$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json) Hash identifier: rBLoSzXOUfL7s2x4FL/1G9mUTmlHF0NQQ4kCyczoUz0= Subject key identifier: 15:17:66:41:4B:4D:E6:AF:86:81:26:A2:02:8E:BD:F3:40:C3:B3:A7 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft Manifest number: 227B Signing time: Thu 24 Apr 2025 15:58:49 +0000 Manifest this update: Thu 24 Apr 2025 15:58:48 +0000 Manifest next update: Thu 01 May 2025 15:58:48 +0000 Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: 7V+cHXHzeFd7uYqyEMaimEjx6TgKe1LfkBuChnfbAdg=) 2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: n7pXi66lxgmnVUzRCaGjU+Jyqvcaobv+LRa6sWK36IE=) 3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: N/j8Xc916eNg8eHpf/TimkfEUKue+NoblWGnaKxHRm0=) 4: 642583D4144511F0B1B2DD1AC4F9AE02.roa (hash: I3rmMsPO9b1m3yi7MzO+9VvcWmRuH5agiuA3fee6PLU=) 5: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: bxRIP/V3KFaeNWfQRbqaVdttFxEirD+o4UsmoISKZuc=) 6: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: CQWi2YF8MQ4UHFHqDi+xaEbH9uwwbmiWIRH/VdottEg=) 7: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: nPuyeWNG9exmJBtrhR6dKImyLvexezTrvMYpeknk12s=) 8: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: tUCXmWof0USHAd/AnTe/zIcja2f8KydMrpeti85baXA=) 9: 94C16496222811EF99153155C4F9AE02.roa (hash: Ac6cnmBtCeQwIV5PdTOpzzOyj+FEtvQgRkdEJEIsldM=) 10: BA007060162D11EEB79F703CC4F9AE02.roa (hash: i9EBn86mLgOFoT0s7Sga+CIh82Sy/UwirM5LdXIelBE=) 11: B81B3EACB5FE11EFBDC28969C4F9AE02.roa (hash: cliKQfssgT0XbLB0hhVLxhVkmpwjdFiqqwJlhexg3Zs=) 12: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: tS+qP2Je+Zz8kTJK21naf6pRVHAGu1cyXc5EQvZ1I6M=) 13: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: WtwbdAJs3osRQvsAOMvWgusqoBOVQjjr1Dv2FNOXu+k=) 14: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: n7jlwwjdFJ+RKwuKH29PXvEGEpKzuEPAVlddcWoawd4=) 15: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: +CGhSvKre7unc2jjZTN2h/5C4OKnNYy8AFrBlT9QgCc=) 16: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: BoIbbyMCoyjBPVVzzNzvY0re58/2xN3cHA7chKiXOvg=) 17: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: 42+AdUwxxCnW8+mpW9En0BbvfvMfDp076eo2jJL8hog=) 18: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 4Baklu7fz790X3t+DnvBTOz3bpmb9db78d+W2Rsz46U=) 19: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: d5k8mBEvQfUgZFSJDf+SsljLPzLne0iAQgk3UuEZ4sE=) 20: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: o/tOGxE4Ft5fX3yUC9xv485nnBbYIcg8RYaepJzupC0=) 21: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: uzN3qB5XPrhFucLN2OmQ5NTjj6qYhLZBg4aeWaCRKe4=) 22: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 94Rt3YQOo3z7AHBNPf7mUO8MdNhSBexZLfHTIqNCUWQ=) 23: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: AITRCg2vjnVWNYtFs2RtxbI+uUU9ZjuERKnWghkFVBY=) 24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: 2MFkWatEYr7ySzuIIVO+LKsoWJa2vp38UqDbLF7GUV8=) 25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: mSHVgOgebMql2vVyUMQtDn8MbI5cBn29yqk8tb1nlIk=) 26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: mmR6Uep7EqCu0nzQaonURcP5xC0tMXraR08pUCncH0A=) 27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: n/BL8NEIAHpYJ0v9wedyUGmzL2t/5O06rDGFVPPDMuI=) 28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: 6y4Mf6N4wFMfqpPJoLDOmmq0S1UQIMIv6lZqvZ9nJLY=) 29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: 6cY6Ob6u+QL6WHZfOXxaIiNx2wMqL0gPJlcRnC46fIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9480 (0x2508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Apr 24 15:58:48 2025 GMT Not After : May 1 15:58:48 2025 GMT Subject: CN=680a5fb8-7361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:df:a0:5e:fd:88:a2:10:5c:c2:b5:07:f1:37: ec:e7:e8:17:85:9d:4e:4f:c3:73:58:d5:a5:2d:f3: f7:9d:e2:e1:03:43:e1:4a:fb:91:e9:8b:9a:57:83: 9e:66:b3:cb:6c:bb:c8:85:df:d2:f4:55:6f:86:9c: 1e:1d:f3:5c:e1:c4:19:02:59:77:f9:ef:1d:01:f5: 2e:31:dc:5f:d1:41:c9:b4:93:93:c4:67:2b:dc:06: 6c:cb:54:40:4a:59:6f:7f:94:45:5c:82:96:c4:1d: b3:73:55:1a:03:c7:d8:71:30:15:97:e6:f8:e0:95: 98:da:e4:f9:e5:0b:c7:a8:08:c2:85:02:64:31:15: 95:47:f2:a0:76:24:23:6c:f0:55:3a:4c:ae:96:73: 2f:7a:7c:48:c9:75:b2:b7:38:b9:8b:b5:16:f9:f3: 40:f6:11:25:61:2f:15:35:55:c3:50:e4:02:ca:0b: 7e:db:c6:18:9c:4b:30:5e:d9:3d:86:de:ed:64:06: 69:05:b8:6d:a2:0b:91:56:40:5b:c6:b9:45:81:45: a2:92:ef:16:a5:e6:ab:16:a0:41:fd:5a:13:85:c0: 42:39:66:bb:d4:7e:46:6f:39:e6:9c:27:8d:b7:58: 8b:6b:d8:f2:5e:12:22:56:15:0e:2d:71:cb:1f:60: 73:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:17:66:41:4B:4D:E6:AF:86:81:26:A2:02:8E:BD:F3:40:C3:B3:A7 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:cf:e8:04:af:6e:91:a2:da:66:c2:2c:56:02:c6:f6:72:a2: 49:46:f6:dc:bc:3c:62:2e:35:53:f5:c9:75:49:28:0e:6c:2e: c6:0a:4c:5c:28:70:50:55:cf:bd:27:4b:87:8f:93:ef:fd:40: 0d:a4:68:32:2a:80:59:ef:d2:23:ca:af:d4:1f:e4:9a:19:50: 4c:96:2d:3a:75:09:c8:4e:ad:40:18:cb:b0:3b:44:f5:79:e6: b3:1d:af:a2:a1:95:a9:d9:02:a7:a4:90:58:3e:f5:ef:ee:3e: ef:ac:e4:5d:1d:6e:fb:67:32:61:2b:c7:c8:7a:ca:45:b9:3a: 79:40:0f:c5:8c:06:98:6c:91:87:40:a2:98:0b:5f:b8:dd:75: 18:d1:13:06:f4:07:5e:ce:fc:93:1b:39:c4:46:1f:79:02:fd: 2a:80:74:35:7f:b7:1c:03:2d:a8:f3:bd:14:fd:aa:f3:bd:a8: 13:84:b2:71:e3:64:52:d9:ce:c8:c6:8c:38:be:0d:02:9f:59: f3:34:28:b5:7c:41:00:e9:7b:36:c0:38:cf:82:e9:ae:58:34: 6d:57:04:16:ab:a9:5d:3f:c6:b5:12:12:d1:fc:6c:8c:a7:05: 05:40:09:d4:a5:cb:8b:e0:18:23:3d:51:2f:9f:2f:83:72:29: ef:f3:53:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwNDI0MTU1ODQ4WhcNMjUwNTAxMTU1ODQ4WjAYMRYwFAYD VQQDEw02ODBhNWZiOC03MzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvt+gXv2IohBcwrUH8Tfs5+gXhZ1OT8NzWNWlLfP3neLhA0PhSvuR6YuaV4Oe ZrPLbLvIhd/S9FVvhpweHfNc4cQZAll3+e8dAfUuMdxf0UHJtJOTxGcr3AZsy1RA Sllvf5RFXIKWxB2zc1UaA8fYcTAVl+b44JWY2uT55QvHqAjChQJkMRWVR/KgdiQj bPBVOkyulnMvenxIyXWytzi5i7UW+fNA9hElYS8VNVXDUOQCygt+28YYnEswXtk9 ht7tZAZpBbhtoguRVkBbxrlFgUWiku8WpearFqBB/VoThcBCOWa71H5GbznmnCeN t1iLa9jyXhIiVhUOLXHLH2Bz8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUXZkFL TeavhoEmogKOvfNAw7OnMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUz+gEr26RotpmwixWAsb2cqJJRvbcvDxiLjVT9cl1SSgObC7GCkxc KHBQVc+9J0uHj5Pv/UANpGgyKoBZ79Ijyq/UH+SaGVBMli06dQnITq1AGMuwO0T1 eeazHa+ioZWp2QKnpJBYPvXv7j7vrORdHW77ZzJhK8fIespFuTp5QA/FjAaYbJGH QKKYC1+43XUY0RMG9AdezvyTGznERh95Av0qgHQ1f7ccAy2o870U/arzvagThLJx 42RS2c7Ixow4vg0Cn1nzNCi1fEEA6Xs2wDjPgumuWDRtVwQWq6ldP8a1EhLR/GyM pwUFQAnUpcuL4BgjPVEvny+Dcinv81OR -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:39 2025 by rpki-client