$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft File: RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json) Hash identifier: jkKCinF8h+U6DXLOinmIrDUmM3NJMZifvCmwqZBaakI= Subject key identifier: 81:39:AB:45:17:76:C7:ED:E3:2D:CC:33:6D:CB:D3:56:EF:1A:F3:89 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 36ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft Manifest number: 358C Signing time: Fri 08 Aug 2025 14:20:42 +0000 Manifest this update: Fri 08 Aug 2025 14:20:42 +0000 Manifest next update: Fri 15 Aug 2025 14:20:42 +0000 Files and hashes: 1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: FKihtTWfmBlTPgUBPZCU9opCAhVEKkdNS7XoygphN6U=) 2: 8ECE13F244FC11F08FADF180C4F9AE02.roa (hash: Wqmw9k2tUUV+JpUW2UkJgSyC1pP6oE8rtXQ0CSxbtRk=) 3: B945666A66B111EEA69EB059C4F9AE02.roa (hash: P1e6T3fUvsOYCEl6lkzY5SukytZoDguqwb/uoxZkVKM=) 4: 75215386652A11EF8B5EB953C4F9AE02.roa (hash: VsF6mP7a/GSIQ7I2UEu/NtkZYfH3IqoObHXoyPSC370=) 5: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: cYsL4Km2z8/eLaDdJuE1fTn6jNePayD7xyunTnEo6lY=) 6: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: 27QhH8i/0gJ0//H+2ptMZ+EyBceS5sMbMIEu659I9v8=) 7: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=) 8: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: iLCML5NbSaRD8kDEAs93AJjB8u+iJHUDcG8J2vYU9sc=) 9: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=) 10: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: 6u5sB+7YNxVl5C/ghTigw0xTKib22IuiJgBkqwdLCcY=) 11: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=) 12: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=) 13: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: ZMSUrNWda6eAQ2y1dpcUsswV5gNptYXhl2o3730ebpY=) 14: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: bHeA3qoZ4lZQSCkiwi56f/mMODdImMmOLthfvH5JELs=) 15: 7179245C619311EE9B52D046C4F9AE02.roa (hash: OIoiXK5HUidUkMvfbT28pcn/cDbn540RgN8Pi5zH+4Y=) 16: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: AB7ONpZx9XVpWPf/ZL1Zkpp0nWBsAXZmnaIKchQVfSQ=) 17: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=) 18: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I=) 19: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=) 20: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=) 21: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: bQNKNVtSrkbmOTLrcZePdZ/lpfvMrtslhHEI0z5+rM0=) 22: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: UOFsEyRUeoUA0A9/Nio2knAXvgMc2yvIGUft0ltmKhI=) 23: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: RZl2cb5dn6ASnfAVKfz/IPxBU98j/kEEE2Beq2zR6Oc=) 24: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA=) 25: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: rvY+LkMKAD7I9F4fJqFK4vOJYN8p/UI2Ku0scGCRPiA=) 26: 37E946F4902C11EA898EFD7FC4F9AE02.roa (hash: k5hwToFGF2YVUVlYfpHmB3V0k3Woizg0namGJUOkl9g=) 27: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: pCZkPuBFHsSu/4sLLOtoITD4qq/HQqQZRN16R/bkpiU=) 28: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: Abn6jVylboaSLiKBPnyzjN9v9cXF+QhNGF8xH9KRXC8=) 29: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: ViLxILuMa3CBIFauG3NtJHg9AZOzslFDPDkZtOMmV6c=) 30: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: 11TByYSsblneUXhUk+j5cqeZWCsrnJ0LEBcJaF4T/h8=) 31: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: 8Vt0vedoklkslOnz2Z1wL8KgTgWALQ+K4RanzdNW1jE=) 32: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: 1v/FDo+782n5aBhE9sC6RKfy+7DKw89dbwb0xEns3Bg=) 33: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: hipDqtuA6tKa/DovXP31v3QUE5kTEzKq8fl//VHu/GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14061 (0x36ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Aug 8 14:20:42 2025 GMT Not After : Aug 15 14:20:42 2025 GMT Subject: CN=689607ba-aee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:84:76:9b:f5:b4:18:10:09:8c:91:4a:c0: 51:a3:be:e6:05:4d:ea:96:6e:19:3c:79:de:56:7c: 8f:8f:ed:3a:c2:f2:61:47:d1:5f:76:ef:42:d1:da: c1:9a:cc:78:1f:75:85:ab:be:75:b5:34:84:cd:f6: 2b:3d:d5:06:ea:dd:95:f1:55:6a:40:f0:fd:ce:62: 18:8c:b1:64:5f:8b:5d:75:7b:56:80:10:17:57:57: 4a:26:1e:fb:44:af:06:33:ff:c2:bf:61:b0:7b:c6: b9:b9:e1:2f:8b:94:54:75:10:b7:83:a3:11:1b:3c: 9f:fc:a9:a8:02:dc:69:bd:c7:3e:54:ea:cc:52:e2: ee:12:d4:87:21:21:09:e9:84:fa:87:a8:f5:5d:1a: 9a:fe:1d:7d:66:f2:ef:e6:da:83:2e:2c:e9:02:eb: e6:38:e6:51:1d:41:2c:49:b1:b3:6c:9c:d1:43:7b: 5f:2c:93:13:a8:fe:2f:dc:48:4d:c6:5d:39:6d:6a: c7:22:2a:fd:a1:4a:9f:fd:a2:b0:44:fd:9d:2d:21: d4:bf:d1:f7:c2:ef:10:f9:69:9e:77:96:f3:93:d5: f4:06:b1:0a:3e:c9:c6:a8:19:f0:4a:7d:39:7e:7a: df:23:0a:d1:05:ed:a5:65:08:6a:01:a0:33:0a:1d: 28:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:39:AB:45:17:76:C7:ED:E3:2D:CC:33:6D:CB:D3:56:EF:1A:F3:89 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:b8:27:b8:d1:4f:3b:83:fe:1d:77:f8:be:54:eb:e2:1e:6f: 8f:0f:6e:f0:b6:b4:fe:d0:ff:62:a4:32:15:7d:1d:51:02:cb: 23:d6:fa:5f:89:4f:7d:72:92:34:a8:1c:e5:69:94:fe:7d:33: d3:2a:dd:d4:cd:95:79:81:31:34:35:96:1f:a2:6c:54:db:df: 6d:f4:a8:a4:e6:6a:6c:cd:87:50:ab:8f:e4:1b:6e:82:e3:9d: 2a:d2:56:2d:cb:68:8b:66:40:f8:ad:bb:36:68:08:81:fb:99: c5:ad:83:aa:73:06:8f:ec:92:bc:43:ad:3d:81:b4:94:7b:f4: b7:54:e3:22:06:63:d8:52:66:fb:93:b8:a7:37:9a:f3:1d:dc: c9:7c:ef:18:19:df:62:bf:98:7b:dd:a6:d1:be:cc:33:b7:ba: 30:cd:43:d7:53:de:f0:03:d2:7f:a8:de:ce:ab:8a:c7:86:48: 20:56:18:49:3b:cc:d1:b3:ff:58:d2:65:a1:2e:d0:42:cf:92: 86:34:bc:15:dc:ac:de:e0:89:c8:25:bc:f0:6e:fb:fe:db:ad: 14:1a:12:2e:ab:72:10:ee:62:6a:37:14:9c:9e:7a:26:a7:c0: 46:72:db:a6:09:ea:f8:85:8d:df:23:83:4f:64:83:de:53:5c: c7:07:87:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjUwODA4MTQyMDQyWhcNMjUwODE1MTQyMDQyWjAYMRYwFAYD VQQDEw02ODk2MDdiYS1hZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmyEdpv1tBgQCYyRSsBRo77mBU3qlm4ZPHneVnyPj+06wvJhR9Ffdu9C0drB msx4H3WFq751tTSEzfYrPdUG6t2V8VVqQPD9zmIYjLFkX4tddXtWgBAXV1dKJh77 RK8GM//Cv2Gwe8a5ueEvi5RUdRC3g6MRGzyf/KmoAtxpvcc+VOrMUuLuEtSHISEJ 6YT6h6j1XRqa/h19ZvLv5tqDLizpAuvmOOZRHUEsSbGzbJzRQ3tfLJMTqP4v3EhN xl05bWrHIir9oUqf/aKwRP2dLSHUv9H3wu8Q+Wmed5bzk9X0BrEKPsnGqBnwSn05 fnrfIwrRBe2lZQhqAaAzCh0osQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIE5q0UX dsft4y3MM23L01bvGvOJMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBluCe40U87g/4dd/i+VOviHm+PD27wtrT+0P9ipDIVfR1RAssj1vpf iU99cpI0qBzlaZT+fTPTKt3UzZV5gTE0NZYfomxU299t9Kik5mpszYdQq4/kG26C 450q0lYty2iLZkD4rbs2aAiB+5nFrYOqcwaP7JK8Q609gbSUe/S3VOMiBmPYUmb7 k7inN5rzHdzJfO8YGd9iv5h73abRvswzt7owzUPXU97wA9J/qN7Oq4rHhkggVhhJ O8zRs/9Y0mWhLtBCz5KGNLwV3Kze4InIJbzwbvv+260UGhIuq3IQ7mJqNxScnnom p8BGctumCer4hY3fI4NPZIPeU1zHB4cl -----END CERTIFICATE-----Generated at Sat Aug 9 23:23:14 2025 by rpki-client