$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json) Hash identifier: FVT7OP3OkMkKL9laIgUqypT3OVhC1WU8k5ACfSM/bxw= Subject key identifier: 6F:91:0C:9A:57:88:C6:C2:43:C9:9D:D6:72:68:5D:63:B9:73:D2:A0 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 257A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft Manifest number: 22C5 Signing time: Fri 08 Aug 2025 16:02:26 +0000 Manifest this update: Fri 08 Aug 2025 16:02:26 +0000 Manifest next update: Fri 15 Aug 2025 16:02:26 +0000 Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: i8swZB2u86oS2LzVUccKqHFw+uDC7j+zRZmG+UsZ9yg=) 2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: /Q1bh32UWOj4J5FAl9U6ArPlxdi0wsvaB+wwXRJ3Lqs=) 3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: 8OLjwPx61KkIQCmyjk1QuR/uGi52Ry48+A0/nvUFhto=) 4: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: kMzN7sJi/LRFE283RDzU5y7iSG/i/1PsyZ93O11mO5c=) 5: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: b9KSK49f3+RJ5Zndahld37Ne8rgyICiG4X/yrNeRCwg=) 6: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: Ms7QsXkh2kQNfde4KuGq3vFMf59+eXYHE6ZiNy8XHPg=) 7: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 7nW4B9tgYZxJlUM/jyWz4ppQFx5pTU5qJulzmizVwPY=) 8: 94C16496222811EF99153155C4F9AE02.roa (hash: njk+98oMXqEhaQH4K0CdtGJQNcY6Zsh8AbaFjT9X3L8=) 9: BA007060162D11EEB79F703CC4F9AE02.roa (hash: e+8uiRyglTJ61jp+NHN/xhpvUYkVwouUN/cZkA6eEOU=) 10: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: CcwUXK2Ib0st/gF/B8/lAm6jU9CpXcqxg7fd8dewyTs=) 11: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: pK1U2tlcFI5eVZ+yZ2Uz2T2hO3URX24xuIkzXvQNT6Q=) 12: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: mTrnMVZI3oc2hbgBbqTPzvSY22GeIaQ6Sv1aw5zibZo=) 13: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: NK9LWbF8pONuCfm9ynpNYVUJq0bnRlvsHPhOA7O7K+Y=) 14: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: TAXb6aVncKSk3q+7kBMZVnP/khsko2EZ8HMsWkq82Bs=) 15: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: vY03ulP+sNEIa8G9vSg/u1gVOLM+s6C9pglT3z4JdiE=) 16: 9043DEEC36D311F0944CB44FC4F9AE02.roa (hash: bEqkiO8ENywDu5LUBsotcsupS4ydOR5MpQpDbxlm4V4=) 17: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: QKfklbWPsoXlxByZaPbmc1+075SBHQiALuuEdPCAB50=) 18: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: C3qoGzcQZndm1u3tww57NTFE5NsW08UfVUZpiRELltQ=) 19: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: D3ZGO/WUxLPwaJZfxjpDYyNLveQ3u6uEceV8mvZASMk=) 20: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: tFFS7u2Pbz7scJ4rW1SHoAlT2k6YOdbY+5qrpMKq+14=) 21: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 9gHoLg8JZHPr+J2x22rrHeXv+R5JGIJTxxftyvYwHuQ=) 22: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: nJOgKpKVASxgnXQj3ba2FE3qRrXdPvsCxLHQPYaRz00=) 23: 01941B1C621B11F0BDF9F86DC4F9AE02.roa (hash: cd+a9L6gCGTXJsTXsOcSoJV789y9HYTJf+mvqzBnIM4=) 24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: dWk76zBErGHiI9GT7cS+58hFi3EPMy2HTqsf8PBtUYY=) 25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: jIa+/65UAgiJ/NRkd/a4I2EsNsv3JwQP5Q3Ix5cv5qo=) 26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: QoW5v9awLkcGnpT1+XKXrYAVeGX7bCmbAXmL1gr+qQ4=) 27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: Pn3UiRI/u84/PSVY6hBOi61rOJXfl8nDViwTqHYc55g=) 28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: QW+0w7vdm64Mp8G687zcaLqftcXIlQy6snzgmEoSsjY=) 29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: PToSeikp/9y9g+Y+7PlL1TL5uKk45sRjErrgPWURTKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9594 (0x257a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Aug 8 16:02:26 2025 GMT Not After : Aug 15 16:02:26 2025 GMT Subject: CN=68961f92-0c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:95:1d:bb:ca:24:33:a3:3e:d9:de:b0:04:00: 81:65:01:ed:fa:a5:00:e9:e6:44:b0:48:60:9b:e0: 5a:c3:2e:0b:29:51:75:9c:af:6c:ed:fc:5f:8a:40: e6:ed:19:dd:c0:8b:47:36:2d:8f:17:f6:35:76:46: 79:70:e8:9d:b1:c3:9b:b0:e4:95:fe:4e:2a:4a:aa: 18:bc:ed:79:c5:ce:cb:33:45:63:8e:2b:df:20:b1: 04:6d:7e:a5:6b:32:41:3e:94:c4:f9:a6:7b:c9:d8: 81:0a:7c:16:a6:de:b7:56:c0:be:76:d9:e8:06:22: df:d6:c4:a1:e1:b4:5d:1c:34:0b:f3:a9:2d:a0:7b: 62:7c:7d:9c:1a:76:77:03:85:fd:9b:33:30:65:7b: 1f:01:7e:3c:90:3c:aa:34:dd:d5:7a:0c:ea:98:00: c1:2c:c9:4d:18:e3:1b:c7:1f:30:b0:70:91:76:79: 5a:e3:e7:d8:02:4a:b5:cb:9a:18:d2:44:a6:37:8a: 3f:30:0e:9e:62:b9:2c:c8:8b:b0:e2:4e:fe:94:d5: 8b:fb:b6:45:9d:f8:05:84:11:ca:1f:33:03:1a:1f: 6f:9d:8e:cd:65:fe:a0:cc:29:c1:a3:bd:57:5b:e5: c0:f2:12:5d:2b:e6:2a:f6:ec:6a:7a:9f:0b:3c:25: be:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:91:0C:9A:57:88:C6:C2:43:C9:9D:D6:72:68:5D:63:B9:73:D2:A0 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:82:8e:df:ae:da:e3:2d:58:ad:b3:71:a8:fc:06:9d:2e:d8: 8f:a9:b4:48:2f:22:72:d5:6d:f3:e2:a6:ff:ce:13:77:88:39: 4f:f5:c8:2b:b0:61:67:84:c1:db:50:71:37:8f:3d:4f:37:eb: 56:8f:bc:26:63:22:35:f5:a1:3e:15:23:df:ac:05:2f:04:13: c1:aa:58:ec:39:b9:c5:a1:6d:be:c7:c3:73:4d:93:ee:c0:bf: 56:d1:f4:1b:e1:17:02:5b:0f:75:2b:63:2b:33:a7:12:d5:d9: 4e:62:ac:37:f8:ff:fe:7a:a4:18:a1:22:db:35:c5:ef:e6:a2: f6:da:57:95:a1:66:c8:73:18:7b:10:e1:cb:b1:af:d4:29:18: 60:25:ce:64:c3:b0:45:a5:e4:22:30:68:c5:94:02:b6:41:a3: 99:4d:ad:34:ff:47:3f:b0:fd:b1:a9:04:7a:37:3e:ff:09:10: ee:44:b7:e4:43:b2:8b:61:4b:8b:39:79:1b:d2:63:86:5d:04: 10:38:6d:cf:91:0f:c8:c1:fc:53:04:16:6c:43:2c:74:7c:fc: 7b:a9:56:cb:3f:e7:20:3c:fc:d9:a9:b5:72:d2:41:2c:53:20: e4:90:87:59:61:ec:07:c2:ab:51:dc:c4:a7:bc:5c:84:6d:b2: 70:67:58:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwODA4MTYwMjI2WhcNMjUwODE1MTYwMjI2WjAYMRYwFAYD VQQDEw02ODk2MWY5Mi0wYzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJUdu8okM6M+2d6wBACBZQHt+qUA6eZEsEhgm+Bawy4LKVF1nK9s7fxfikDm 7RndwItHNi2PF/Y1dkZ5cOidscObsOSV/k4qSqoYvO15xc7LM0VjjivfILEEbX6l azJBPpTE+aZ7ydiBCnwWpt63VsC+dtnoBiLf1sSh4bRdHDQL86ktoHtifH2cGnZ3 A4X9mzMwZXsfAX48kDyqNN3VegzqmADBLMlNGOMbxx8wsHCRdnla4+fYAkq1y5oY 0kSmN4o/MA6eYrksyIuw4k7+lNWL+7ZFnfgFhBHKHzMDGh9vnY7NZf6gzCnBo71X W+XA8hJdK+Yq9uxqep8LPCW+jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+RDJpX iMbCQ8md1nJoXWO5c9KgMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMgo7frtrjLVits3Go/AadLtiPqbRILyJy1W3z4qb/zhN3iDlP9cgr sGFnhMHbUHE3jz1PN+tWj7wmYyI19aE+FSPfrAUvBBPBqljsObnFoW2+x8NzTZPu wL9W0fQb4RcCWw91K2MrM6cS1dlOYqw3+P/+eqQYoSLbNcXv5qL22leVoWbIcxh7 EOHLsa/UKRhgJc5kw7BFpeQiMGjFlAK2QaOZTa00/0c/sP2xqQR6Nz7/CRDuRLfk Q7KLYUuLOXkb0mOGXQQQOG3PkQ/IwfxTBBZsQyx0fPx7qVbLP+cgPPzZqbVy0kEs UyDkkIdZYewHwqtR3MSnvFyEbbJwZ1j2 -----END CERTIFICATE-----Generated at Sun Aug 10 04:16:46 2025 by rpki-client