$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json) Hash identifier: iOout5qccoMmw2ErYoAdMl5MBqestOH0GS3lNOw3Cms= Subject key identifier: A4:37:3A:75:A8:A3:32:63:E1:89:54:3B:1A:E0:AC:07:13:CB:B8:0E Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2544 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft Manifest number: 22AD Signing time: Wed 02 Jul 2025 16:04:28 +0000 Manifest this update: Wed 02 Jul 2025 16:04:28 +0000 Manifest next update: Wed 09 Jul 2025 16:04:28 +0000 Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: hnGoOWHLEKKpLIMW/h2/V+IRuTKsofBxyinIs6+DHy8=) 2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: n7pXi66lxgmnVUzRCaGjU+Jyqvcaobv+LRa6sWK36IE=) 3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: N/j8Xc916eNg8eHpf/TimkfEUKue+NoblWGnaKxHRm0=) 4: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: bxRIP/V3KFaeNWfQRbqaVdttFxEirD+o4UsmoISKZuc=) 5: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: CQWi2YF8MQ4UHFHqDi+xaEbH9uwwbmiWIRH/VdottEg=) 6: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: nPuyeWNG9exmJBtrhR6dKImyLvexezTrvMYpeknk12s=) 7: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: tUCXmWof0USHAd/AnTe/zIcja2f8KydMrpeti85baXA=) 8: 94C16496222811EF99153155C4F9AE02.roa (hash: Ac6cnmBtCeQwIV5PdTOpzzOyj+FEtvQgRkdEJEIsldM=) 9: BA007060162D11EEB79F703CC4F9AE02.roa (hash: i9EBn86mLgOFoT0s7Sga+CIh82Sy/UwirM5LdXIelBE=) 10: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: tS+qP2Je+Zz8kTJK21naf6pRVHAGu1cyXc5EQvZ1I6M=) 11: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: WtwbdAJs3osRQvsAOMvWgusqoBOVQjjr1Dv2FNOXu+k=) 12: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: n7jlwwjdFJ+RKwuKH29PXvEGEpKzuEPAVlddcWoawd4=) 13: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: +CGhSvKre7unc2jjZTN2h/5C4OKnNYy8AFrBlT9QgCc=) 14: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: BoIbbyMCoyjBPVVzzNzvY0re58/2xN3cHA7chKiXOvg=) 15: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: 42+AdUwxxCnW8+mpW9En0BbvfvMfDp076eo2jJL8hog=) 16: 9043DEEC36D311F0944CB44FC4F9AE02.roa (hash: uW/j/pPXhbeAEC1cTq4Sf49kqBXYvsbiA9+xtpZ3SZ4=) 17: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 4Baklu7fz790X3t+DnvBTOz3bpmb9db78d+W2Rsz46U=) 18: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: d5k8mBEvQfUgZFSJDf+SsljLPzLne0iAQgk3UuEZ4sE=) 19: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: o/tOGxE4Ft5fX3yUC9xv485nnBbYIcg8RYaepJzupC0=) 20: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: uzN3qB5XPrhFucLN2OmQ5NTjj6qYhLZBg4aeWaCRKe4=) 21: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 94Rt3YQOo3z7AHBNPf7mUO8MdNhSBexZLfHTIqNCUWQ=) 22: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: AITRCg2vjnVWNYtFs2RtxbI+uUU9ZjuERKnWghkFVBY=) 23: CCAD5E48533511F09270DB20C4F9AE02.roa (hash: VY9UhbHJhdDqv37yqyaOOtzlZswIVEpQ1OhK7tashIY=) 24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: 2MFkWatEYr7ySzuIIVO+LKsoWJa2vp38UqDbLF7GUV8=) 25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: mSHVgOgebMql2vVyUMQtDn8MbI5cBn29yqk8tb1nlIk=) 26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: mmR6Uep7EqCu0nzQaonURcP5xC0tMXraR08pUCncH0A=) 27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: n/BL8NEIAHpYJ0v9wedyUGmzL2t/5O06rDGFVPPDMuI=) 28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: 6y4Mf6N4wFMfqpPJoLDOmmq0S1UQIMIv6lZqvZ9nJLY=) 29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: 6cY6Ob6u+QL6WHZfOXxaIiNx2wMqL0gPJlcRnC46fIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9540 (0x2544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 2 16:04:28 2025 GMT Not After : Jul 9 16:04:28 2025 GMT Subject: CN=6865588c-b910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:29:92:a5:50:d9:2f:32:5d:9a:20:d2:93:0d: 59:15:3f:52:36:e7:7d:42:29:da:d2:a9:58:c0:65: 8b:c1:19:a2:72:4b:bb:87:c5:a9:fc:f8:0f:bd:3a: f2:56:f7:52:ac:dd:b4:1d:09:e3:94:d5:8f:63:4c: 8b:e2:74:47:aa:12:38:db:5e:15:77:b7:8f:07:f7: 50:a8:5f:2c:28:6b:11:c2:b0:a5:16:34:fa:80:29: 33:94:24:f8:c0:44:7a:8a:d6:0f:1b:66:f8:58:0c: d1:fa:bf:c5:32:e2:82:9c:04:33:a2:1e:bd:37:8b: fa:d7:4b:96:05:f8:ce:f6:f7:60:24:59:b9:a5:ba: 90:d5:95:13:92:24:27:0d:a4:fa:d6:20:0a:36:83: b9:d5:69:dd:11:b0:55:fe:f4:13:80:6a:04:d6:3e: f6:c9:c5:09:25:c2:aa:77:0a:e0:00:34:2a:4e:8b: f1:ef:fb:0a:18:1b:3c:4a:b8:37:b2:5e:98:f3:18: 7c:aa:2d:af:28:db:7e:37:f4:cd:b7:85:5d:20:57: ac:b7:c3:6e:c9:56:fa:ed:b8:3e:dc:dd:3e:ed:aa: c5:01:bd:fe:96:40:f4:91:72:cf:55:7e:f7:b1:9f: 1b:d5:07:b5:72:4a:1a:f1:aa:2f:9f:8d:1d:54:45: 95:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:37:3A:75:A8:A3:32:63:E1:89:54:3B:1A:E0:AC:07:13:CB:B8:0E X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:48:68:7e:83:3e:b5:22:fb:ad:08:4a:43:e3:48:f8:3e:ef: 73:e7:c8:93:86:f9:2c:c1:20:70:f3:60:39:f8:74:05:b4:0a: ae:eb:dd:c1:dd:8c:94:bd:d4:84:dd:21:f1:45:04:95:46:e9: 16:4e:97:72:cd:b0:8f:e0:ce:7b:96:8e:78:33:fd:f5:63:23: 4a:60:9d:ea:bc:08:92:d2:4f:00:93:57:56:fb:a6:5f:90:37: 42:ad:97:7b:84:1b:8a:d3:01:c9:71:9a:00:fc:75:35:db:53: 42:bc:82:ef:42:2a:2c:49:b4:6b:37:49:2a:3c:75:4c:c6:3e: 58:3c:ae:d8:96:e2:00:98:84:9d:bf:87:d2:ae:88:33:24:c4: 04:ae:0b:12:bb:4b:1c:a7:47:e1:4e:48:c8:2c:56:ae:e9:7b: b8:e0:da:6a:f0:22:eb:f4:cf:b3:54:56:88:d3:74:f0:c6:11: 95:3a:46:df:30:10:59:bd:76:59:5e:ed:9a:b6:43:e1:fd:ec: b1:17:4f:90:b3:e5:94:f8:d8:79:f2:3a:8b:30:bc:c5:c3:3b: 98:f0:8a:89:04:f2:4e:24:b8:cb:cb:74:d6:a6:8e:df:01:81: be:f3:0f:cc:2c:b4:85:ba:0b:1f:bf:76:d9:c3:76:25:1e:d2: 06:8d:d0:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwNzAyMTYwNDI4WhcNMjUwNzA5MTYwNDI4WjAYMRYwFAYD VQQDEw02ODY1NTg4Yy1iOTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CmSpVDZLzJdmiDSkw1ZFT9SNud9Qina0qlYwGWLwRmicku7h8Wp/PgPvTry VvdSrN20HQnjlNWPY0yL4nRHqhI4214Vd7ePB/dQqF8sKGsRwrClFjT6gCkzlCT4 wER6itYPG2b4WAzR+r/FMuKCnAQzoh69N4v610uWBfjO9vdgJFm5pbqQ1ZUTkiQn DaT61iAKNoO51WndEbBV/vQTgGoE1j72ycUJJcKqdwrgADQqTovx7/sKGBs8Srg3 sl6Y8xh8qi2vKNt+N/TNt4VdIFest8NuyVb67bg+3N0+7arFAb3+lkD0kXLPVX73 sZ8b1Qe1ckoa8aovn40dVEWVqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQ3OnWo ozJj4YlUOxrgrAcTy7gOMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcSGh+gz61IvutCEpD40j4Pu9z58iThvkswSBw82A5+HQFtAqu693B 3YyUvdSE3SHxRQSVRukWTpdyzbCP4M57lo54M/31YyNKYJ3qvAiS0k8Ak1dW+6Zf kDdCrZd7hBuK0wHJcZoA/HU121NCvILvQiosSbRrN0kqPHVMxj5YPK7YluIAmISd v4fSrogzJMQErgsSu0scp0fhTkjILFau6Xu44Npq8CLr9M+zVFaI03TwxhGVOkbf MBBZvXZZXu2atkPh/eyxF0+Qs+WU+Nh58jqLMLzFwzuY8IqJBPJOJLjLy3TWpo7f AYG+8w/MLLSFugsfv3bZw3YlHtIGjdBZ -----END CERTIFICATE-----Generated at Wed Jul 2 23:36:50 2025 by rpki-client