
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier: 4TMZzPwiywLsTlPVAvLAHrLgTc3xI0VtiRbgNPuyuJo=
Subject key identifier: ED:1A:88:80:D8:60:09:F4:30:9A:7C:F2:0A:22:75:0F:51:6F:48:BF
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 2643
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number: 234D
Signing time: Thu 26 Mar 2026 15:55:19 +0000
Manifest this update: Thu 26 Mar 2026 15:55:19 +0000
Manifest next update: Thu 02 Apr 2026 15:55:19 +0000
Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: ihC9OkfM36ZXSvN+O2h92FH1mPXpjZ5sUMLj/7M/ncA=)
2: DB8ED438DEFD11F0BBECA30E5A6F56BC.roa (hash: Td97IJTs5fi+L0xPELDn6EkZ7N7tszHykx+DVx2HMl4=)
3: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: xeXe0W9LGadlWUHbrq3B2ViS6+U7W91OTOihQY9/fWg=)
4: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: cIljgUX9u7LYo/eVcmfxQWxLdJQ7vsFk54U+nDFtBl4=)
5: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: gU89Q3UCcTfIuonWf4oM4J8bmG7V6fm6L0kNg0N/Yj8=)
6: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: 8ih8ohTFBlcOehmTFPg4QmBKSI75XqIdXYTzNP+mssw=)
7: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: dg5M28BM7Q9OSqEdMHsSLtI4cW3tbLsfo6oxRxnZkgU=)
8: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: THinSV3E5HHG0rxGiH9voTblutCDfr1lVuBD4GRI9cI=)
9: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: YhmFklQYNFuVzlZwVyl13/fVO2Rx5D3vIX4W/p/maYc=)
10: BA007060162D11EEB79F703CC4F9AE02.roa (hash: 2tT35KvgWT6eSD3SMEte/ai9jtMm9HHJLln3LtY/FIM=)
11: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: utZF48o+V1iqViyrul4ouJSJVWfTBOJgEF5i7OYCMAk=)
12: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: icqWlmP2zqUN+YwmSN6Rkge3B7PWW5GQPImLsSSVMmQ=)
13: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: +3uZuY7OlFyg2jsDB/Kz4JEWGg0yxvoM0a3nsJBXDX0=)
14: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: hrBe2Pa2BarjYurRPqX3BOavVRlDYYYGwxyR3VQWUl4=)
15: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: Tc0OP8h4p96K0lAWOjeLDMbCL1ZxKDKH+Zne0effYn4=)
16: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 0nUZjvvfEq+idlxORxZdIF54lHoOJDVXKimVebHznwY=)
17: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: NyTfYihU81GPEUaJYODhHs69mOq8Zj00EZITNDmiBc4=)
18: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: lcNCXN4ALK0VGFhT1zX6j/V2lOrX3RIWe+TEHrIIfGM=)
19: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: u5rpKj8Hh6LNPUmnAjTjSQjEw6FcWzoOU3Lk+UX8OeQ=)
20: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: s4JLvZfEEcVWrVTGXPW1vZiV5kDqzl4x/TrNjlyz8lg=)
21: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: Xj0L2cktFCj9AGPASACSNG1ar3gPj1CqHZie3Ff3N/Y=)
22: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: s40dhU8PVwSIJYyVny3a6mMwcd7oSGfD4g601KJOsFI=)
23: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: /zsZlwDj2pT6fAq7GkplNYrQROZ2c4fzOAUgQTDgsk4=)
24: AE6990E4113711F18890BBBD1E3D8C67.roa (hash: a2AxOHkbgl20ZHN2XKba/Ra2y+MObHNRcBGOU0PNrU0=)
25: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: 5aSuYQAxBrg4hpOCVUyocxVAo2M2ZMhQd9eXn7fmUUM=)
26: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: rI2XTb2R2MdCZIREOxF9HZq/Z6L/AhVI3hF8SVkg8es=)
27: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: 5zBpGvGX5c+RGNoV+CNfoI4jKn3SVtOSoGuIjJJwB/4=)
28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: ohZ0rNcC4o/lvqqhJ5dRQl2sFSNT+9W0ZljDeoeU/f8=)
29: 94C16496222811EF99153155C4F9AE02.roa (hash: IhQ1zSbXXf4rr1X3pECpva9uGFFRgEG7ArayUjxk3XY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9795 (0x2643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Mar 26 15:55:19 2026 GMT
Not After : Apr 2 15:55:19 2026 GMT
Subject: CN=69c556e7-d2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:97:00:2c:b2:8d:17:5c:90:f1:e9:d6:01:
b8:3c:76:a9:51:37:38:10:74:70:a0:e7:16:e6:f3:
79:00:97:ab:76:6f:13:fa:12:2f:c8:69:40:1f:51:
cf:47:cb:63:29:46:a5:7e:22:90:7e:6e:78:12:70:
f4:d7:58:ca:e7:e8:5d:ac:4c:6b:b0:e2:0f:2e:bf:
22:47:ee:db:68:41:ae:7d:ab:87:6d:80:57:6c:87:
1b:f6:10:86:83:0e:ed:cf:80:32:d9:83:bc:57:e1:
76:0d:77:40:90:42:90:cb:f2:5b:8f:20:00:b3:4a:
15:5b:93:18:2d:cd:b9:4a:1c:68:c2:a6:4b:4b:74:
53:a1:9d:49:e4:5f:73:9e:74:43:0b:b6:b2:32:f0:
13:1b:5e:ea:99:e4:cb:25:2f:0c:31:a6:18:ed:86:
30:38:9b:f0:81:1f:c1:53:2b:e1:26:a5:15:49:b3:
d9:0b:3e:13:de:15:80:af:19:2f:9f:60:05:86:33:
67:35:09:8a:63:28:6b:b6:5d:0b:40:55:de:9c:41:
5d:d3:39:16:d3:e2:f8:dd:95:e5:e0:32:c7:98:ed:
10:24:ba:a4:18:48:71:d5:d9:65:fa:57:ec:d8:90:
8f:1e:3f:c6:a0:9e:a3:be:28:f6:e9:df:0e:6c:bf:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1A:88:80:D8:60:09:F4:30:9A:7C:F2:0A:22:75:0F:51:6F:48:BF
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8a:ef:42:12:3e:c9:99:a7:c8:d5:f6:c9:75:2f:41:6c:50:
b0:9a:1a:f9:32:2e:11:99:72:a0:1e:6d:c3:02:d9:e5:ad:c0:
e1:f0:30:6a:b6:23:c5:04:4c:7b:d4:e1:c1:04:2f:7c:d1:ac:
33:6c:db:01:e6:ac:ac:c0:1b:4c:7d:04:d2:78:58:c2:c0:79:
3f:b4:58:18:f5:be:48:1d:b8:57:89:12:af:f3:87:21:6a:67:
b3:e4:04:67:d0:dc:03:a1:cc:d9:4b:bc:49:bd:30:7f:8a:1d:
6f:c1:05:c0:c2:58:31:8d:3e:96:dd:83:9d:79:69:1c:d0:73:
1e:41:4a:ca:f4:00:85:2f:22:ea:10:61:37:10:d9:e3:05:73:
2a:58:6a:eb:50:93:eb:84:1e:c6:50:d2:9f:fc:56:6d:4b:bf:
0e:ad:92:67:38:a5:a2:84:bb:69:92:d4:24:df:55:e6:2c:47:
1f:4f:c1:93:86:8e:6d:c8:95:60:a8:af:5e:e3:24:73:56:c0:
40:ee:e0:32:da:63:1a:bf:06:cc:86:28:47:2c:59:2c:74:21:
84:c2:97:11:a1:50:04:88:16:da:be:92:66:62:e7:4b:8b:29:
a5:62:53:42:25:5d:f3:53:ea:0a:07:29:fb:59:cf:e6:64:fe:
95:87:2a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:13 2026 by rpki-client