58:1f:1e:fd:75:bd:9f:99: f0:06:e7:1f:e4:cc:c3:9a:5a:05:ab:37:92:86:71: 5c:32:21:7a:40:ff:51:0c:50:48:d0:ac:f1:66:f1: e2:7b:45:70:68:68:17:33:8f:29:a2:3d:f1:1c:43: 93:c0:c0:15:a4:24:ed:4d:62:13:91:ec:d5:e8:72: f5:aa:f7:38:88:0e:57:6d:32:13:f1:3d:c2:77:6d: 8d:a5:49:4b:1e:84:bf:82:f8:75:27:42:11:44:40: c0:a7:b1:e3:65:49:3f:27:c1:82:e9:ae:e0:23:1c: 4a:3e:f2:bd:6f:6f:b0:e7:1c:bd:31:24:38:d0:7e: 0b:4c:eb:4b:8e:49:86:fd:bd:64:e7:b9:3a:89:ff: 54:56:34:a2:2c:24:cc:08:7b:71:76:30:61:72:2d: 49:4e:ea:3d:b8:32:57:68:9b:1d:b6:68:25:91:01: 0c:17:e8:0b:60:9a:ef:8d:04:a1:d4:11:e9:d2:36: 3c:d1:41:58:19:fd:53:82:d3:ac:e5:6c:99:e2:4e: 5d:96:75:2c:23:06:2d:5e:e3:68:cc:a1:2b:42:4f: 4c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:30:9F:D1:1B:AA:BB:2A:4A:9F:F5:8A:90:17:DC:5D:44:C7:C2:E9 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:67:a1:02:90:ee:dc:2b:4f:d1:f1:9a:f7:a9:7d:fa:5f:07: 8e:75:90:d9:94:4f:ce:cc:32:b2:8f:46:e3:4f:71:b7:05:53: 6a:e2:25:b6:67:a5:3c:da:a2:c4:90:92:da:ef:15:9c:1b:a2: 0b:3d:1f:5f:51:36:6e:a5:59:5e:1a:d0:5d:05:5b:4a:d8:3e: b3:b2:cf:9b:f7:3e:70:9f:a2:28:96:0d:64:b5:2e:82:59:40: 54:c8:76:c4:ce:5f:4a:45:d2:ee:27:5b:9b:37:8d:e0:31:cc: 79:be:eb:1b:92:b2:2c:84:c6:a0:27:3c:ba:df:8b:69:9a:a9: 02:ee:0e:19:50:70:0f:56:3f:a7:9e:03:a9:d3:55:6b:42:0b: c0:5e:b2:dd:8e:44:3c:1a:ca:0b:99:3e:71:2c:da:3e:6c:18: dc:e5:a6:5a:9a:97:5b:29:dd:32:97:a3:34:74:90:3f:23:b8: 66:14:3d:4a:b1:98:16:dd:b0:e8:cb:0f:e8:dc:df:03:ff:73: 81:aa:f1:5a:a5:63:89:d9:eb:2b:34:43:d2:d7:49:89:e3:f4: 28:58:2d:35:b3:65:1c:6a:65:ac:b5:5d:dd:19:a4:c6:1c:d3: 9e:de:69:ed:26:3d:82:ff:ba:77:a6:cf:66:59:b8:f0:8b:ec: 84:ab:74:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwNjE4MTU1NzU0WhcNMjUwNjI1MTU1NzU0WjAYMRYwFAYD VQQDEw02ODUyZTIwMy0zMmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYOfuT5AybOjvMXyrp/myG5rYGOChtoUOiBt/UGwdanctFMvWB8e/XW9n5nw Bucf5MzDmloFqzeShnFcMiF6QP9RDFBI0KzxZvHie0VwaGgXM48poj3xHEOTwMAV pCTtTWITkezV6HL1qvc4iA5XbTIT8T3Cd22NpUlLHoS/gvh1J0IRREDAp7HjZUk/ J8GC6a7gIxxKPvK9b2+w5xy9MSQ40H4LTOtLjkmG/b1k57k6if9UVjSiLCTMCHtx djBhci1JTuo9uDJXaJsdtmglkQEMF+gLYJrvjQSh1BHp0jY80UFYGf1TgtOs5WyZ 4k5dlnUsIwYtXuNozKErQk9M0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkwn9Eb qrsqSp/1ipAX3F1Ex8LpMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXZ6ECkO7cK0/R8Zr3qX36XweOdZDZlE/OzDKyj0bjT3G3BVNq4iW2 Z6U82qLEkJLa7xWcG6ILPR9fUTZupVleGtBdBVtK2D6zss+b9z5wn6Iolg1ktS6C WUBUyHbEzl9KRdLuJ1ubN43gMcx5vusbkrIshMagJzy634tpmqkC7g4ZUHAPVj+n ngOp01VrQgvAXrLdjkQ8GsoLmT5xLNo+bBjc5aZampdbKd0yl6M0dJA/I7hmFD1K sZgW3bDoyw/o3N8D/3OBqvFapWOJ2esrNEPS10mJ4/QoWC01s2UcamWstV3dGaTG HNOe3mntJj2C/7p3ps9mWbjwi+yEq3TB -----END CERTIFICATE-----Generated at Thu Jun 19 13:47:21 2025 by rpki-client