$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json) Hash identifier: psG/nWL2JrgzR1H4iGzi2AI1KoO7a+pc3KJ/JOaYuls= Subject key identifier: F7:01:39:F0:84:7A:B0:0F:CE:DD:74:D5:C7:13:2F:68:BD:D4:AE:26 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft Manifest number: 2284 Signing time: Mon 12 May 2025 15:55:28 +0000 Manifest this update: Mon 12 May 2025 15:55:27 +0000 Manifest next update: Mon 19 May 2025 15:55:27 +0000 Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: 7KJRNO+Hx/vo6PA8Py3iydx3B8ReJmBC6FWfUoX+ZKg=) 2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: n7pXi66lxgmnVUzRCaGjU+Jyqvcaobv+LRa6sWK36IE=) 3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: N/j8Xc916eNg8eHpf/TimkfEUKue+NoblWGnaKxHRm0=) 4: 642583D4144511F0B1B2DD1AC4F9AE02.roa (hash: I3rmMsPO9b1m3yi7MzO+9VvcWmRuH5agiuA3fee6PLU=) 5: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: bxRIP/V3KFaeNWfQRbqaVdttFxEirD+o4UsmoISKZuc=) 6: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: CQWi2YF8MQ4UHFHqDi+xaEbH9uwwbmiWIRH/VdottEg=) 7: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: nPuyeWNG9exmJBtrhR6dKImyLvexezTrvMYpeknk12s=) 8: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: tUCXmWof0USHAd/AnTe/zIcja2f8KydMrpeti85baXA=) 9: 94C16496222811EF99153155C4F9AE02.roa (hash: Ac6cnmBtCeQwIV5PdTOpzzOyj+FEtvQgRkdEJEIsldM=) 10: BA007060162D11EEB79F703CC4F9AE02.roa (hash: i9EBn86mLgOFoT0s7Sga+CIh82Sy/UwirM5LdXIelBE=) 11: B81B3EACB5FE11EFBDC28969C4F9AE02.roa (hash: cliKQfssgT0XbLB0hhVLxhVkmpwjdFiqqwJlhexg3Zs=) 12: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: tS+qP2Je+Zz8kTJK21naf6pRVHAGu1cyXc5EQvZ1I6M=) 13: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: WtwbdAJs3osRQvsAOMvWgusqoBOVQjjr1Dv2FNOXu+k=) 14: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: n7jlwwjdFJ+RKwuKH29PXvEGEpKzuEPAVlddcWoawd4=) 15: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: +CGhSvKre7unc2jjZTN2h/5C4OKnNYy8AFrBlT9QgCc=) 16: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: BoIbbyMCoyjBPVVzzNzvY0re58/2xN3cHA7chKiXOvg=) 17: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: 42+AdUwxxCnW8+mpW9En0BbvfvMfDp076eo2jJL8hog=) 18: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 4Baklu7fz790X3t+DnvBTOz3bpmb9db78d+W2Rsz46U=) 19: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: d5k8mBEvQfUgZFSJDf+SsljLPzLne0iAQgk3UuEZ4sE=) 20: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: o/tOGxE4Ft5fX3yUC9xv485nnBbYIcg8RYaepJzupC0=) 21: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: uzN3qB5XPrhFucLN2OmQ5NTjj6qYhLZBg4aeWaCRKe4=) 22: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 94Rt3YQOo3z7AHBNPf7mUO8MdNhSBexZLfHTIqNCUWQ=) 23: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: AITRCg2vjnVWNYtFs2RtxbI+uUU9ZjuERKnWghkFVBY=) 24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: 2MFkWatEYr7ySzuIIVO+LKsoWJa2vp38UqDbLF7GUV8=) 25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: mSHVgOgebMql2vVyUMQtDn8MbI5cBn29yqk8tb1nlIk=) 26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: mmR6Uep7EqCu0nzQaonURcP5xC0tMXraR08pUCncH0A=) 27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: n/BL8NEIAHpYJ0v9wedyUGmzL2t/5O06rDGFVPPDMuI=) 28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: 6y4Mf6N4wFMfqpPJoLDOmmq0S1UQIMIv6lZqvZ9nJLY=) 29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: 6cY6Ob6u+QL6WHZfOXxaIiNx2wMqL0gPJlcRnC46fIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9489 (0x2511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: May 12 15:55:27 2025 GMT Not After : May 19 15:55:27 2025 GMT Subject: CN=682219f0-0ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c5:96:03:c3:23:d7:a1:81:3b:02:b7:11:53: b7:86:cb:7c:b3:56:ab:72:ad:14:b4:31:a6:5e:1a: 81:75:d0:c8:05:be:48:89:b0:5a:34:1f:dd:95:9a: e5:6b:31:6a:62:08:e6:83:0a:dd:96:ee:9b:03:c7: fb:c2:5b:b8:6e:24:a9:c5:5a:dd:b3:4c:3a:db:66: ad:1f:fb:f9:bd:d2:5c:52:59:e4:2a:d3:4a:a8:38: 96:41:6e:1b:fe:9b:49:ad:18:93:be:b6:80:64:81: c8:71:2f:7f:c0:c7:7b:2e:73:4f:ab:46:f9:a9:db: bd:3a:9c:99:cf:32:c6:47:04:af:5a:e1:16:d6:96: eb:15:07:fa:53:ab:b9:dc:a6:9f:66:9f:9a:41:4f: a1:0d:c1:de:ac:81:8e:b9:f6:12:98:3d:40:7a:60: b0:65:3f:09:44:f9:5f:95:37:02:8e:a4:f2:e5:54: 23:58:9a:a8:17:dd:04:03:db:a5:6a:84:53:b5:5f: b1:b5:85:ff:99:51:48:79:83:a7:ae:4e:38:13:61: 76:d6:c6:7b:53:24:1b:35:b9:50:3b:99:52:cd:f8: 43:01:59:ee:44:e8:2c:41:75:03:77:56:a4:b1:f4: d1:2b:47:8d:e0:42:e8:cc:e8:6e:d3:9e:c5:47:c2: b4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:01:39:F0:84:7A:B0:0F:CE:DD:74:D5:C7:13:2F:68:BD:D4:AE:26 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:16:95:fb:11:b2:e3:c7:2a:17:1f:2b:9b:9b:76:b6:53:4c: 05:c5:5b:53:ba:3a:f3:35:c2:39:48:84:39:78:30:56:0a:d8: 08:36:4b:c9:00:16:d6:19:e4:f6:86:ed:c8:58:01:92:a5:db: c7:bb:6d:d0:5b:48:af:34:36:d4:52:0f:9f:75:70:04:c3:e5: d5:5d:23:84:84:d0:99:9b:81:26:5f:38:41:73:96:b1:41:c2: 3a:d4:1e:5e:9d:bf:8b:7f:42:fa:97:e5:36:d3:34:f3:70:f4: 41:7d:64:36:1b:3b:56:dd:77:a1:79:c3:a0:a0:4b:0f:93:e3: f0:f2:79:1e:b4:c2:77:5a:0f:dd:e9:e9:f8:76:be:96:75:56: 75:e3:05:d0:4c:5a:8f:02:23:01:a9:92:e2:b8:84:6a:cc:16: f8:75:11:09:58:67:9f:68:e3:ad:d7:2d:ba:86:a0:f5:55:f8: ea:6c:1c:c8:3c:55:aa:95:41:53:de:1c:da:67:f7:b1:51:92: 5d:b4:77:33:71:3e:f7:dd:dc:cb:e2:ec:b0:9c:f2:8a:1a:91: 42:84:85:80:86:0b:bd:12:32:8c:bc:1c:d2:05:59:9d:ae:fa: 7b:5b:03:f1:6d:c2:ca:12:fd:98:ab:65:2b:f8:a4:9b:1b:e3: d0:c4:b1:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwNTEyMTU1NTI3WhcNMjUwNTE5MTU1NTI3WjAYMRYwFAYD VQQDEw02ODIyMTlmMC0wZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8WWA8Mj16GBOwK3EVO3hst8s1arcq0UtDGmXhqBddDIBb5IibBaNB/dlZrl azFqYgjmgwrdlu6bA8f7wlu4biSpxVrds0w622atH/v5vdJcUlnkKtNKqDiWQW4b /ptJrRiTvraAZIHIcS9/wMd7LnNPq0b5qdu9OpyZzzLGRwSvWuEW1pbrFQf6U6u5 3KafZp+aQU+hDcHerIGOufYSmD1AemCwZT8JRPlflTcCjqTy5VQjWJqoF90EA9ul aoRTtV+xtYX/mVFIeYOnrk44E2F21sZ7UyQbNblQO5lSzfhDAVnuROgsQXUDd1ak sfTRK0eN4ELozOhu057FR8K0JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcBOfCE erAPzt101ccTL2i91K4mMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMFpX7EbLjxyoXHyubm3a2U0wFxVtTujrzNcI5SIQ5eDBWCtgINkvJ ABbWGeT2hu3IWAGSpdvHu23QW0ivNDbUUg+fdXAEw+XVXSOEhNCZm4EmXzhBc5ax QcI61B5enb+Lf0L6l+U20zTzcPRBfWQ2GztW3XehecOgoEsPk+Pw8nketMJ3Wg/d 6en4dr6WdVZ14wXQTFqPAiMBqZLiuIRqzBb4dREJWGefaOOt1y26hqD1VfjqbBzI PFWqlUFT3hzaZ/exUZJdtHczcT733dzL4uywnPKKGpFChIWAhgu9EjKMvBzSBVmd rvp7WwPxbcLKEv2Yq2Ur+KSbG+PQxLGl -----END CERTIFICATE-----Generated at Wed May 14 01:31:04 2025 by rpki-client