$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json) Hash identifier: /gEU0qDrI/rQHQLe40R23HViOiirBW4EbQV5eUMDDTg= Subject key identifier: 2D:68:FF:01:26:6C:86:A7:CB:40:5B:AD:12:5E:33:99:6B:1D:01:99 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 25AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft Manifest number: 22F5 Signing time: Tue 04 Nov 2025 16:02:37 +0000 Manifest this update: Tue 04 Nov 2025 16:02:37 +0000 Manifest next update: Tue 11 Nov 2025 16:02:37 +0000 Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: qDZt8bA8fV+NAQDBfKl64+c/qOTawxHCGQ45mf5u+PI=) 2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: /Q1bh32UWOj4J5FAl9U6ArPlxdi0wsvaB+wwXRJ3Lqs=) 3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: 8OLjwPx61KkIQCmyjk1QuR/uGi52Ry48+A0/nvUFhto=) 4: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: kMzN7sJi/LRFE283RDzU5y7iSG/i/1PsyZ93O11mO5c=) 5: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: b9KSK49f3+RJ5Zndahld37Ne8rgyICiG4X/yrNeRCwg=) 6: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: Ms7QsXkh2kQNfde4KuGq3vFMf59+eXYHE6ZiNy8XHPg=) 7: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 7nW4B9tgYZxJlUM/jyWz4ppQFx5pTU5qJulzmizVwPY=) 8: 94C16496222811EF99153155C4F9AE02.roa (hash: njk+98oMXqEhaQH4K0CdtGJQNcY6Zsh8AbaFjT9X3L8=) 9: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: pK1U2tlcFI5eVZ+yZ2Uz2T2hO3URX24xuIkzXvQNT6Q=) 10: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: CcwUXK2Ib0st/gF/B8/lAm6jU9CpXcqxg7fd8dewyTs=) 11: BA007060162D11EEB79F703CC4F9AE02.roa (hash: e+8uiRyglTJ61jp+NHN/xhpvUYkVwouUN/cZkA6eEOU=) 12: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: mTrnMVZI3oc2hbgBbqTPzvSY22GeIaQ6Sv1aw5zibZo=) 13: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: NK9LWbF8pONuCfm9ynpNYVUJq0bnRlvsHPhOA7O7K+Y=) 14: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: TAXb6aVncKSk3q+7kBMZVnP/khsko2EZ8HMsWkq82Bs=) 15: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: vY03ulP+sNEIa8G9vSg/u1gVOLM+s6C9pglT3z4JdiE=) 16: 9043DEEC36D311F0944CB44FC4F9AE02.roa (hash: bEqkiO8ENywDu5LUBsotcsupS4ydOR5MpQpDbxlm4V4=) 17: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: QKfklbWPsoXlxByZaPbmc1+075SBHQiALuuEdPCAB50=) 18: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: C3qoGzcQZndm1u3tww57NTFE5NsW08UfVUZpiRELltQ=) 19: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: D3ZGO/WUxLPwaJZfxjpDYyNLveQ3u6uEceV8mvZASMk=) 20: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: tFFS7u2Pbz7scJ4rW1SHoAlT2k6YOdbY+5qrpMKq+14=) 21: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 9gHoLg8JZHPr+J2x22rrHeXv+R5JGIJTxxftyvYwHuQ=) 22: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: nJOgKpKVASxgnXQj3ba2FE3qRrXdPvsCxLHQPYaRz00=) 23: 01941B1C621B11F0BDF9F86DC4F9AE02.roa (hash: +KODamYYPQ+UbaGfa6xrSx74xstNmammNTyRbH0xIe8=) 24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: dWk76zBErGHiI9GT7cS+58hFi3EPMy2HTqsf8PBtUYY=) 25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: jIa+/65UAgiJ/NRkd/a4I2EsNsv3JwQP5Q3Ix5cv5qo=) 26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: QoW5v9awLkcGnpT1+XKXrYAVeGX7bCmbAXmL1gr+qQ4=) 27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: Pn3UiRI/u84/PSVY6hBOi61rOJXfl8nDViwTqHYc55g=) 28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: QW+0w7vdm64Mp8G687zcaLqftcXIlQy6snzgmEoSsjY=) 29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: PToSeikp/9y9g+Y+7PlL1TL5uKk45sRjErrgPWURTKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9643 (0x25ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Nov 4 16:02:37 2025 GMT Not After : Nov 11 16:02:37 2025 GMT Subject: CN=690a239d-514b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:18:d2:98:23:dc:81:3d:64:49:b6:29:f1: 84:7d:05:d6:9a:c9:98:27:fb:4b:f5:f5:d0:ca:3d: 98:c6:d7:c4:53:87:af:90:71:ef:03:2d:a3:b3:cc: de:8c:87:8a:bd:05:14:26:25:41:73:02:83:00:19: 5f:40:4a:0d:1a:c6:40:41:fe:37:43:fa:5b:38:1a: 24:8c:44:c5:cc:11:63:a0:68:99:c7:fb:4d:98:cd: c0:ef:81:b2:23:ee:9a:74:c0:9c:c4:2e:f6:5a:e6: 2a:27:99:69:51:06:d4:2f:24:36:bb:c8:fd:e8:2f: a0:e2:c5:98:9b:3a:d9:33:20:73:01:1e:56:3b:30: 04:8f:ee:e3:d1:68:b7:13:1d:d2:31:b7:71:9a:7c: 17:34:fe:13:15:65:f5:3c:50:70:5b:d9:db:58:2c: 27:3f:d9:38:7b:e7:a6:2d:9d:6f:57:37:c2:71:c5: b9:aa:28:9f:fe:a6:e7:dd:cc:74:8f:1a:cb:54:f1: e6:b6:b9:ae:b1:31:24:7f:0e:79:d1:af:ed:13:ef: 2b:4a:0e:76:17:82:2c:c7:36:71:76:47:4d:c9:bf: 27:93:d1:c4:4a:c5:e8:60:f2:f8:99:2a:25:74:a7: bc:90:eb:b8:23:24:e6:9a:0f:fc:2c:de:ff:64:5f: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:68:FF:01:26:6C:86:A7:CB:40:5B:AD:12:5E:33:99:6B:1D:01:99 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d4:eb:12:76:98:13:53:de:d3:4b:f5:9c:31:62:74:7b:d9: 8d:2a:08:76:30:fd:be:0b:31:db:19:eb:12:ed:de:a4:16:37: 41:34:f5:97:0f:ba:8c:8e:5c:20:a3:8c:32:a3:d6:d0:d6:cc: f4:7b:8c:0c:65:de:c6:d1:22:07:96:bb:3e:57:c0:46:03:3c: 86:28:d4:6a:ce:98:f4:2d:be:a4:6d:a3:e1:57:3e:6d:5a:58: 63:66:a0:eb:ce:8e:24:dc:99:b6:10:ad:76:3c:d4:fb:46:ba: 49:3f:1a:bc:2e:9b:13:33:64:14:0a:ca:5e:83:df:06:38:8c: 5a:4e:9a:11:52:da:39:b5:2a:a8:e5:0a:df:eb:ad:5a:5f:e4: aa:1b:01:11:a6:16:e1:35:27:2e:5f:58:ad:41:06:a7:d8:83: e6:58:b9:9c:74:25:05:d0:06:aa:20:bb:a7:83:2e:72:69:36: b5:ab:de:3a:a2:40:a9:08:0f:17:39:30:71:aa:b3:6a:a1:c3: de:08:9b:77:eb:60:8d:91:a5:34:0f:34:45:a0:d6:c1:b4:4a: 24:89:87:8a:e8:a8:29:94:8c:70:d5:5b:72:97:7b:df:8c:02: a4:00:1a:dc:a7:c9:ab:b4:bf:f0:59:d4:08:cc:18:76:d3:95: 6a:3f:52:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUxMTA0MTYwMjM3WhcNMjUxMTExMTYwMjM3WjAYMRYwFAYD VQQDEw02OTBhMjM5ZC01MTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+oY0pgj3IE9ZEm2KfGEfQXWmsmYJ/tL9fXQyj2YxtfEU4evkHHvAy2js8ze jIeKvQUUJiVBcwKDABlfQEoNGsZAQf43Q/pbOBokjETFzBFjoGiZx/tNmM3A74Gy I+6adMCcxC72WuYqJ5lpUQbULyQ2u8j96C+g4sWYmzrZMyBzAR5WOzAEj+7j0Wi3 Ex3SMbdxmnwXNP4TFWX1PFBwW9nbWCwnP9k4e+emLZ1vVzfCccW5qiif/qbn3cx0 jxrLVPHmtrmusTEkfw550a/tE+8rSg52F4IsxzZxdkdNyb8nk9HESsXoYPL4mSol dKe8kOu4IyTmmg/8LN7/ZF+g3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1o/wEm bIany0BbrRJeM5lrHQGZMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg1OsSdpgTU97TS/WcMWJ0e9mNKgh2MP2+CzHbGesS7d6kFjdBNPWX D7qMjlwgo4wyo9bQ1sz0e4wMZd7G0SIHlrs+V8BGAzyGKNRqzpj0Lb6kbaPhVz5t WlhjZqDrzo4k3Jm2EK12PNT7RrpJPxq8LpsTM2QUCspeg98GOIxaTpoRUto5tSqo 5Qrf661aX+SqGwERphbhNScuX1itQQan2IPmWLmcdCUF0AaqILungy5yaTa1q946 okCpCA8XOTBxqrNqocPeCJt362CNkaU0DzRFoNbBtEokiYeK6KgplIxw1Vtyl3vf jAKkABrcp8mrtL/wWdQIzBh205VqP1Jo -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:56 2025 by rpki-client