
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier: cd+KUB7Wr1lN4AFtpkgfo5gDQyaLvX9ks1VEIzrA9/g=
Subject key identifier: F1:A5:EA:38:FC:AC:D1:A8:E7:D5:07:2D:26:EC:59:83:3B:B6:B6:F4
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 26B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number: 2395
Signing time: Wed 22 Jul 2026 15:59:19 +0000
Manifest this update: Wed 22 Jul 2026 15:59:18 +0000
Manifest next update: Wed 29 Jul 2026 15:59:18 +0000
Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: I/2Eigr2fCulIqrlq8yI3jJE1HKRyTj24YoQ+sysxRk=)
2: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: fELsRIeUPp1iTyoEm2tgpyVJi8oS2Ehx5DGrmeooViw=)
3: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: kizVRkxIaY1795MCpE8rdX3fvEG4qDLVYFjlEnVts0Q=)
4: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: EedI26Sx2994grPUcSKFjJ1j0cv3YZqLAHCyNSdQVkI=)
5: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: Ifg7lXJOQP+18o4CZaAo7GSgxBafrvA0XUWHav5Uo0c=)
6: 94C16496222811EF99153155C4F9AE02.roa (hash: rblIsywW3HeGBV9SYXZ48ueArKjs04dIk6+AvNganu0=)
7: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: v07Pprp9lf3TRtO+9xznb1E1Na5Oj+IgXg/hHlg/17g=)
8: 229B83C4685811F180A7311C9C47A888.roa (hash: ZDnamRNvi7dksMJwyc/mAFv1Y9uc7PCP3+Gsifgq/jo=)
9: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: Bk1JT23cvT2IaHE3oikg+BR927YJ1u3qo38PnnG2XQE=)
10: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: bWAeW20kddbPWVtd6T4H+eKbHvFtn75Lyk3GSBrZZzo=)
11: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 4Ij+zJZ5CkWG7jXCiWRJZjJ77nuWw4Opj7SW89egSHU=)
12: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: n3D3uWoQtuJezhynx+w6atzLkJgnD+wG5EO+6lXG6eI=)
13: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: nS79IZuDBhOC2SAUskf7oOdinYh07KUuC40Jb1wjqTM=)
14: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: L8KQ427W+moy0EvHQ9sPXqCcOMRmhCkdnN3Z6fWTWSU=)
15: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: cAXd+rSqoS0/CrBqmAlff9AaR6q5VbbrxC7tqf0d2OM=)
16: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: avBOKsbWyKUECTQ8CZJG8sV4Ncdv4AJ8R93izTNrcYY=)
17: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: zQF+T1/pOLzDuzv2qEa0T9BdUI0ppH7RANttefdBlH0=)
18: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: XsVZgmVaO9HxHlBF+QjQjR40DfffVdZHEBqljv9Stss=)
19: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: kGjjVFLeftJ4iWIxg8Q1sbQUrd0A5MgOTgnq5zEqwbE=)
20: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: KA8N1htPIafM0ykcB4avk8azmo1jpDzuUPofhuBqk30=)
21: E2174D9E525211F1980710C0B7833773.roa (hash: UXHBEi6kZUQ14KonHrPxrJtLjBz35nVjc3YNK54R6Qw=)
22: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: BHU+XdA8SETbOhTyvEane5KN/5p33K/aqdiI/9ZtYsM=)
23: CE013B0E80C811F198040B2C98A30FBC.roa (hash: Ar17Y2pgM2IRJ1et+drWpyUgBGRbm+nUgjvhgOIWiGw=)
24: E1B38BC080C811F181550F2C98A30FBC.roa (hash: WRADBx/SaXJk7j6yqZeKGAjOAQr20gzsAPuwRVAsDf4=)
25: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: CjGoyKN0HrGuZB1eGY3YN8uhsmzlKryekK6FbSvP2zk=)
26: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 2FNBLNXeHKr5fNOjfs5L8pJM6snV6ei6jK9XX9YsJak=)
27: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: F/3d2MdmWAQWy2/KkyrR/TKf6kjUWhedoqi+Mnvoopg=)
28: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: X8qoiiScFa9eVjABlsfQ/cyRc8nDS1tlAxe/2JVazO0=)
29: BA007060162D11EEB79F703CC4F9AE02.roa (hash: yhtnb/OOA/wXXD8maZO8n4AsJMc9HBQT2aQqAHCJfOQ=)
30: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: 9nyxv5vDqtD62E6UbjNswDwUiNqVOWE9KMQNkQhnhtU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9908 (0x26b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Jul 22 15:59:18 2026 GMT
Not After : Jul 29 15:59:18 2026 GMT
Subject: CN=6a60e8d7-f2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:dd:06:66:60:cb:f2:e5:4b:01:e9:a8:75:
df:05:a8:ce:b5:2f:27:6d:4e:60:07:49:8f:22:b4:
e7:a5:1e:93:43:d3:0d:ad:eb:4f:28:57:d2:21:26:
e2:3b:0b:3e:e7:4e:a5:59:bc:dc:d1:cf:71:dd:c3:
ec:e1:4d:74:f8:90:1d:49:c0:66:00:fb:75:49:18:
a9:8d:7c:c0:d3:da:87:81:a7:3f:0f:22:82:aa:a2:
21:ee:1c:59:18:ad:f1:cf:0e:6a:ea:2f:2c:80:76:
ef:93:34:1d:34:51:67:fe:68:a3:27:93:cd:f5:23:
b5:ee:7d:0c:d7:31:f3:af:13:fb:71:68:ce:46:60:
66:67:65:a1:71:48:df:05:3c:e8:ab:b0:ed:29:51:
50:fb:44:9b:6b:5c:60:1f:9f:a5:88:79:1b:e2:58:
f2:1f:44:9e:6f:08:56:88:5a:9c:29:6d:92:b7:2b:
20:35:06:a6:90:67:61:b6:43:08:76:d3:94:b9:64:
78:ac:db:38:db:50:c3:e8:3c:fe:40:4a:6d:50:18:
21:c1:e3:86:00:f2:70:09:78:85:8b:1c:9f:a8:62:
0b:5e:4a:ba:5d:aa:10:f2:30:d9:b9:2b:ca:01:44:
2f:c5:56:ea:3a:11:e2:cc:4f:b5:13:fc:07:00:04:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A5:EA:38:FC:AC:D1:A8:E7:D5:07:2D:26:EC:59:83:3B:B6:B6:F4
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:85:17:b0:76:b3:8f:22:72:b1:e3:84:67:a7:6f:fd:a6:2a:
3f:02:3c:1f:64:54:a2:c5:9c:fc:55:ea:8a:11:d9:b8:ba:66:
c6:b7:77:b5:ac:20:70:40:1d:c7:de:8e:79:fe:88:b4:0e:08:
51:7f:f2:dc:27:12:7d:d2:8c:97:f1:57:0a:7e:5a:f2:2c:7e:
70:06:9d:8e:5e:85:66:83:4d:f7:4d:ef:0a:58:0b:1e:e0:0f:
09:9f:38:dc:18:c7:e2:ec:b6:7d:69:e9:3d:36:c9:de:36:bf:
c5:24:bf:a6:92:bb:e8:ad:b8:19:1b:15:ed:46:b2:e0:26:7b:
66:82:19:88:e5:3d:79:7a:22:08:60:22:76:40:07:df:3e:b0:
4e:3f:77:1d:11:f5:cf:67:83:3e:0d:18:53:9b:5b:77:e7:68:
0d:d2:5a:c2:f9:82:ff:b7:ac:30:33:4b:01:b3:c0:78:e3:6b:
02:39:c6:7a:98:a5:2a:67:42:b9:fb:15:90:2e:f3:38:c4:2d:
38:30:97:1c:10:de:9e:c2:0b:b4:2c:51:8c:43:73:02:ec:07:
14:ac:36:48:5a:95:28:80:4c:09:b4:75:34:d8:7a:93:b0:31:
5d:e4:0b:05:8d:a2:e5:58:5d:52:64:58:95:84:14:85:bc:a8:
03:8c:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:05:24 2026 by rpki-client