$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json) Hash identifier: PTDw8iDS8b6GegmSrvCWb10loEyjlzvDnwV5lOBk/G8= Subject key identifier: B9:51:BA:6E:DE:40:8B:21:81:7D:0F:D8:C4:A9:36:2D:42:CA:D6:D5 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft Manifest number: 229B Signing time: Wed 04 Jun 2025 15:59:54 +0000 Manifest this update: Wed 04 Jun 2025 15:59:53 +0000 Manifest next update: Wed 11 Jun 2025 15:59:53 +0000 Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: p3fNQHegwyBFcj6Zc/yJD9rAqBCxrIKMDYxVIHH9HLo=) 2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: n7pXi66lxgmnVUzRCaGjU+Jyqvcaobv+LRa6sWK36IE=) 3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: N/j8Xc916eNg8eHpf/TimkfEUKue+NoblWGnaKxHRm0=) 4: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: bxRIP/V3KFaeNWfQRbqaVdttFxEirD+o4UsmoISKZuc=) 5: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: CQWi2YF8MQ4UHFHqDi+xaEbH9uwwbmiWIRH/VdottEg=) 6: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: nPuyeWNG9exmJBtrhR6dKImyLvexezTrvMYpeknk12s=) 7: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: tUCXmWof0USHAd/AnTe/zIcja2f8KydMrpeti85baXA=) 8: 94C16496222811EF99153155C4F9AE02.roa (hash: Ac6cnmBtCeQwIV5PdTOpzzOyj+FEtvQgRkdEJEIsldM=) 9: BA007060162D11EEB79F703CC4F9AE02.roa (hash: i9EBn86mLgOFoT0s7Sga+CIh82Sy/UwirM5LdXIelBE=) 10: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: tS+qP2Je+Zz8kTJK21naf6pRVHAGu1cyXc5EQvZ1I6M=) 11: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: WtwbdAJs3osRQvsAOMvWgusqoBOVQjjr1Dv2FNOXu+k=) 12: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: n7jlwwjdFJ+RKwuKH29PXvEGEpKzuEPAVlddcWoawd4=) 13: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: +CGhSvKre7unc2jjZTN2h/5C4OKnNYy8AFrBlT9QgCc=) 14: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: BoIbbyMCoyjBPVVzzNzvY0re58/2xN3cHA7chKiXOvg=) 15: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: 42+AdUwxxCnW8+mpW9En0BbvfvMfDp076eo2jJL8hog=) 16: 9043DEEC36D311F0944CB44FC4F9AE02.roa (hash: uW/j/pPXhbeAEC1cTq4Sf49kqBXYvsbiA9+xtpZ3SZ4=) 17: DFED3A4A36EE11F0AB6FC454C4F9AE02.roa (hash: eLh/ozyQghqwV0kzUHtTkl4FzUqR+4Rcc4GLBzEcxdY=) 18: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 4Baklu7fz790X3t+DnvBTOz3bpmb9db78d+W2Rsz46U=) 19: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: d5k8mBEvQfUgZFSJDf+SsljLPzLne0iAQgk3UuEZ4sE=) 20: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: o/tOGxE4Ft5fX3yUC9xv485nnBbYIcg8RYaepJzupC0=) 21: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: uzN3qB5XPrhFucLN2OmQ5NTjj6qYhLZBg4aeWaCRKe4=) 22: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 94Rt3YQOo3z7AHBNPf7mUO8MdNhSBexZLfHTIqNCUWQ=) 23: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: AITRCg2vjnVWNYtFs2RtxbI+uUU9ZjuERKnWghkFVBY=) 24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: 2MFkWatEYr7ySzuIIVO+LKsoWJa2vp38UqDbLF7GUV8=) 25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: mSHVgOgebMql2vVyUMQtDn8MbI5cBn29yqk8tb1nlIk=) 26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: mmR6Uep7EqCu0nzQaonURcP5xC0tMXraR08pUCncH0A=) 27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: n/BL8NEIAHpYJ0v9wedyUGmzL2t/5O06rDGFVPPDMuI=) 28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: 6y4Mf6N4wFMfqpPJoLDOmmq0S1UQIMIv6lZqvZ9nJLY=) 29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: 6cY6Ob6u+QL6WHZfOXxaIiNx2wMqL0gPJlcRnC46fIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 15:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9520 (0x2530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jun 4 15:59:53 2025 GMT Not After : Jun 11 15:59:53 2025 GMT Subject: CN=68406d7a-ca1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:1e:e8:a4:32:22:1e:98:c2:2c:1e:8a:65: ba:db:35:35:00:79:b1:71:57:3f:26:f5:98:22:41: 6a:82:d4:af:ae:97:a3:e7:fc:38:87:b4:2f:85:74: 2e:26:ec:d7:d3:d7:d7:93:7b:2c:5e:46:6b:f4:90: 9c:55:68:ab:54:4d:7d:53:65:31:e8:2f:11:5e:75: 12:9e:b5:73:97:c3:2d:06:b7:b1:cd:c0:58:65:27: a5:df:a6:ce:99:14:47:f4:cf:3d:64:c3:4c:e2:aa: aa:f9:88:36:46:e1:69:34:62:d6:fe:a2:08:a9:8b: 5f:04:15:33:23:7f:f3:45:f5:09:92:4e:52:ab:2c: f1:ca:04:55:45:20:37:d4:67:dd:16:07:16:b2:17: b1:21:28:27:54:56:28:d4:7d:ee:52:59:b1:8c:3e: d3:79:b1:32:1d:cc:03:ab:6b:b8:8a:93:36:f8:10: b6:26:6d:3f:f7:3c:a5:72:53:d6:b9:ad:d7:48:7c: f9:1f:b2:f1:99:f0:00:0b:9d:21:50:79:1e:b1:34: 4f:bc:35:5c:67:40:e5:91:6f:ea:cb:49:38:37:3d: 08:b4:ee:dd:dd:1c:a0:74:fd:8d:fa:c2:6b:2e:6f: f6:ea:da:eb:a9:ce:e0:af:3f:dd:2c:ba:ff:dc:06: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:51:BA:6E:DE:40:8B:21:81:7D:0F:D8:C4:A9:36:2D:42:CA:D6:D5 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:47:ae:70:00:f2:b0:79:7c:45:ab:8a:97:7d:75:ec:93:32: 00:c6:e0:66:6f:50:7d:44:73:11:80:22:5b:12:94:95:0e:4c: dd:ec:ee:54:22:c8:0e:80:51:ad:f8:aa:96:ea:a2:ec:da:d2: 58:4d:57:a6:57:5b:08:f5:f4:37:4c:8d:87:aa:7c:1d:f5:0e: d8:86:7f:be:95:c7:65:c7:7f:1b:00:a6:6d:49:09:c8:93:1f: a9:96:3e:a6:95:46:86:91:ac:94:9b:c5:16:b2:03:f4:a1:1a: 38:84:4c:fc:5b:16:1a:87:d5:61:33:65:96:98:0d:8e:ac:b2: e2:16:1b:0e:03:a6:74:9d:fb:26:f1:40:6b:ac:ef:a5:b9:99: 9e:d2:dd:77:a0:72:e2:b1:36:b4:a5:9a:37:35:1e:1a:7f:dd: 25:98:94:db:1e:2b:c9:ad:78:b6:ee:c1:58:41:27:1f:69:c2: ec:0c:fe:a3:99:c9:69:33:22:da:72:e5:0e:eb:a8:5c:d8:9a: 5f:64:53:bd:8a:34:15:f2:99:e7:e4:70:c5:0b:75:d6:82:de: 39:76:0a:af:64:7d:4a:0d:de:44:1e:f2:d5:ef:1b:3e:b1:39: 03:7b:65:38:c8:68:54:b0:b7:9f:2a:57:a1:c9:3a:ed:8b:18: 98:c6:4c:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwNjA0MTU1OTUzWhcNMjUwNjExMTU1OTUzWjAYMRYwFAYD VQQDEw02ODQwNmQ3YS1jYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5Ie6KQyIh6YwiweimW62zU1AHmxcVc/JvWYIkFqgtSvrpej5/w4h7QvhXQu JuzX09fXk3ssXkZr9JCcVWirVE19U2Ux6C8RXnUSnrVzl8MtBrexzcBYZSel36bO mRRH9M89ZMNM4qqq+Yg2RuFpNGLW/qIIqYtfBBUzI3/zRfUJkk5SqyzxygRVRSA3 1GfdFgcWshexISgnVFYo1H3uUlmxjD7TebEyHcwDq2u4ipM2+BC2Jm0/9zylclPW ua3XSHz5H7LxmfAAC50hUHkesTRPvDVcZ0DlkW/qy0k4Nz0ItO7d3RygdP2N+sJr Lm/26trrqc7grz/dLLr/3Aam+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlRum7e QIshgX0P2MSpNi1CytbVMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYR65wAPKweXxFq4qXfXXskzIAxuBmb1B9RHMRgCJbEpSVDkzd7O5U IsgOgFGt+KqW6qLs2tJYTVemV1sI9fQ3TI2Hqnwd9Q7Yhn++lcdlx38bAKZtSQnI kx+plj6mlUaGkayUm8UWsgP0oRo4hEz8WxYah9VhM2WWmA2OrLLiFhsOA6Z0nfsm 8UBrrO+luZme0t13oHLisTa0pZo3NR4af90lmJTbHivJrXi27sFYQScfacLsDP6j mclpMyLacuUO66hc2JpfZFO9ijQV8pnn5HDFC3XWgt45dgqvZH1KDd5EHvLV7xs+ sTkDe2U4yGhUsLefKlehyTrtixiYxky6 -----END CERTIFICATE-----Generated at Thu Jun 5 19:19:33 2025 by rpki-client