$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json) Hash identifier: KVTLjwd/EwO5oMMyF5JQj7qe55hwWRnVFjCC0XlgRmk= Subject key identifier: BB:AC:19:52:60:14:03:F8:24:A8:2D:56:98:2A:55:8D:EA:3D:A0:D0 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft Manifest number: 22D3 Signing time: Thu 04 Sep 2025 16:02:40 +0000 Manifest this update: Thu 04 Sep 2025 16:02:39 +0000 Manifest next update: Thu 11 Sep 2025 16:02:39 +0000 Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: 4Nt1eS6Xio8iTJMwZf10Y1emLFe3KnlOeN3adWAOJzU=) 2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: /Q1bh32UWOj4J5FAl9U6ArPlxdi0wsvaB+wwXRJ3Lqs=) 3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: 8OLjwPx61KkIQCmyjk1QuR/uGi52Ry48+A0/nvUFhto=) 4: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: kMzN7sJi/LRFE283RDzU5y7iSG/i/1PsyZ93O11mO5c=) 5: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: b9KSK49f3+RJ5Zndahld37Ne8rgyICiG4X/yrNeRCwg=) 6: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: Ms7QsXkh2kQNfde4KuGq3vFMf59+eXYHE6ZiNy8XHPg=) 7: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 7nW4B9tgYZxJlUM/jyWz4ppQFx5pTU5qJulzmizVwPY=) 8: 94C16496222811EF99153155C4F9AE02.roa (hash: njk+98oMXqEhaQH4K0CdtGJQNcY6Zsh8AbaFjT9X3L8=) 9: BA007060162D11EEB79F703CC4F9AE02.roa (hash: e+8uiRyglTJ61jp+NHN/xhpvUYkVwouUN/cZkA6eEOU=) 10: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: CcwUXK2Ib0st/gF/B8/lAm6jU9CpXcqxg7fd8dewyTs=) 11: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: pK1U2tlcFI5eVZ+yZ2Uz2T2hO3URX24xuIkzXvQNT6Q=) 12: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: mTrnMVZI3oc2hbgBbqTPzvSY22GeIaQ6Sv1aw5zibZo=) 13: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: NK9LWbF8pONuCfm9ynpNYVUJq0bnRlvsHPhOA7O7K+Y=) 14: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: TAXb6aVncKSk3q+7kBMZVnP/khsko2EZ8HMsWkq82Bs=) 15: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: vY03ulP+sNEIa8G9vSg/u1gVOLM+s6C9pglT3z4JdiE=) 16: 9043DEEC36D311F0944CB44FC4F9AE02.roa (hash: bEqkiO8ENywDu5LUBsotcsupS4ydOR5MpQpDbxlm4V4=) 17: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: QKfklbWPsoXlxByZaPbmc1+075SBHQiALuuEdPCAB50=) 18: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: C3qoGzcQZndm1u3tww57NTFE5NsW08UfVUZpiRELltQ=) 19: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: D3ZGO/WUxLPwaJZfxjpDYyNLveQ3u6uEceV8mvZASMk=) 20: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: tFFS7u2Pbz7scJ4rW1SHoAlT2k6YOdbY+5qrpMKq+14=) 21: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 9gHoLg8JZHPr+J2x22rrHeXv+R5JGIJTxxftyvYwHuQ=) 22: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: nJOgKpKVASxgnXQj3ba2FE3qRrXdPvsCxLHQPYaRz00=) 23: 01941B1C621B11F0BDF9F86DC4F9AE02.roa (hash: cd+a9L6gCGTXJsTXsOcSoJV789y9HYTJf+mvqzBnIM4=) 24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: dWk76zBErGHiI9GT7cS+58hFi3EPMy2HTqsf8PBtUYY=) 25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: jIa+/65UAgiJ/NRkd/a4I2EsNsv3JwQP5Q3Ix5cv5qo=) 26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: QoW5v9awLkcGnpT1+XKXrYAVeGX7bCmbAXmL1gr+qQ4=) 27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: Pn3UiRI/u84/PSVY6hBOi61rOJXfl8nDViwTqHYc55g=) 28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: QW+0w7vdm64Mp8G687zcaLqftcXIlQy6snzgmEoSsjY=) 29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: PToSeikp/9y9g+Y+7PlL1TL5uKk45sRjErrgPWURTKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 16:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9608 (0x2588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Sep 4 16:02:39 2025 GMT Not After : Sep 11 16:02:39 2025 GMT Subject: CN=68b9b81f-fbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:28:36:33:42:7a:cf:3b:b5:82:61:c1:c7: 75:b7:74:91:6b:78:1f:6a:61:84:40:5e:7f:3c:74: ee:bb:1b:f5:a7:7a:69:8f:0a:c6:c8:63:8f:a9:47: 68:70:73:64:2a:ef:00:2b:2a:ea:cf:e4:f8:f7:e8: b8:4f:e7:7a:76:17:f6:79:48:9f:43:95:a0:69:53: 70:96:29:d4:d9:b5:4c:01:31:b6:4b:3c:d3:ca:1f: 21:3e:44:7f:26:b9:a8:e0:41:37:7c:83:b8:78:c5: 8e:70:84:0d:70:c6:3d:48:6d:f7:db:76:a7:56:29: 91:de:af:03:00:b1:3b:dd:df:ab:3d:18:6e:f5:3d: 71:1b:cf:56:c9:4b:07:24:b6:6f:82:f2:0c:25:b3: 7a:ba:7b:48:7d:4e:4d:ec:8f:97:df:7f:68:e0:42: e9:3b:df:72:f6:16:50:87:53:46:7a:cd:0d:56:85: 4d:61:87:d9:25:a8:ba:a0:d5:d3:00:da:5a:6d:d6: bb:c9:fb:fe:32:21:2f:01:63:a1:e9:bd:0e:6e:65: 69:f3:b8:0b:06:d2:5f:33:62:a4:c9:23:b1:4f:68: 5f:bf:d9:f5:8d:70:3e:af:aa:96:e4:da:dc:83:ba: 52:b6:f9:29:d9:1b:71:20:67:b1:3e:31:8e:8b:89: b4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AC:19:52:60:14:03:F8:24:A8:2D:56:98:2A:55:8D:EA:3D:A0:D0 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:45:2e:1e:9c:9a:01:a0:a0:6b:70:f3:b0:a6:2d:f4:e0:0c: 86:cb:ca:60:17:8a:53:ef:b7:80:53:e9:10:e8:47:34:f4:84: 96:cb:a6:9a:89:91:e4:85:76:78:01:f0:7c:6e:1b:c0:96:21: c8:48:f4:6c:9d:cb:9c:61:af:aa:f3:81:d5:c3:d4:1e:04:b3: 13:74:e6:31:2b:0f:57:3c:d9:b1:74:3b:2d:ff:7b:b4:fe:6e: 0b:54:df:d0:1a:11:ff:32:5b:5e:3f:ed:bf:3d:03:c6:ac:be: 87:d7:a3:d8:9f:55:7b:4f:ec:04:38:c4:8e:63:91:94:e1:55: c5:77:da:14:ce:7d:c8:d4:f5:75:ed:44:16:c3:cf:32:63:85: 83:da:97:57:d4:f3:68:e1:7c:57:a2:14:9a:ad:c3:b5:32:0e: c7:66:ef:5d:f4:26:4b:cf:df:ac:fb:89:5a:b2:3d:82:d6:21: 96:ff:d6:1f:00:08:86:af:31:43:dc:21:b8:76:f6:66:29:3a: 5f:b5:6b:66:4a:d8:5f:64:35:a7:07:16:82:90:8c:c2:fa:d3: e2:70:a3:7f:d5:14:02:a2:19:2a:f9:b9:89:b3:64:9b:af:0a: 50:b9:99:25:47:81:a1:07:6e:4c:9d:ee:8f:72:02:5c:5c:74: 12:af:35:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwOTA0MTYwMjM5WhcNMjUwOTExMTYwMjM5WjAYMRYwFAYD VQQDEw02OGI5YjgxZi1mYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLEoNjNCes87tYJhwcd1t3SRa3gfamGEQF5/PHTuuxv1p3ppjwrGyGOPqUdo cHNkKu8AKyrqz+T49+i4T+d6dhf2eUifQ5WgaVNwlinU2bVMATG2SzzTyh8hPkR/ Jrmo4EE3fIO4eMWOcIQNcMY9SG3323anVimR3q8DALE73d+rPRhu9T1xG89WyUsH JLZvgvIMJbN6untIfU5N7I+X339o4ELpO99y9hZQh1NGes0NVoVNYYfZJai6oNXT ANpabda7yfv+MiEvAWOh6b0ObmVp87gLBtJfM2KkySOxT2hfv9n1jXA+r6qW5Nrc g7pStvkp2RtxIGexPjGOi4m09QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLusGVJg FAP4JKgtVpgqVY3qPaDQMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvRS4enJoBoKBrcPOwpi304AyGy8pgF4pT77eAU+kQ6Ec09ISWy6aa iZHkhXZ4AfB8bhvAliHISPRsncucYa+q84HVw9QeBLMTdOYxKw9XPNmxdDst/3u0 /m4LVN/QGhH/MlteP+2/PQPGrL6H16PYn1V7T+wEOMSOY5GU4VXFd9oUzn3I1PV1 7UQWw88yY4WD2pdX1PNo4XxXohSarcO1Mg7HZu9d9CZLz9+s+4lasj2C1iGW/9Yf AAiGrzFD3CG4dvZmKTpftWtmSthfZDWnBxaCkIzC+tPicKN/1RQCohkq+bmJs2Sb rwpQuZklR4GhB25Mne6PcgJcXHQSrzW2 -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:17 2025 by rpki-client