
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier: +9+JE25UwexZLiUPdpqKFvZsZKnXpKoE4D+ffRtWagE=
Subject key identifier: 6D:A9:F9:E3:31:A3:FD:0C:E9:C8:5B:71:8E:04:A9:9B:39:FA:27:8A
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 26BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number: 239A
Signing time: Tue 28 Jul 2026 16:00:19 +0000
Manifest this update: Tue 28 Jul 2026 16:00:19 +0000
Manifest next update: Tue 04 Aug 2026 16:00:19 +0000
Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: lKWW9ZKwZKvVGoVi0Yf06maAvefumKHyg8OXVJdexmg=)
2: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: kGjjVFLeftJ4iWIxg8Q1sbQUrd0A5MgOTgnq5zEqwbE=)
3: E2174D9E525211F1980710C0B7833773.roa (hash: UXHBEi6kZUQ14KonHrPxrJtLjBz35nVjc3YNK54R6Qw=)
4: 229B83C4685811F180A7311C9C47A888.roa (hash: ZDnamRNvi7dksMJwyc/mAFv1Y9uc7PCP3+Gsifgq/jo=)
5: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: n3D3uWoQtuJezhynx+w6atzLkJgnD+wG5EO+6lXG6eI=)
6: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: L8KQ427W+moy0EvHQ9sPXqCcOMRmhCkdnN3Z6fWTWSU=)
7: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: fELsRIeUPp1iTyoEm2tgpyVJi8oS2Ehx5DGrmeooViw=)
8: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 4Ij+zJZ5CkWG7jXCiWRJZjJ77nuWw4Opj7SW89egSHU=)
9: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: cAXd+rSqoS0/CrBqmAlff9AaR6q5VbbrxC7tqf0d2OM=)
10: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: CjGoyKN0HrGuZB1eGY3YN8uhsmzlKryekK6FbSvP2zk=)
11: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: XsVZgmVaO9HxHlBF+QjQjR40DfffVdZHEBqljv9Stss=)
12: 94C16496222811EF99153155C4F9AE02.roa (hash: rblIsywW3HeGBV9SYXZ48ueArKjs04dIk6+AvNganu0=)
13: E1B38BC080C811F181550F2C98A30FBC.roa (hash: WRADBx/SaXJk7j6yqZeKGAjOAQr20gzsAPuwRVAsDf4=)
14: BA007060162D11EEB79F703CC4F9AE02.roa (hash: yhtnb/OOA/wXXD8maZO8n4AsJMc9HBQT2aQqAHCJfOQ=)
15: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: X8qoiiScFa9eVjABlsfQ/cyRc8nDS1tlAxe/2JVazO0=)
16: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: EedI26Sx2994grPUcSKFjJ1j0cv3YZqLAHCyNSdQVkI=)
17: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: BHU+XdA8SETbOhTyvEane5KN/5p33K/aqdiI/9ZtYsM=)
18: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: Bk1JT23cvT2IaHE3oikg+BR927YJ1u3qo38PnnG2XQE=)
19: CE013B0E80C811F198040B2C98A30FBC.roa (hash: rvbsrjRyRpfiUSXy7N/y15yVYE1ATOHm+dBIljGhHl0=)
20: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: zQF+T1/pOLzDuzv2qEa0T9BdUI0ppH7RANttefdBlH0=)
21: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 2FNBLNXeHKr5fNOjfs5L8pJM6snV6ei6jK9XX9YsJak=)
22: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: bWAeW20kddbPWVtd6T4H+eKbHvFtn75Lyk3GSBrZZzo=)
23: EA731210895D11F193C4BB306611F970.roa (hash: LhIix3MqgGCa2w3+feEZuut9yVtkWwXiLFodoDN7Li8=)
24: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: KA8N1htPIafM0ykcB4avk8azmo1jpDzuUPofhuBqk30=)
25: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: nS79IZuDBhOC2SAUskf7oOdinYh07KUuC40Jb1wjqTM=)
26: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: avBOKsbWyKUECTQ8CZJG8sV4Ncdv4AJ8R93izTNrcYY=)
27: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: v07Pprp9lf3TRtO+9xznb1E1Na5Oj+IgXg/hHlg/17g=)
28: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: kizVRkxIaY1795MCpE8rdX3fvEG4qDLVYFjlEnVts0Q=)
29: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: F/3d2MdmWAQWy2/KkyrR/TKf6kjUWhedoqi+Mnvoopg=)
30: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: Ifg7lXJOQP+18o4CZaAo7GSgxBafrvA0XUWHav5Uo0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9915 (0x26bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Jul 28 16:00:19 2026 GMT
Not After : Aug 4 16:00:19 2026 GMT
Subject: CN=6a68d213-8b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:aa:9e:ed:7c:fc:44:64:a0:1f:c6:ec:c7:
59:52:ee:4d:29:d0:38:98:f1:56:f2:ac:f8:b3:43:
fa:86:45:d8:b3:2f:73:c0:7a:a9:28:b1:72:a5:6e:
ed:a4:58:82:05:ea:1e:2d:ed:a4:34:f2:2e:f3:35:
b9:da:31:b1:bf:48:a3:e1:22:d1:d8:58:9a:45:96:
4a:f2:56:5a:44:96:7a:49:a6:23:50:ec:4f:4d:47:
8f:b2:15:51:6f:99:16:19:73:0d:d1:47:81:a0:4f:
a8:90:a2:7b:ba:2a:8a:60:08:86:a7:84:dd:d1:12:
0a:bc:8d:d5:2d:58:2d:66:70:72:91:1f:b6:62:a4:
77:b5:f5:15:87:78:6b:9f:e4:6c:51:c4:ed:e9:e4:
e0:7f:2f:61:9e:a9:da:e4:82:86:39:2f:94:5c:25:
25:a8:7e:5f:f3:d0:d6:7e:18:0f:74:d8:c1:b0:c1:
91:6c:ea:74:7f:af:7a:42:62:69:d8:57:36:4b:ff:
4f:9f:b2:96:2b:0c:49:09:84:4b:a4:58:99:c4:d4:
05:3c:49:c2:35:47:14:f6:00:1b:c1:44:c7:bb:6d:
37:47:d2:9a:03:85:2e:2b:67:cd:f4:9b:6c:ab:d3:
4b:9b:a1:b6:bb:00:03:ce:84:6b:91:07:c5:0e:5e:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A9:F9:E3:31:A3:FD:0C:E9:C8:5B:71:8E:04:A9:9B:39:FA:27:8A
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:00:26:84:41:33:94:de:b8:dc:ea:f8:41:86:07:49:72:7a:
f6:35:56:af:6c:33:d3:fe:ca:a7:81:42:47:a1:2f:5b:d3:f4:
2e:2f:86:cf:d8:a5:5b:d4:84:a8:14:a4:ca:49:80:ec:2f:ad:
09:9e:8d:36:54:ba:3c:1f:91:a2:69:02:87:2b:b6:a6:46:79:
d6:b2:3b:d4:33:a7:85:4e:eb:4b:2a:ca:f4:85:f6:06:48:96:
60:bc:12:8a:2e:f3:22:40:cd:c0:10:8f:db:0c:88:c7:9b:ea:
b7:a5:16:de:84:c2:c9:ba:f6:de:17:e3:1b:57:d1:a0:2a:71:
29:e2:05:70:31:34:21:a0:f4:ee:2d:39:d2:4d:60:93:70:83:
76:5f:16:0d:66:23:c5:ab:78:8a:6b:4f:c3:66:b0:6b:39:16:
f8:68:35:e8:83:72:74:8f:51:7f:1c:94:74:a8:56:fd:41:b7:
91:1b:b5:53:e9:9e:55:1c:31:9e:a3:24:3e:52:1a:14:cb:b3:
d7:60:ac:9d:9d:51:a4:c1:7f:24:21:78:89:84:bb:8f:25:90:
04:c0:fb:bb:15:73:cf:34:fe:10:65:fc:07:9d:b4:b5:c2:57:
e5:39:60:5b:43:bf:de:14:81:d6:a9:07:3f:64:6f:e7:31:83:
f7:64:ca:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:52:36 2026 by rpki-client