$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft File: RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json) Hash identifier: UZa66hILGbdNVApLQJ8Uwx8QU3AdtGjdOgASfzAUHO8= Subject key identifier: 57:5E:1D:18:6C:50:09:65:B6:07:F2:61:4F:EB:72:4D:51:B5:6E:B4 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 36E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft Manifest number: 3584 Signing time: Thu 24 Jul 2025 14:20:48 +0000 Manifest this update: Thu 24 Jul 2025 14:20:47 +0000 Manifest next update: Thu 31 Jul 2025 14:20:47 +0000 Files and hashes: 1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: auPRJITs7UNZTJwubQD6syH9uwD1aJtOGsg9jz9FuzY=) 2: 8ECE13F244FC11F08FADF180C4F9AE02.roa (hash: Wqmw9k2tUUV+JpUW2UkJgSyC1pP6oE8rtXQ0CSxbtRk=) 3: B945666A66B111EEA69EB059C4F9AE02.roa (hash: P1e6T3fUvsOYCEl6lkzY5SukytZoDguqwb/uoxZkVKM=) 4: 75215386652A11EF8B5EB953C4F9AE02.roa (hash: VsF6mP7a/GSIQ7I2UEu/NtkZYfH3IqoObHXoyPSC370=) 5: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: cYsL4Km2z8/eLaDdJuE1fTn6jNePayD7xyunTnEo6lY=) 6: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: 27QhH8i/0gJ0//H+2ptMZ+EyBceS5sMbMIEu659I9v8=) 7: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=) 8: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: iLCML5NbSaRD8kDEAs93AJjB8u+iJHUDcG8J2vYU9sc=) 9: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=) 10: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: 6u5sB+7YNxVl5C/ghTigw0xTKib22IuiJgBkqwdLCcY=) 11: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=) 12: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=) 13: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: ZMSUrNWda6eAQ2y1dpcUsswV5gNptYXhl2o3730ebpY=) 14: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: bHeA3qoZ4lZQSCkiwi56f/mMODdImMmOLthfvH5JELs=) 15: 7179245C619311EE9B52D046C4F9AE02.roa (hash: OIoiXK5HUidUkMvfbT28pcn/cDbn540RgN8Pi5zH+4Y=) 16: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: AB7ONpZx9XVpWPf/ZL1Zkpp0nWBsAXZmnaIKchQVfSQ=) 17: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=) 18: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I=) 19: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=) 20: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=) 21: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: bQNKNVtSrkbmOTLrcZePdZ/lpfvMrtslhHEI0z5+rM0=) 22: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: UOFsEyRUeoUA0A9/Nio2knAXvgMc2yvIGUft0ltmKhI=) 23: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: RZl2cb5dn6ASnfAVKfz/IPxBU98j/kEEE2Beq2zR6Oc=) 24: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA=) 25: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: rvY+LkMKAD7I9F4fJqFK4vOJYN8p/UI2Ku0scGCRPiA=) 26: 37E946F4902C11EA898EFD7FC4F9AE02.roa (hash: k5hwToFGF2YVUVlYfpHmB3V0k3Woizg0namGJUOkl9g=) 27: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: pCZkPuBFHsSu/4sLLOtoITD4qq/HQqQZRN16R/bkpiU=) 28: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: Abn6jVylboaSLiKBPnyzjN9v9cXF+QhNGF8xH9KRXC8=) 29: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: ViLxILuMa3CBIFauG3NtJHg9AZOzslFDPDkZtOMmV6c=) 30: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: 11TByYSsblneUXhUk+j5cqeZWCsrnJ0LEBcJaF4T/h8=) 31: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: 8Vt0vedoklkslOnz2Z1wL8KgTgWALQ+K4RanzdNW1jE=) 32: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: 1v/FDo+782n5aBhE9sC6RKfy+7DKw89dbwb0xEns3Bg=) 33: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: hipDqtuA6tKa/DovXP31v3QUE5kTEzKq8fl//VHu/GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 14:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14053 (0x36e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Jul 24 14:20:47 2025 GMT Not After : Jul 31 14:20:47 2025 GMT Subject: CN=68824140-a0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:55:ac:9a:82:1f:c9:d2:f4:1b:df:76:41: b3:fe:33:21:45:19:c9:55:3a:15:a5:a6:97:46:22: 7e:a3:64:3b:c8:a9:47:97:7e:53:37:ce:4e:62:56: 84:de:3a:f1:82:c0:c4:88:c1:01:6b:9d:1f:12:a5: 81:b1:b6:1a:29:bd:c3:94:1e:00:ec:56:14:04:00: b6:b8:d1:a4:c7:60:4c:f6:0a:ec:55:17:85:4a:35: 8c:0e:74:32:38:f3:18:f7:6e:30:b2:d2:87:36:80: 8f:14:2b:a5:b9:de:01:06:61:e7:d3:5a:d8:4e:36: 33:c5:3a:62:a2:6f:0f:8d:4e:13:e5:4e:af:5c:03: 7e:f0:70:1a:f0:d1:8e:7f:c9:bf:73:3b:89:01:75: 82:88:f4:78:cb:f8:24:7e:e2:de:2a:85:aa:6e:69: c9:44:a2:8b:5d:9f:0e:56:b7:48:29:4f:30:3d:ad: 60:49:f7:b0:b2:b7:c6:e3:fc:cd:fb:4c:79:d2:d8: 0a:51:70:6c:84:25:2f:86:6b:17:5f:36:7a:4c:27: f2:bc:80:34:be:fc:69:45:8a:5f:38:8e:d6:0f:f1: 59:cf:99:a5:0c:95:1f:b8:23:2a:89:d1:e7:31:8f: f3:23:32:af:b2:3a:3c:cb:76:35:b2:42:72:e9:ac: aa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5E:1D:18:6C:50:09:65:B6:07:F2:61:4F:EB:72:4D:51:B5:6E:B4 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:5d:7d:38:18:a3:24:48:f8:a7:d1:e9:e1:0f:9f:9c:9b:d4: da:c7:19:54:ed:fd:77:bf:61:4a:5f:b1:6b:c9:06:14:2d:16: 25:5b:d5:86:c7:de:19:b9:3d:5b:be:e9:55:61:1b:c8:65:d9: 55:e7:25:22:e9:40:23:eb:a9:6c:aa:cd:b7:99:99:68:a9:80: a5:67:06:6d:34:32:9a:03:5c:79:b0:65:e6:46:12:5b:f1:1c: b9:b6:f6:58:58:51:ec:ce:e6:ae:eb:bb:e7:db:85:e5:83:f3: ca:7f:e8:1b:c4:ca:94:77:0f:91:96:5d:ee:df:a9:2e:ef:de: 7a:5a:d3:a6:cc:a8:02:e9:e1:f7:54:4d:21:dc:23:15:36:80: ea:8a:a8:f3:55:69:49:9d:45:15:51:3b:ba:2c:18:08:05:24: 93:57:a3:0d:06:58:7e:e6:a6:b4:0f:9a:f9:00:77:5d:93:3d: 12:a4:02:fe:2c:3b:e8:45:d2:3d:b3:e5:f9:26:4f:f0:42:9a: f3:09:8c:11:ad:ce:71:fd:72:c2:e6:a6:c3:a6:39:58:16:78: 7b:a3:23:74:c5:8d:5f:e1:08:bd:af:3a:58:f5:ca:e4:7e:8a: 40:2d:89:af:85:0b:e6:be:ae:5e:7a:e5:9d:7a:73:d1:e4:f3: 3e:e0:0f:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjUwNzI0MTQyMDQ3WhcNMjUwNzMxMTQyMDQ3WjAYMRYwFAYD VQQDEw02ODgyNDE0MC1hMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtihVrJqCH8nS9BvfdkGz/jMhRRnJVToVpaaXRiJ+o2Q7yKlHl35TN85OYlaE 3jrxgsDEiMEBa50fEqWBsbYaKb3DlB4A7FYUBAC2uNGkx2BM9grsVReFSjWMDnQy OPMY924wstKHNoCPFCulud4BBmHn01rYTjYzxTpiom8PjU4T5U6vXAN+8HAa8NGO f8m/czuJAXWCiPR4y/gkfuLeKoWqbmnJRKKLXZ8OVrdIKU8wPa1gSfewsrfG4/zN +0x50tgKUXBshCUvhmsXXzZ6TCfyvIA0vvxpRYpfOI7WD/FZz5mlDJUfuCMqidHn MY/zIzKvsjo8y3Y1skJy6ayq/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdeHRhs UAlltgfyYU/rck1RtW60MB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbXX04GKMkSPin0enhD5+cm9TaxxlU7f13v2FKX7FryQYULRYlW9WG x94ZuT1bvulVYRvIZdlV5yUi6UAj66lsqs23mZloqYClZwZtNDKaA1x5sGXmRhJb 8Ry5tvZYWFHszuau67vn24Xlg/PKf+gbxMqUdw+Rll3u36ku7956WtOmzKgC6eH3 VE0h3CMVNoDqiqjzVWlJnUUVUTu6LBgIBSSTV6MNBlh+5qa0D5r5AHddkz0SpAL+ LDvoRdI9s+X5Jk/wQprzCYwRrc5x/XLC5qbDpjlYFnh7oyN0xY1f4Qi9rzpY9crk fopALYmvhQvmvq5eeuWdenPR5PM+4A91 -----END CERTIFICATE-----Generated at Thu Jul 24 17:24:13 2025 by rpki-client