$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json) Hash identifier: Rixwv09k1Yq492zEWDqts6s+6bR/3fxy9Trw3vSnoqQ= Subject key identifier: C4:73:E8:79:DD:05:C7:F1:87:B3:98:6C:BB:8E:D5:D7:1A:07:01:EC Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 25A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft Manifest number: 22EC Signing time: Sat 18 Oct 2025 16:12:49 +0000 Manifest this update: Sat 18 Oct 2025 16:12:49 +0000 Manifest next update: Sat 25 Oct 2025 16:12:49 +0000 Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: v5ATZW7sdCMmziKSrRb+0C8dGWzvqjO0mIE4w2tmURQ=) 2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: /Q1bh32UWOj4J5FAl9U6ArPlxdi0wsvaB+wwXRJ3Lqs=) 3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: 8OLjwPx61KkIQCmyjk1QuR/uGi52Ry48+A0/nvUFhto=) 4: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: kMzN7sJi/LRFE283RDzU5y7iSG/i/1PsyZ93O11mO5c=) 5: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: b9KSK49f3+RJ5Zndahld37Ne8rgyICiG4X/yrNeRCwg=) 6: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: Ms7QsXkh2kQNfde4KuGq3vFMf59+eXYHE6ZiNy8XHPg=) 7: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 7nW4B9tgYZxJlUM/jyWz4ppQFx5pTU5qJulzmizVwPY=) 8: 94C16496222811EF99153155C4F9AE02.roa (hash: njk+98oMXqEhaQH4K0CdtGJQNcY6Zsh8AbaFjT9X3L8=) 9: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: pK1U2tlcFI5eVZ+yZ2Uz2T2hO3URX24xuIkzXvQNT6Q=) 10: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: CcwUXK2Ib0st/gF/B8/lAm6jU9CpXcqxg7fd8dewyTs=) 11: BA007060162D11EEB79F703CC4F9AE02.roa (hash: e+8uiRyglTJ61jp+NHN/xhpvUYkVwouUN/cZkA6eEOU=) 12: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: mTrnMVZI3oc2hbgBbqTPzvSY22GeIaQ6Sv1aw5zibZo=) 13: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: NK9LWbF8pONuCfm9ynpNYVUJq0bnRlvsHPhOA7O7K+Y=) 14: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: TAXb6aVncKSk3q+7kBMZVnP/khsko2EZ8HMsWkq82Bs=) 15: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: vY03ulP+sNEIa8G9vSg/u1gVOLM+s6C9pglT3z4JdiE=) 16: 9043DEEC36D311F0944CB44FC4F9AE02.roa (hash: bEqkiO8ENywDu5LUBsotcsupS4ydOR5MpQpDbxlm4V4=) 17: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: QKfklbWPsoXlxByZaPbmc1+075SBHQiALuuEdPCAB50=) 18: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: C3qoGzcQZndm1u3tww57NTFE5NsW08UfVUZpiRELltQ=) 19: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: D3ZGO/WUxLPwaJZfxjpDYyNLveQ3u6uEceV8mvZASMk=) 20: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: tFFS7u2Pbz7scJ4rW1SHoAlT2k6YOdbY+5qrpMKq+14=) 21: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 9gHoLg8JZHPr+J2x22rrHeXv+R5JGIJTxxftyvYwHuQ=) 22: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: nJOgKpKVASxgnXQj3ba2FE3qRrXdPvsCxLHQPYaRz00=) 23: 01941B1C621B11F0BDF9F86DC4F9AE02.roa (hash: +KODamYYPQ+UbaGfa6xrSx74xstNmammNTyRbH0xIe8=) 24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: dWk76zBErGHiI9GT7cS+58hFi3EPMy2HTqsf8PBtUYY=) 25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: jIa+/65UAgiJ/NRkd/a4I2EsNsv3JwQP5Q3Ix5cv5qo=) 26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: QoW5v9awLkcGnpT1+XKXrYAVeGX7bCmbAXmL1gr+qQ4=) 27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: Pn3UiRI/u84/PSVY6hBOi61rOJXfl8nDViwTqHYc55g=) 28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: QW+0w7vdm64Mp8G687zcaLqftcXIlQy6snzgmEoSsjY=) 29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: PToSeikp/9y9g+Y+7PlL1TL5uKk45sRjErrgPWURTKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9634 (0x25a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Oct 18 16:12:49 2025 GMT Not After : Oct 25 16:12:49 2025 GMT Subject: CN=68f3bc81-10b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0b:c9:b1:75:95:1d:be:4a:c6:23:ff:5f:0c: 52:45:5a:27:d4:c0:cc:cf:fa:20:77:cb:21:79:ad: 9c:61:80:3f:02:14:f3:ba:2b:71:c4:b8:76:f9:2a: d5:69:e6:8c:5c:32:e1:36:cf:45:d3:e4:af:ba:ea: dc:c0:3c:e7:bc:83:59:51:3a:59:74:6d:97:4f:21: 91:25:19:db:9d:de:cc:33:68:52:63:b9:73:bf:4c: f0:14:a6:fb:f3:7b:fa:60:8d:cf:07:9e:fb:74:ec: a2:28:c1:b1:02:fb:43:71:71:dc:58:8f:2b:18:d8: c9:51:1c:f1:4c:63:9c:3c:62:44:00:13:cd:74:38: 5c:9a:3a:4e:5a:16:f1:38:77:64:bb:a4:9a:4f:1f: 38:a1:a6:df:6f:2a:4f:9b:96:ad:27:be:36:40:61: 01:2d:b6:df:ad:c5:c4:e2:ab:a7:cf:ef:47:a9:d6: 3e:ae:f8:f8:80:f1:3a:c8:fe:c6:5f:06:dd:11:65: 40:8d:39:da:df:4a:89:1e:5c:0e:6f:7a:1b:8a:86: 76:86:34:7a:8f:1f:4b:d8:16:14:5a:63:b9:80:40: b1:02:bb:28:09:83:a7:0f:2e:66:1a:59:4a:6d:f4: 6a:ff:8b:66:a8:96:d9:54:84:23:fa:1b:cd:2d:82: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:73:E8:79:DD:05:C7:F1:87:B3:98:6C:BB:8E:D5:D7:1A:07:01:EC X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:a5:8f:65:c1:21:82:77:e6:16:33:b3:f3:d5:03:4e:56:7e: 8f:f1:8c:af:f2:ef:8f:ba:2b:e9:1f:2f:24:67:94:15:36:74: f4:05:8e:27:b4:87:3b:11:bd:fb:42:5a:ad:3c:ed:87:5b:8f: d5:8e:13:fe:6b:49:83:48:59:28:d0:a4:f0:2a:4d:2e:16:b7: a8:66:76:cd:a6:d8:a0:47:4e:74:fd:63:74:24:98:3b:ce:1b: a9:74:f7:3e:af:28:1d:01:c2:5d:ad:f9:21:98:32:21:df:55: 8d:b4:aa:b6:55:ae:91:10:86:bc:8c:1f:33:cd:49:2c:e1:58: cc:70:1b:24:38:74:13:19:14:d4:28:99:0b:e5:69:4d:a6:44: 4e:f6:48:05:ab:c9:c0:ff:52:ef:19:e4:83:f4:0e:e0:32:11: 1e:33:51:d2:ce:d0:cd:c4:b5:90:d9:31:7b:05:b4:8b:dd:55: 76:a4:ef:30:3c:14:26:26:1a:f8:b0:f4:cc:0e:2b:37:f3:86: 03:f1:3a:8d:2e:87:dd:2a:30:5e:c5:f9:1b:e3:3e:a3:a3:47: 75:f3:08:44:b1:76:b8:ce:ef:00:e3:57:b4:c9:96:65:49:dc: d3:67:a6:8d:ca:0f:96:ac:0e:f5:7c:7d:15:e9:9b:21:84:8b: db:0e:48:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUxMDE4MTYxMjQ5WhcNMjUxMDI1MTYxMjQ5WjAYMRYwFAYD VQQDEw02OGYzYmM4MS0xMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowvJsXWVHb5KxiP/XwxSRVon1MDMz/ogd8shea2cYYA/AhTzuitxxLh2+SrV aeaMXDLhNs9F0+SvuurcwDznvINZUTpZdG2XTyGRJRnbnd7MM2hSY7lzv0zwFKb7 83v6YI3PB577dOyiKMGxAvtDcXHcWI8rGNjJURzxTGOcPGJEABPNdDhcmjpOWhbx OHdku6SaTx84oabfbypPm5atJ742QGEBLbbfrcXE4qunz+9HqdY+rvj4gPE6yP7G XwbdEWVAjTna30qJHlwOb3obioZ2hjR6jx9L2BYUWmO5gECxArsoCYOnDy5mGllK bfRq/4tmqJbZVIQj+hvNLYLP0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRz6Hnd Bcfxh7OYbLuO1dcaBwHsMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwpY9lwSGCd+YWM7Pz1QNOVn6P8Yyv8u+PuivpHy8kZ5QVNnT0BY4n tIc7Eb37QlqtPO2HW4/VjhP+a0mDSFko0KTwKk0uFreoZnbNptigR050/WN0JJg7 zhupdPc+rygdAcJdrfkhmDIh31WNtKq2Va6REIa8jB8zzUks4VjMcBskOHQTGRTU KJkL5WlNpkRO9kgFq8nA/1LvGeSD9A7gMhEeM1HSztDNxLWQ2TF7BbSL3VV2pO8w PBQmJhr4sPTMDis384YD8TqNLofdKjBexfkb4z6jo0d18whEsXa4zu8A41e0yZZl SdzTZ6aNyg+WrA71fH0V6ZshhIvbDkjB -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:54 2025 by rpki-client