
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier: LRR7AZyOxLtoRKH701ilH3GjJTfL5FbznQj5+FsqQRc=
Subject key identifier: 83:53:BF:7E:09:D0:D7:C4:57:77:6B:AF:72:38:C3:F8:3E:13:DA:7B
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 2654
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number: 235C
Signing time: Mon 20 Apr 2026 15:52:52 +0000
Manifest this update: Mon 20 Apr 2026 15:52:51 +0000
Manifest next update: Mon 27 Apr 2026 15:52:51 +0000
Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: Jg8NkXQPFrP1ECdy8VauKFYWyszXvlw4t9JTuYwRZTE=)
2: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: dg5M28BM7Q9OSqEdMHsSLtI4cW3tbLsfo6oxRxnZkgU=)
3: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 0nUZjvvfEq+idlxORxZdIF54lHoOJDVXKimVebHznwY=)
4: 671E584437AE11F1ABA62586B7833773.roa (hash: GzaXvrIFA4BOnQROAThS0GwnqIbgRcENtuZ0H8vPDOE=)
5: 94C16496222811EF99153155C4F9AE02.roa (hash: IhQ1zSbXXf4rr1X3pECpva9uGFFRgEG7ArayUjxk3XY=)
6: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: ohZ0rNcC4o/lvqqhJ5dRQl2sFSNT+9W0ZljDeoeU/f8=)
7: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: u5rpKj8Hh6LNPUmnAjTjSQjEw6FcWzoOU3Lk+UX8OeQ=)
8: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: lcNCXN4ALK0VGFhT1zX6j/V2lOrX3RIWe+TEHrIIfGM=)
9: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: s40dhU8PVwSIJYyVny3a6mMwcd7oSGfD4g601KJOsFI=)
10: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: /zsZlwDj2pT6fAq7GkplNYrQROZ2c4fzOAUgQTDgsk4=)
11: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: YhmFklQYNFuVzlZwVyl13/fVO2Rx5D3vIX4W/p/maYc=)
12: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: cIljgUX9u7LYo/eVcmfxQWxLdJQ7vsFk54U+nDFtBl4=)
13: BA007060162D11EEB79F703CC4F9AE02.roa (hash: 2tT35KvgWT6eSD3SMEte/ai9jtMm9HHJLln3LtY/FIM=)
14: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: xeXe0W9LGadlWUHbrq3B2ViS6+U7W91OTOihQY9/fWg=)
15: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: NyTfYihU81GPEUaJYODhHs69mOq8Zj00EZITNDmiBc4=)
16: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: 5zBpGvGX5c+RGNoV+CNfoI4jKn3SVtOSoGuIjJJwB/4=)
17: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: Xj0L2cktFCj9AGPASACSNG1ar3gPj1CqHZie3Ff3N/Y=)
18: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: s4JLvZfEEcVWrVTGXPW1vZiV5kDqzl4x/TrNjlyz8lg=)
19: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: gU89Q3UCcTfIuonWf4oM4J8bmG7V6fm6L0kNg0N/Yj8=)
20: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: 8ih8ohTFBlcOehmTFPg4QmBKSI75XqIdXYTzNP+mssw=)
21: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: utZF48o+V1iqViyrul4ouJSJVWfTBOJgEF5i7OYCMAk=)
22: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: icqWlmP2zqUN+YwmSN6Rkge3B7PWW5GQPImLsSSVMmQ=)
23: DB8ED438DEFD11F0BBECA30E5A6F56BC.roa (hash: jV0ZsDmL7pYqG2HVwEL0ijFnLx0iNQWRnJh++Keye64=)
24: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: hrBe2Pa2BarjYurRPqX3BOavVRlDYYYGwxyR3VQWUl4=)
25: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: rI2XTb2R2MdCZIREOxF9HZq/Z6L/AhVI3hF8SVkg8es=)
26: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: 5aSuYQAxBrg4hpOCVUyocxVAo2M2ZMhQd9eXn7fmUUM=)
27: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: THinSV3E5HHG0rxGiH9voTblutCDfr1lVuBD4GRI9cI=)
28: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: +3uZuY7OlFyg2jsDB/Kz4JEWGg0yxvoM0a3nsJBXDX0=)
29: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: Tc0OP8h4p96K0lAWOjeLDMbCL1ZxKDKH+Zne0effYn4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 15:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9812 (0x2654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Apr 20 15:52:51 2026 GMT
Not After : Apr 27 15:52:51 2026 GMT
Subject: CN=69e64bd4-a9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:a6:91:a0:e2:86:07:16:81:64:7a:a4:96:
43:e5:94:d0:fc:ce:aa:cc:cc:69:5a:6d:33:0f:32:
f0:1e:2e:02:e3:90:79:98:1c:01:08:53:1d:77:b7:
09:cb:0e:eb:11:f0:9c:43:7e:aa:0a:fb:cd:3e:90:
2f:19:22:8e:ff:84:76:26:9b:a6:ee:a9:3c:c2:2d:
43:a3:f0:05:b4:85:65:58:26:9c:98:48:bc:71:02:
3d:fe:11:18:07:82:7c:45:2c:5f:79:c7:66:97:c2:
8c:ae:30:66:f6:15:94:3b:38:92:3b:60:aa:47:a0:
2d:4a:a1:c0:a0:9b:f3:fe:87:71:23:47:3d:b6:78:
aa:d9:e2:42:0d:e4:72:c5:f1:37:28:46:3c:80:b8:
cb:36:64:37:72:0e:a7:59:e4:e0:5b:b1:ea:69:17:
d3:be:eb:ca:19:0d:a3:c8:27:f4:e5:6d:51:a9:7e:
bf:29:fb:56:86:a9:0b:94:ef:d9:81:81:28:5d:44:
1b:76:e2:97:0f:a3:43:11:be:91:dc:3a:3f:ef:84:
38:d8:fa:7d:58:60:b3:76:5f:d0:85:d8:95:5c:4b:
4e:c0:fb:3c:62:b8:92:7f:c5:93:5d:bd:92:5d:04:
8a:cd:5f:87:0b:79:cc:85:ce:c1:73:28:a7:d5:90:
d8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:53:BF:7E:09:D0:D7:C4:57:77:6B:AF:72:38:C3:F8:3E:13:DA:7B
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:fc:16:53:61:59:5d:72:7e:7e:2c:57:e9:d1:dc:08:16:21:
6b:a8:c6:a9:62:c3:9e:1b:3a:d2:0f:1e:a3:f4:84:85:a9:6f:
f7:71:ab:1b:cf:ef:5b:3d:4a:2e:a8:5b:3c:97:ff:eb:14:f1:
6c:28:3b:08:d5:97:80:b8:64:97:eb:1a:05:4a:07:f3:72:bd:
37:37:9a:bf:e7:95:45:59:5e:af:bd:e3:86:f0:71:83:69:0c:
2b:4c:94:92:e0:b3:6e:f7:b5:c9:7c:0e:44:4a:c2:7e:01:4e:
55:e9:6d:63:7a:06:ec:bb:92:aa:6d:23:ba:b5:5f:a1:3f:74:
9c:01:03:96:22:26:52:d1:15:65:1e:66:4f:92:cb:46:a9:fd:
e2:70:ea:24:c1:04:02:47:2d:13:f4:c1:39:51:15:7d:9d:fd:
9e:e9:29:a6:1b:75:88:8d:51:31:24:71:97:cf:47:09:23:d1:
f8:85:00:6e:68:0b:44:ad:c5:ec:3a:e2:a3:40:cf:5f:eb:c3:
3a:1a:27:91:2e:02:3d:08:a4:9c:8b:22:68:6c:d7:eb:69:0f:
67:7f:c3:b2:a9:18:71:99:5e:24:f5:77:34:38:56:5b:6b:7f:
04:b2:26:ff:cf:39:19:ab:46:49:44:bc:da:fe:4d:28:8c:66:
54:28:1a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:22:52 2026 by rpki-client