$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json) Hash identifier: K+EYLRR9N4wUlaiPtiBx99JrAiGfIjLoYUQ4nus9hAE= Subject key identifier: BC:B7:2E:1B:58:9D:F7:8D:0D:6F:F2:98:A7:7A:0A:66:FE:F9:12:AD Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft Manifest number: 22CC Signing time: Fri 22 Aug 2025 16:00:08 +0000 Manifest this update: Fri 22 Aug 2025 16:00:08 +0000 Manifest next update: Fri 29 Aug 2025 16:00:08 +0000 Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: eiM7EMSuCiEBqNQpbb3aRwZr8iP0gpskBwd+fz5HhjM=) 2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: /Q1bh32UWOj4J5FAl9U6ArPlxdi0wsvaB+wwXRJ3Lqs=) 3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: 8OLjwPx61KkIQCmyjk1QuR/uGi52Ry48+A0/nvUFhto=) 4: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: kMzN7sJi/LRFE283RDzU5y7iSG/i/1PsyZ93O11mO5c=) 5: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: b9KSK49f3+RJ5Zndahld37Ne8rgyICiG4X/yrNeRCwg=) 6: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: Ms7QsXkh2kQNfde4KuGq3vFMf59+eXYHE6ZiNy8XHPg=) 7: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: 7nW4B9tgYZxJlUM/jyWz4ppQFx5pTU5qJulzmizVwPY=) 8: 94C16496222811EF99153155C4F9AE02.roa (hash: njk+98oMXqEhaQH4K0CdtGJQNcY6Zsh8AbaFjT9X3L8=) 9: BA007060162D11EEB79F703CC4F9AE02.roa (hash: e+8uiRyglTJ61jp+NHN/xhpvUYkVwouUN/cZkA6eEOU=) 10: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: CcwUXK2Ib0st/gF/B8/lAm6jU9CpXcqxg7fd8dewyTs=) 11: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: pK1U2tlcFI5eVZ+yZ2Uz2T2hO3URX24xuIkzXvQNT6Q=) 12: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: mTrnMVZI3oc2hbgBbqTPzvSY22GeIaQ6Sv1aw5zibZo=) 13: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: NK9LWbF8pONuCfm9ynpNYVUJq0bnRlvsHPhOA7O7K+Y=) 14: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: TAXb6aVncKSk3q+7kBMZVnP/khsko2EZ8HMsWkq82Bs=) 15: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: vY03ulP+sNEIa8G9vSg/u1gVOLM+s6C9pglT3z4JdiE=) 16: 9043DEEC36D311F0944CB44FC4F9AE02.roa (hash: bEqkiO8ENywDu5LUBsotcsupS4ydOR5MpQpDbxlm4V4=) 17: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: QKfklbWPsoXlxByZaPbmc1+075SBHQiALuuEdPCAB50=) 18: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: C3qoGzcQZndm1u3tww57NTFE5NsW08UfVUZpiRELltQ=) 19: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: D3ZGO/WUxLPwaJZfxjpDYyNLveQ3u6uEceV8mvZASMk=) 20: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: tFFS7u2Pbz7scJ4rW1SHoAlT2k6YOdbY+5qrpMKq+14=) 21: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 9gHoLg8JZHPr+J2x22rrHeXv+R5JGIJTxxftyvYwHuQ=) 22: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: nJOgKpKVASxgnXQj3ba2FE3qRrXdPvsCxLHQPYaRz00=) 23: 01941B1C621B11F0BDF9F86DC4F9AE02.roa (hash: cd+a9L6gCGTXJsTXsOcSoJV789y9HYTJf+mvqzBnIM4=) 24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: dWk76zBErGHiI9GT7cS+58hFi3EPMy2HTqsf8PBtUYY=) 25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: jIa+/65UAgiJ/NRkd/a4I2EsNsv3JwQP5Q3Ix5cv5qo=) 26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: QoW5v9awLkcGnpT1+XKXrYAVeGX7bCmbAXmL1gr+qQ4=) 27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: Pn3UiRI/u84/PSVY6hBOi61rOJXfl8nDViwTqHYc55g=) 28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: QW+0w7vdm64Mp8G687zcaLqftcXIlQy6snzgmEoSsjY=) 29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: PToSeikp/9y9g+Y+7PlL1TL5uKk45sRjErrgPWURTKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9601 (0x2581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Aug 22 16:00:08 2025 GMT Not After : Aug 29 16:00:08 2025 GMT Subject: CN=68a89408-d4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:30:06:b8:30:5b:15:17:0e:14:99:4f:fb:02: 55:dc:e7:f9:3d:33:86:1a:c6:5d:79:e0:8b:cb:2a: 4c:45:74:83:02:e8:24:a9:d1:09:92:92:44:5f:f7: 5a:a7:4c:83:53:3c:41:5a:ee:d7:43:90:e8:03:17: 86:2a:5c:04:c4:dd:99:3c:48:61:c9:85:29:ee:bf: 46:d3:b4:62:5b:2a:e6:36:10:06:d4:76:c9:0b:9d: f2:33:af:b7:e2:cd:63:23:c7:df:63:52:1c:8b:e7: 65:72:9c:84:ea:38:8d:12:fe:fb:ff:0d:6b:25:82: a3:d1:d3:55:e5:f6:44:be:54:b4:00:6b:89:d2:18: c4:14:55:8d:88:72:dc:7f:9e:f4:76:e7:dc:fc:43: d6:77:22:74:2d:de:40:7c:cb:2c:fc:92:4f:08:a2: 49:7d:45:43:0a:a4:43:ff:81:89:14:51:91:17:bf: b7:31:fe:b3:82:97:ff:1a:95:2c:c5:d4:98:75:f7: 3d:6b:46:4b:fd:ec:69:a2:d5:d0:f3:31:0b:3f:fc: fd:14:86:b2:87:45:16:53:47:a5:65:7e:5a:aa:df: 8d:5a:35:8c:94:67:90:d7:9e:3f:3b:16:70:ef:08: 75:b9:55:32:cf:f0:db:3c:6a:ac:2a:82:90:9d:a8: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B7:2E:1B:58:9D:F7:8D:0D:6F:F2:98:A7:7A:0A:66:FE:F9:12:AD X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:60:01:69:0b:51:5b:1b:9b:78:6e:d1:d0:28:bc:d9:0a:bf: 9e:49:f4:c5:d7:5e:c0:2e:7b:d6:8c:48:7a:73:cf:31:da:fe: 64:84:d1:46:9c:79:4b:9a:77:24:21:4e:a6:a8:13:6f:32:0d: 50:6d:64:fa:2f:bb:aa:0b:98:57:d3:03:a5:37:73:38:d4:7e: fb:7d:a5:e5:a4:42:d6:a1:90:59:cd:5e:d0:80:11:19:8f:f2: b1:3b:24:95:d6:1f:3f:fe:94:f8:4c:02:59:c0:ce:17:a9:f8: 6d:39:be:66:df:f9:7b:b5:d3:6f:fa:f8:6b:22:24:b2:be:47: ac:3b:86:77:0c:c4:73:12:07:47:9c:6f:83:e2:5e:e5:37:d8: 54:49:d3:ef:3e:ff:f0:c9:42:e9:26:91:f9:3e:df:57:ca:02: 8e:e7:f7:49:71:db:cf:d6:4e:72:d1:00:4c:57:58:33:99:0f: f0:77:7f:9a:ef:47:fc:48:fd:ea:ae:6f:0e:52:e9:c4:ad:0a: 21:b8:0b:4f:4b:db:d8:eb:3f:92:74:38:98:70:bb:63:29:35: bc:c9:95:75:49:7a:8f:62:59:e4:9b:11:fc:98:5f:08:4e:62: b8:e8:e6:f2:68:b7:a2:3f:cf:e7:8f:a5:51:c4:5e:d6:22:6b: 55:a6:55:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwODIyMTYwMDA4WhcNMjUwODI5MTYwMDA4WjAYMRYwFAYD VQQDEw02OGE4OTQwOC1kNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TAGuDBbFRcOFJlP+wJV3Of5PTOGGsZdeeCLyypMRXSDAugkqdEJkpJEX/da p0yDUzxBWu7XQ5DoAxeGKlwExN2ZPEhhyYUp7r9G07RiWyrmNhAG1HbJC53yM6+3 4s1jI8ffY1Ici+dlcpyE6jiNEv77/w1rJYKj0dNV5fZEvlS0AGuJ0hjEFFWNiHLc f570dufc/EPWdyJ0Ld5AfMss/JJPCKJJfUVDCqRD/4GJFFGRF7+3Mf6zgpf/GpUs xdSYdfc9a0ZL/expotXQ8zELP/z9FIayh0UWU0elZX5aqt+NWjWMlGeQ154/OxZw 7wh1uVUyz/DbPGqsKoKQnagP0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy3LhtY nfeNDW/ymKd6Cmb++RKtMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDeYAFpC1FbG5t4btHQKLzZCr+eSfTF117ALnvWjEh6c88x2v5khNFG nHlLmnckIU6mqBNvMg1QbWT6L7uqC5hX0wOlN3M41H77faXlpELWoZBZzV7QgBEZ j/KxOySV1h8//pT4TAJZwM4XqfhtOb5m3/l7tdNv+vhrIiSyvkesO4Z3DMRzEgdH nG+D4l7lN9hUSdPvPv/wyULpJpH5Pt9XygKO5/dJcdvP1k5y0QBMV1gzmQ/wd3+a 70f8SP3qrm8OUunErQohuAtPS9vY6z+SdDiYcLtjKTW8yZV1SXqPYlnkmxH8mF8I TmK46ObyaLeiP8/nj6VRxF7WImtVplUW -----END CERTIFICATE-----Generated at Sat Aug 23 21:31:18 2025 by rpki-client