$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json) Hash identifier: 5mvYy/YQ8GRIGHXWgtyz3IfcFyNitDA+dnRMKYAfvbU= Subject key identifier: 1D:2B:D7:CC:5B:6E:05:5C:81:71:52:39:59:7C:2D:C3:2B:CC:F8:9F Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 25A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft Manifest number: 22EE Signing time: Wed 22 Oct 2025 16:09:19 +0000 Manifest this update: Wed 22 Oct 2025 16:09:18 +0000 Manifest next update: Wed 29 Oct 2025 16:09:18 +0000 Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: E3mEeijR0S/A8DG4xUZBTCbeKSJ7uCHabPtUW8wJ9rQ=) 2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: /Q1bh32UWOj4J5FAl9U6ArPlxdi0wsvaB+wwXRJ3Lqs=) 3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: 8OLjwPx61KkIQCmyjk1QuR/uGi52Ry48+A0/nvUFhto=) 4: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: kMzN7sJi/LRFE283RDzU5y7iSG/i/1PsyZ93O11mO5c=) 5: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: b9KSK49f3+RJ5Zndahld37Ne8rgyICiG4X/yrNeRCwg=) 6: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: Ms7QsXkh2kQNfde4KuGq3vFMf59+eXYHE6ZiNy8XHPg=) 7: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 7nW4B9tgYZxJlUM/jyWz4ppQFx5pTU5qJulzmizVwPY=) 8: 94C16496222811EF99153155C4F9AE02.roa (hash: njk+98oMXqEhaQH4K0CdtGJQNcY6Zsh8AbaFjT9X3L8=) 9: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: pK1U2tlcFI5eVZ+yZ2Uz2T2hO3URX24xuIkzXvQNT6Q=) 10: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: CcwUXK2Ib0st/gF/B8/lAm6jU9CpXcqxg7fd8dewyTs=) 11: BA007060162D11EEB79F703CC4F9AE02.roa (hash: e+8uiRyglTJ61jp+NHN/xhpvUYkVwouUN/cZkA6eEOU=) 12: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: mTrnMVZI3oc2hbgBbqTPzvSY22GeIaQ6Sv1aw5zibZo=) 13: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: NK9LWbF8pONuCfm9ynpNYVUJq0bnRlvsHPhOA7O7K+Y=) 14: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: TAXb6aVncKSk3q+7kBMZVnP/khsko2EZ8HMsWkq82Bs=) 15: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: vY03ulP+sNEIa8G9vSg/u1gVOLM+s6C9pglT3z4JdiE=) 16: 9043DEEC36D311F0944CB44FC4F9AE02.roa (hash: bEqkiO8ENywDu5LUBsotcsupS4ydOR5MpQpDbxlm4V4=) 17: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: QKfklbWPsoXlxByZaPbmc1+075SBHQiALuuEdPCAB50=) 18: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: C3qoGzcQZndm1u3tww57NTFE5NsW08UfVUZpiRELltQ=) 19: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: D3ZGO/WUxLPwaJZfxjpDYyNLveQ3u6uEceV8mvZASMk=) 20: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: tFFS7u2Pbz7scJ4rW1SHoAlT2k6YOdbY+5qrpMKq+14=) 21: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 9gHoLg8JZHPr+J2x22rrHeXv+R5JGIJTxxftyvYwHuQ=) 22: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: nJOgKpKVASxgnXQj3ba2FE3qRrXdPvsCxLHQPYaRz00=) 23: 01941B1C621B11F0BDF9F86DC4F9AE02.roa (hash: +KODamYYPQ+UbaGfa6xrSx74xstNmammNTyRbH0xIe8=) 24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: dWk76zBErGHiI9GT7cS+58hFi3EPMy2HTqsf8PBtUYY=) 25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: jIa+/65UAgiJ/NRkd/a4I2EsNsv3JwQP5Q3Ix5cv5qo=) 26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: QoW5v9awLkcGnpT1+XKXrYAVeGX7bCmbAXmL1gr+qQ4=) 27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: Pn3UiRI/u84/PSVY6hBOi61rOJXfl8nDViwTqHYc55g=) 28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: QW+0w7vdm64Mp8G687zcaLqftcXIlQy6snzgmEoSsjY=) 29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: PToSeikp/9y9g+Y+7PlL1TL5uKk45sRjErrgPWURTKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 16:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9636 (0x25a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Oct 22 16:09:18 2025 GMT Not After : Oct 29 16:09:18 2025 GMT Subject: CN=68f901ae-ae1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:97:01:45:69:82:5d:71:5b:8f:88:b4:cb:c9: 18:e3:b3:e0:1c:93:8c:3f:76:d7:17:72:f9:57:1b: 1c:a8:c6:d2:da:21:b6:2f:1c:8e:24:d5:48:a1:18: 81:ca:0a:80:35:33:ad:12:23:ea:64:01:70:ab:58: c9:3f:b8:e0:f9:aa:2d:7a:06:a5:2d:dd:8f:03:60: e8:a7:47:8f:97:7a:47:5c:eb:c0:4c:29:15:e5:ba: 6c:58:f0:99:26:82:a9:3c:2c:66:f9:c4:fb:c2:cd: aa:04:96:66:d6:9d:ec:c0:63:82:c6:0d:02:ad:c1: 49:87:ad:f4:f5:89:d3:5d:49:e5:0b:13:f5:08:10: a6:f6:42:90:10:05:b9:8a:9e:c1:aa:d9:d5:44:cb: bd:85:e5:e3:92:e6:e0:ea:55:45:2d:83:25:53:ac: ff:e3:2c:8f:cc:6c:cf:ee:1b:f9:83:05:e8:2a:d8: 11:15:32:d8:be:a5:71:97:82:84:80:f5:30:04:5b: 3d:b1:94:4f:7b:56:2a:09:c2:96:df:85:81:f3:49: d1:3e:77:08:b5:73:cb:95:17:c8:8f:0c:34:18:15: a9:99:ca:cb:1e:6c:ff:ee:91:a9:fc:ab:be:44:94: 48:86:5b:98:9a:f7:62:78:8d:9c:1c:a2:67:2e:74: 7d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2B:D7:CC:5B:6E:05:5C:81:71:52:39:59:7C:2D:C3:2B:CC:F8:9F X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:e3:d2:04:dd:fa:c9:d5:e1:53:88:88:ad:ea:fc:83:e3:b7: bb:fd:a3:54:31:d5:46:2e:81:45:24:e6:c0:7d:84:76:3c:fa: f4:0c:ac:99:61:2d:2d:f9:a4:ae:05:d9:6e:1d:68:c4:e0:35: 31:15:d8:85:22:18:28:31:3d:ad:09:dc:37:06:be:31:db:fc: 1f:9a:a7:53:5e:a3:8f:9e:e9:87:73:64:3e:ce:1a:9d:dd:0e: 45:e4:9b:82:34:b0:b1:9a:fb:7f:85:ac:6a:b6:97:32:61:d0: 52:41:ff:d1:c4:8f:4d:6c:6b:de:c7:99:a9:56:f4:f8:16:37: 98:90:a5:fe:2f:7f:68:95:be:f9:49:bc:3b:30:17:ca:58:49: 27:b3:81:47:a6:ce:bb:f7:96:ae:a3:40:97:a6:43:54:27:d5: c2:fb:6a:0c:df:95:2c:d1:76:a9:dd:d6:d5:34:ea:ed:7e:cc: 91:0a:77:94:fa:57:ad:0b:54:5d:67:42:18:45:26:eb:0b:e6: ee:ba:53:c4:13:a9:b0:ab:9b:b9:ae:15:c5:8b:1b:08:07:80: 9c:e7:f6:51:e3:31:55:e0:75:ae:b3:6d:75:7b:9b:b3:6c:b8: 74:73:df:84:e9:30:a5:f0:20:0f:3e:d0:e3:8a:6e:40:23:cb: 61:10:da:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUxMDIyMTYwOTE4WhcNMjUxMDI5MTYwOTE4WjAYMRYwFAYD VQQDEw02OGY5MDFhZS1hZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pcBRWmCXXFbj4i0y8kY47PgHJOMP3bXF3L5VxscqMbS2iG2LxyOJNVIoRiB ygqANTOtEiPqZAFwq1jJP7jg+aotegalLd2PA2Dop0ePl3pHXOvATCkV5bpsWPCZ JoKpPCxm+cT7ws2qBJZm1p3swGOCxg0CrcFJh6309YnTXUnlCxP1CBCm9kKQEAW5 ip7BqtnVRMu9heXjkubg6lVFLYMlU6z/4yyPzGzP7hv5gwXoKtgRFTLYvqVxl4KE gPUwBFs9sZRPe1YqCcKW34WB80nRPncItXPLlRfIjww0GBWpmcrLHmz/7pGp/Ku+ RJRIhluYmvdieI2cHKJnLnR9xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0r18xb bgVcgXFSOVl8LcMrzPifMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG49IE3frJ1eFTiIit6vyD47e7/aNUMdVGLoFFJObAfYR2PPr0DKyZ YS0t+aSuBdluHWjE4DUxFdiFIhgoMT2tCdw3Br4x2/wfmqdTXqOPnumHc2Q+zhqd 3Q5F5JuCNLCxmvt/haxqtpcyYdBSQf/RxI9NbGvex5mpVvT4FjeYkKX+L39olb75 Sbw7MBfKWEkns4FHps6795auo0CXpkNUJ9XC+2oM35Us0Xap3dbVNOrtfsyRCneU +letC1RdZ0IYRSbrC+buulPEE6mwq5u5rhXFixsIB4Cc5/ZR4zFV4HWus211e5uz bLh0c9+E6TCl8CAPPtDjim5AI8thENqP -----END CERTIFICATE-----Generated at Wed Oct 22 18:41:00 2025 by rpki-client