$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json) Hash identifier: 6YryoRwN4shFe+iug33sIiiNGfYqvLlmn3RChNnGSvc= Subject key identifier: 41:E3:A9:D7:C9:71:CD:D8:0D:69:99:34:B8:6B:6A:19:C8:13:26:AD Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft Manifest number: 22B9 Signing time: Sun 20 Jul 2025 15:58:32 +0000 Manifest this update: Sun 20 Jul 2025 15:58:32 +0000 Manifest next update: Sun 27 Jul 2025 15:58:32 +0000 Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: dLAg5YY4gkxp4jnZujDjg5aat7oHpi5IYu72/72Id9E=) 2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: n7pXi66lxgmnVUzRCaGjU+Jyqvcaobv+LRa6sWK36IE=) 3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: N/j8Xc916eNg8eHpf/TimkfEUKue+NoblWGnaKxHRm0=) 4: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: bxRIP/V3KFaeNWfQRbqaVdttFxEirD+o4UsmoISKZuc=) 5: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: CQWi2YF8MQ4UHFHqDi+xaEbH9uwwbmiWIRH/VdottEg=) 6: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: nPuyeWNG9exmJBtrhR6dKImyLvexezTrvMYpeknk12s=) 7: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: tUCXmWof0USHAd/AnTe/zIcja2f8KydMrpeti85baXA=) 8: 94C16496222811EF99153155C4F9AE02.roa (hash: Ac6cnmBtCeQwIV5PdTOpzzOyj+FEtvQgRkdEJEIsldM=) 9: BA007060162D11EEB79F703CC4F9AE02.roa (hash: i9EBn86mLgOFoT0s7Sga+CIh82Sy/UwirM5LdXIelBE=) 10: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: tS+qP2Je+Zz8kTJK21naf6pRVHAGu1cyXc5EQvZ1I6M=) 11: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: WtwbdAJs3osRQvsAOMvWgusqoBOVQjjr1Dv2FNOXu+k=) 12: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: n7jlwwjdFJ+RKwuKH29PXvEGEpKzuEPAVlddcWoawd4=) 13: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: +CGhSvKre7unc2jjZTN2h/5C4OKnNYy8AFrBlT9QgCc=) 14: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: BoIbbyMCoyjBPVVzzNzvY0re58/2xN3cHA7chKiXOvg=) 15: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: 42+AdUwxxCnW8+mpW9En0BbvfvMfDp076eo2jJL8hog=) 16: 9043DEEC36D311F0944CB44FC4F9AE02.roa (hash: ktPa4ke0+M3xFffVkHkdil+xWW9OoHLI+fKPoR3WQco=) 17: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 4Baklu7fz790X3t+DnvBTOz3bpmb9db78d+W2Rsz46U=) 18: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: d5k8mBEvQfUgZFSJDf+SsljLPzLne0iAQgk3UuEZ4sE=) 19: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: o/tOGxE4Ft5fX3yUC9xv485nnBbYIcg8RYaepJzupC0=) 20: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: uzN3qB5XPrhFucLN2OmQ5NTjj6qYhLZBg4aeWaCRKe4=) 21: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 94Rt3YQOo3z7AHBNPf7mUO8MdNhSBexZLfHTIqNCUWQ=) 22: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: AITRCg2vjnVWNYtFs2RtxbI+uUU9ZjuERKnWghkFVBY=) 23: 01941B1C621B11F0BDF9F86DC4F9AE02.roa (hash: P5B9kpmLo/o8etjKyR5JuzTrEOvf3kGAm/rXKAaYyyg=) 24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: 2MFkWatEYr7ySzuIIVO+LKsoWJa2vp38UqDbLF7GUV8=) 25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: mSHVgOgebMql2vVyUMQtDn8MbI5cBn29yqk8tb1nlIk=) 26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: mmR6Uep7EqCu0nzQaonURcP5xC0tMXraR08pUCncH0A=) 27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: n/BL8NEIAHpYJ0v9wedyUGmzL2t/5O06rDGFVPPDMuI=) 28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: 6y4Mf6N4wFMfqpPJoLDOmmq0S1UQIMIv6lZqvZ9nJLY=) 29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: 6cY6Ob6u+QL6WHZfOXxaIiNx2wMqL0gPJlcRnC46fIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9554 (0x2552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 20 15:58:32 2025 GMT Not After : Jul 27 15:58:32 2025 GMT Subject: CN=687d1228-bc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5f:d6:ec:3e:f2:e3:4b:5b:f1:c2:b4:fa:a1: 36:11:bc:25:66:06:79:0b:e5:92:ac:8b:c6:56:49: 8d:b5:07:96:0e:c2:24:ac:71:c1:8b:ba:6f:89:1c: ad:6a:03:27:10:5c:01:f3:9f:e7:b7:63:54:42:96: 75:cd:8b:f5:e4:c2:1a:29:a9:61:1c:1f:49:1b:69: 4b:9e:44:10:8c:5a:8e:29:eb:ae:d0:fb:f5:00:7f: 4e:1b:bc:a2:23:ad:af:5d:46:84:1f:3e:e6:64:9d: de:cf:cd:cc:f1:36:e5:ce:7f:a7:36:7c:21:42:53: c0:a3:b9:a2:37:4b:d8:85:84:6c:19:ae:28:3c:cc: 92:8f:dc:bb:d1:0b:48:bf:9d:08:f1:44:56:37:96: 6b:64:dc:c8:d5:59:e8:4b:b3:29:18:6f:e2:d5:d4: 99:1f:72:cc:f7:1b:56:d4:18:8b:90:69:d2:5a:45: 7e:7c:7d:36:e2:7b:99:4b:f3:cf:d9:ff:6d:ec:63: 22:72:62:b0:42:91:38:1c:05:f2:dc:d9:81:77:b9: 31:55:c1:26:11:c9:80:a5:08:8d:38:93:b0:58:15: a5:78:0b:6b:75:84:45:33:93:9e:79:26:7e:c2:4f: 6c:cc:9c:1e:ce:51:d9:1b:ad:31:f5:92:6e:2c:71: 43:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E3:A9:D7:C9:71:CD:D8:0D:69:99:34:B8:6B:6A:19:C8:13:26:AD X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1c:69:79:51:fc:15:24:26:d6:3e:cf:d0:17:c9:43:63:d1: 6f:b0:ff:47:35:19:25:ac:ca:6f:3b:a1:5f:de:a5:a4:68:7b: d5:42:25:a5:26:71:7f:70:0f:2a:6f:b0:28:49:c5:6b:56:67: b2:64:e6:e1:7b:ed:08:9c:d4:3a:40:e3:cf:18:82:d6:3e:bb: 4c:19:97:5f:c9:50:84:2e:4b:f5:b0:9f:60:43:82:99:1b:c7: 63:fe:1a:60:eb:4f:78:63:a6:eb:0f:fd:5f:97:6e:25:d8:80: 69:79:42:8f:91:6f:11:f2:c7:2a:f9:7e:97:08:a3:b9:7a:bd: 89:6f:e1:71:a7:ff:3e:d0:1a:de:51:09:b7:b4:1b:1b:72:43: 34:c6:8e:b5:50:b4:81:4d:21:78:fb:7e:cc:ab:c9:51:2d:02: 6e:4c:4e:4b:d4:97:b4:a1:fa:52:7e:2b:f5:d8:73:94:6e:57: 4d:81:75:8c:97:cb:27:d1:44:8f:8f:5d:ef:65:ca:b9:e5:d4: cc:cb:22:8b:e3:16:7e:ab:90:73:df:cf:7c:f6:3e:72:d3:2c: f9:f5:95:34:1f:ea:8f:5a:48:13:47:85:75:f3:c6:51:cd:60: 98:ae:75:16:4d:5a:42:b7:8d:59:71:dd:f9:1b:95:d0:b3:ef: 37:78:73:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwNzIwMTU1ODMyWhcNMjUwNzI3MTU1ODMyWjAYMRYwFAYD VQQDEw02ODdkMTIyOC1iYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3F/W7D7y40tb8cK0+qE2EbwlZgZ5C+WSrIvGVkmNtQeWDsIkrHHBi7pviRyt agMnEFwB85/nt2NUQpZ1zYv15MIaKalhHB9JG2lLnkQQjFqOKeuu0Pv1AH9OG7yi I62vXUaEHz7mZJ3ez83M8Tblzn+nNnwhQlPAo7miN0vYhYRsGa4oPMySj9y70QtI v50I8URWN5ZrZNzI1VnoS7MpGG/i1dSZH3LM9xtW1BiLkGnSWkV+fH024nuZS/PP 2f9t7GMicmKwQpE4HAXy3NmBd7kxVcEmEcmApQiNOJOwWBWleAtrdYRFM5OeeSZ+ wk9szJwezlHZG60x9ZJuLHFDDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHjqdfJ cc3YDWmZNLhrahnIEyatMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbHGl5UfwVJCbWPs/QF8lDY9FvsP9HNRklrMpvO6Ff3qWkaHvVQiWl JnF/cA8qb7AoScVrVmeyZObhe+0InNQ6QOPPGILWPrtMGZdfyVCELkv1sJ9gQ4KZ G8dj/hpg6094Y6brD/1fl24l2IBpeUKPkW8R8scq+X6XCKO5er2Jb+Fxp/8+0Bre UQm3tBsbckM0xo61ULSBTSF4+37Mq8lRLQJuTE5L1Je0ofpSfiv12HOUbldNgXWM l8sn0USPj13vZcq55dTMyyKL4xZ+q5Bz38989j5y0yz59ZU0H+qPWkgTR4V188ZR zWCYrnUWTVpCt41Zcd35G5XQs+83eHP1 -----END CERTIFICATE-----Generated at Tue Jul 22 12:08:12 2025 by rpki-client