$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft File: RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json) Hash identifier: xCk52xyZ9821pT1Tyj6606c25LEOs0t8i7npPJ4uCPM= Subject key identifier: 68:AB:C7:CB:D3:75:1D:91:85:14:B0:D8:34:B7:5A:58:86:BB:F9:CD Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 36A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft Manifest number: 3549 Signing time: Thu 24 Apr 2025 14:20:26 +0000 Manifest this update: Thu 24 Apr 2025 14:20:25 +0000 Manifest next update: Thu 01 May 2025 14:20:25 +0000 Files and hashes: 1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: F5+GITmVlUDrCkTuJyuDFnp+HdFvrhGz+5lMFCCHaSI=) 2: B945666A66B111EEA69EB059C4F9AE02.roa (hash: P1e6T3fUvsOYCEl6lkzY5SukytZoDguqwb/uoxZkVKM=) 3: 75215386652A11EF8B5EB953C4F9AE02.roa (hash: VsF6mP7a/GSIQ7I2UEu/NtkZYfH3IqoObHXoyPSC370=) 4: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: cYsL4Km2z8/eLaDdJuE1fTn6jNePayD7xyunTnEo6lY=) 5: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: 27QhH8i/0gJ0//H+2ptMZ+EyBceS5sMbMIEu659I9v8=) 6: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=) 7: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: iLCML5NbSaRD8kDEAs93AJjB8u+iJHUDcG8J2vYU9sc=) 8: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=) 9: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: 6u5sB+7YNxVl5C/ghTigw0xTKib22IuiJgBkqwdLCcY=) 10: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=) 11: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=) 12: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: ZMSUrNWda6eAQ2y1dpcUsswV5gNptYXhl2o3730ebpY=) 13: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: bHeA3qoZ4lZQSCkiwi56f/mMODdImMmOLthfvH5JELs=) 14: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: AB7ONpZx9XVpWPf/ZL1Zkpp0nWBsAXZmnaIKchQVfSQ=) 15: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=) 16: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I=) 17: 7179245C619311EE9B52D046C4F9AE02.roa (hash: UNWWiixe7D0hC7+k0ni4RN//93pBfhiLfmqDqnPNyLE=) 18: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=) 19: F862EC324E2311EF82ED4457C4F9AE02.roa (hash: KQkjxNzqPSCZ6/LFzFCTJ40N+JKFCc/EDksFhJTO7e0=) 20: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=) 21: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: 9PoXAO44TxKXmsPza4H+BeSPhhDx3DGw5cMzvt2XV6Q=) 22: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: UOFsEyRUeoUA0A9/Nio2knAXvgMc2yvIGUft0ltmKhI=) 23: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: RZl2cb5dn6ASnfAVKfz/IPxBU98j/kEEE2Beq2zR6Oc=) 24: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA=) 25: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: rvY+LkMKAD7I9F4fJqFK4vOJYN8p/UI2Ku0scGCRPiA=) 26: 37E946F4902C11EA898EFD7FC4F9AE02.roa (hash: k5hwToFGF2YVUVlYfpHmB3V0k3Woizg0namGJUOkl9g=) 27: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: pCZkPuBFHsSu/4sLLOtoITD4qq/HQqQZRN16R/bkpiU=) 28: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: Abn6jVylboaSLiKBPnyzjN9v9cXF+QhNGF8xH9KRXC8=) 29: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: ViLxILuMa3CBIFauG3NtJHg9AZOzslFDPDkZtOMmV6c=) 30: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: 11TByYSsblneUXhUk+j5cqeZWCsrnJ0LEBcJaF4T/h8=) 31: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: 8Vt0vedoklkslOnz2Z1wL8KgTgWALQ+K4RanzdNW1jE=) 32: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: 1v/FDo+782n5aBhE9sC6RKfy+7DKw89dbwb0xEns3Bg=) 33: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: hipDqtuA6tKa/DovXP31v3QUE5kTEzKq8fl//VHu/GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13984 (0x36a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Apr 24 14:20:25 2025 GMT Not After : May 1 14:20:25 2025 GMT Subject: CN=680a48a9-9323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:61:f5:8a:1c:35:34:c5:c3:28:ec:09:e3: 8f:c8:87:a5:c2:7c:7a:33:e6:7c:f1:f2:cb:7f:1c: 88:0b:ca:b2:69:ac:0a:91:37:50:c5:6a:ff:fe:fa: d9:f1:d5:d8:b5:fd:83:aa:4f:83:d1:a0:b2:9f:8b: 07:ec:f2:92:45:99:78:68:19:33:11:2c:f6:67:5d: 23:de:e2:32:35:c2:47:57:5a:32:dd:d3:fa:35:7d: 80:ec:fc:b2:f0:e0:a9:81:34:eb:43:94:d1:88:63: 03:c7:e3:0b:ae:fb:a4:fe:cf:f5:35:b0:9d:0c:d3: 89:4d:6d:50:c4:cb:87:8a:73:e6:95:94:81:99:d7: 92:d6:2d:c0:37:2a:e5:d3:4e:fb:37:96:5b:da:95: 50:38:bd:2d:15:b0:ab:37:72:9b:94:7f:e3:9b:ff: 5c:5c:c7:aa:ae:83:38:10:86:78:10:6e:c9:1b:d2: f5:05:c6:c9:c5:77:30:2c:ad:d7:6b:d1:ab:00:ee: 38:37:5b:db:28:8f:a2:e1:98:87:33:a2:c2:3a:7f: 65:9a:75:5f:e2:18:b1:34:3e:ad:bc:a8:38:b9:e0: 3d:67:6f:99:f1:a8:5c:5a:14:ee:b3:e4:f2:2c:69: 70:fc:8d:bc:24:34:d8:42:a7:4e:73:6c:7e:00:f6: 0f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AB:C7:CB:D3:75:1D:91:85:14:B0:D8:34:B7:5A:58:86:BB:F9:CD X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:81:a5:9f:ff:93:7c:55:e7:b8:b6:7a:af:b6:2e:20:de:3d: 24:b3:d9:ab:f6:d1:77:b6:0f:ef:92:23:8b:97:98:e4:a0:a8: 26:1b:b9:40:f6:0f:fa:93:f4:02:94:f2:54:bc:0a:bf:30:bb: d0:7f:51:b1:df:db:d6:35:23:b7:81:c7:c5:6c:ad:18:6b:45: 65:bb:c6:76:0b:1a:52:f7:fd:b7:bf:0e:47:6f:bd:dd:ea:cd: 5d:88:8f:11:ba:51:92:ce:65:07:8c:6f:5d:07:33:29:9a:10: 6a:61:48:04:3f:35:26:d4:d2:ba:29:be:0c:85:9a:d0:26:de: 31:bb:8c:ff:1f:ba:82:06:c5:90:6f:26:95:ef:99:50:81:be: e4:45:76:e3:d7:a8:ea:90:ed:b9:0d:94:8c:e1:35:3f:c1:3d: 35:7c:ea:e0:f6:52:2b:de:fc:12:fc:0e:4f:ba:10:ea:96:fa: 9d:d6:d0:f5:5a:21:83:f6:de:00:86:4b:6f:0a:3a:59:8c:df: c2:0b:da:bc:c0:ef:66:f4:8f:0a:5c:37:f2:2f:b4:f8:2d:12: 5d:ff:24:1b:a9:7a:01:e6:b4:5e:92:62:0b:03:9a:d0:53:70: 9f:2f:cc:0b:b5:3c:c6:3c:01:20:97:e1:6c:ad:9e:12:07:dd: 35:39:d5:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjUwNDI0MTQyMDI1WhcNMjUwNTAxMTQyMDI1WjAYMRYwFAYD VQQDEw02ODBhNDhhOS05MzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cxh9YocNTTFwyjsCeOPyIelwnx6M+Z88fLLfxyIC8qyaawKkTdQxWr//vrZ 8dXYtf2Dqk+D0aCyn4sH7PKSRZl4aBkzESz2Z10j3uIyNcJHV1oy3dP6NX2A7Pyy 8OCpgTTrQ5TRiGMDx+MLrvuk/s/1NbCdDNOJTW1QxMuHinPmlZSBmdeS1i3ANyrl 0077N5Zb2pVQOL0tFbCrN3KblH/jm/9cXMeqroM4EIZ4EG7JG9L1BcbJxXcwLK3X a9GrAO44N1vbKI+i4ZiHM6LCOn9lmnVf4hixND6tvKg4ueA9Z2+Z8ahcWhTus+Ty LGlw/I28JDTYQqdOc2x+APYPYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGirx8vT dR2RhRSw2DS3WliGu/nNMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLgaWf/5N8Vee4tnqvti4g3j0ks9mr9tF3tg/vkiOLl5jkoKgmG7lA 9g/6k/QClPJUvAq/MLvQf1Gx39vWNSO3gcfFbK0Ya0Vlu8Z2CxpS9/23vw5Hb73d 6s1diI8RulGSzmUHjG9dBzMpmhBqYUgEPzUm1NK6Kb4MhZrQJt4xu4z/H7qCBsWQ byaV75lQgb7kRXbj16jqkO25DZSM4TU/wT01fOrg9lIr3vwS/A5PuhDqlvqd1tD1 WiGD9t4AhktvCjpZjN/CC9q8wO9m9I8KXDfyL7T4LRJd/yQbqXoB5rRekmILA5rQ U3CfL8wLtTzGPAEgl+FsrZ4SB901OdXb -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:57 2025 by rpki-client