$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft File: RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json) Hash identifier: fv5qUctCp7htubPREKC12U16lC3emqR2CPZf0wzriwE= Subject key identifier: 32:90:2B:B6:C1:06:89:ED:F9:A1:30:54:63:87:E0:7A:BE:2C:C1:40 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 3629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft Manifest number: 34F4 Signing time: Wed 20 Nov 2024 14:20:26 +0000 Manifest this update: Wed 20 Nov 2024 14:20:25 +0000 Manifest next update: Wed 27 Nov 2024 14:20:25 +0000 Files and hashes: 1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: OOC8G08JWbmT2DeS9gdaFwbGURh65AEjBX2fsbTZlS4=) 2: B945666A66B111EEA69EB059C4F9AE02.roa (hash: ug4SEhvnAqbSYEe7ct15W9ugaJNCA2I1XU9Vd+d4qYI=) 3: 75215386652A11EF8B5EB953C4F9AE02.roa (hash: WF+5/xSk7aAScfl8CQWV0tzYbpHw8lIJYFyutoL+8cE=) 4: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: 0D2J+yy/ZB7evN4kCddzHgznLBt8DCOMI3Kv6JAIPGE=) 5: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: Wu1/IYLojPRNTANVKAdnUNwPWyOv0pzlQsxpke9jvTI=) 6: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: PaXTXpKBx9czLyVK9oTxpyG5GB4Ul44qFB3bGHyXRlg=) 7: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: W8rKPjq3K/VStCMYuKznPuXRhYh6gAlFaPS1tobcayE=) 8: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: xjLVvucx6vcVI0+/P6AL7ptJJFqY1vehjG2K8ApiOdc=) 9: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: EEdiqlF5LyBURSlyGDjt41p0t+kkRfIEuBc7ozomb5o=) 10: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: 8ezjvNGPNVkBOzZ+tkqGf4bevWhfZT2qEeGrqaydZrU=) 11: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: LIygJtJjRy9fnfq0E41kIc5c0xvln9j0hSvmWFTLJFA=) 12: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: EzGY30ffNSV3pN4XkB0z8vAXkybeBdeg++jxV/8105w=) 13: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: GP8lqrReYXIV3gUufw5Ei/fnvPj5Z7P+4RCKds9htH4=) 14: 7179245C619311EE9B52D046C4F9AE02.roa (hash: Y1dD7Hyfz3+BQ+HLRjRjkSHQG2zSWujIhASWyInDvd8=) 15: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: aVlhd+SLqMiKEArNYyT/S3eMcejLnoNJt4t624dsjBs=) 16: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: u3LgYtUZlz6BUBYFQnQYN2jVKVWcEC+l6vlIIyry9uQ=) 17: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: GZh862EjjtthTDx/PnjrUba63UqYNzB50ODtJVo7bnM=) 18: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: SC5b+j4gDvIxAfn7xGaASJC49UUNnMEnAu2E4Ze5Wqs=) 19: F862EC324E2311EF82ED4457C4F9AE02.roa (hash: 2jwCZVjyIiDvni1YMPEP/m8xFiLXSATKdP985x1qfNs=) 20: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: 6IX/+C2tZiQdUnN0w59aYOh1xU/CY2fQLPnfgz7EsW4=) 21: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: XBPf4NH+a7dqiiYvf7DiFkG8apvnW8N9KNE+rdlqM8o=) 22: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: 6BUJ398DYxae+E4fooIIYkNzcIAYv4On9peI34/Pr+I=) 23: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: RNDFpMyb4OgClBEmtZgmujP2U/SAB9NFIFH9Ehnlx88=) 24: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: nrEqm9HZU0c/RvqP949b7KD5H0U+8J/rR/0Xw0WVZM0=) 25: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: eqYs/CfLdsQWS6a2nU5tic+qtbY5XcXRbl4XY/r8Xmo=) 26: 37E946F4902C11EA898EFD7FC4F9AE02.roa (hash: CMLCCIzsBanqa+mXioiJJ3Ky0LX3AuQ5O3QPOTYsWCk=) 27: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: WjPZcEzMz1YIAb5PmAqYhL22+pv6cqwje9rZzLqwcVo=) 28: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: 9KQKh8CJ7V7pqBlD1MLNAVC/6HrQaCC5g6O6l97gnaQ=) 29: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: 4+5V+vAoXiW+3NpEIdyHPyFGZS2Uwfw6CAOuxckQw5c=) 30: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: egfuYyMOERHpkG5Mv64t8Z9vudDLr2yjq+bP6aa/pUQ=) 31: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: KD566cDASC3kfUfuvVStVV18pZXzvNCHtUa05s/jUrA=) 32: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: o0Xzmzbz0xyjbqUATOIGkUtO8VdHsr23GjZ6H5xYJsI=) 33: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: YFEaA92UxHeNCe88zJx5kVnVSg46ocaX04iWT+IiiXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13865 (0x3629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Nov 20 14:20:25 2024 GMT Not After : Nov 27 14:20:25 2024 GMT Subject: CN=673df02a-562c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7e:01:4d:6c:eb:56:fc:b7:f8:48:9e:34:18: 4e:b7:fb:5f:4c:b0:38:86:5e:f6:b0:9e:1f:ba:0a: a4:88:be:c7:be:d8:3c:a3:4c:64:69:ec:7e:28:2f: d8:fe:bb:10:5b:6f:47:4d:99:94:ee:d3:d8:3f:57: f7:ea:d0:ad:a6:c0:c7:0d:e5:b9:b9:2b:15:4d:45: c2:f0:86:89:e4:7c:b7:d4:54:82:8b:bf:8e:79:eb: 14:f7:55:0c:b9:ff:92:58:43:58:2e:f8:72:a8:8d: 89:fc:d4:3e:b1:d0:6e:9b:b9:0b:3a:bd:14:d3:23: e6:a5:61:90:c5:cd:aa:63:e3:cc:cd:0f:ba:84:ad: 58:a6:5d:39:ac:a8:e5:26:ea:9c:35:10:99:9d:9e: 5c:d9:c6:4d:7d:e6:8e:28:b8:23:28:6f:02:f6:ab: 58:2c:5e:31:ec:2f:c1:2c:5d:fc:6c:f7:7b:61:bd: ef:be:f4:57:01:18:be:7e:59:b8:e1:ff:26:60:c9: 2e:02:9d:f7:d7:64:21:2d:31:45:0c:ce:67:d4:d5: 59:01:af:52:f1:d4:69:c0:c5:2b:07:e1:09:7e:4d: 43:d7:ca:71:d4:59:e2:0d:01:82:ea:87:07:4c:62: 05:dd:31:2e:c6:1d:aa:f5:cc:9c:ad:1f:e9:d5:10: b7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:90:2B:B6:C1:06:89:ED:F9:A1:30:54:63:87:E0:7A:BE:2C:C1:40 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ef:e9:32:ff:70:45:7f:6f:63:38:91:3b:b9:16:ae:bc:db: 19:a7:7f:74:ea:54:73:b4:f8:ac:8f:6e:26:8f:d7:21:b8:29: d7:d8:a3:c4:3a:8f:0a:cb:ad:22:ce:80:32:ff:15:a8:c1:4c: 61:7a:d2:e7:8b:0e:61:66:3a:24:a8:62:53:ce:f4:28:54:5d: 0e:9d:3c:d9:65:ec:e6:86:82:17:5c:a2:0c:55:77:68:8c:e0: 2d:9d:00:0c:67:eb:29:16:db:58:8f:53:16:06:6c:6e:18:96: 08:b7:a3:0a:f4:73:94:4e:f1:0e:89:78:44:d5:b0:85:e8:37: 32:c4:ab:39:b7:38:99:bb:27:c9:73:81:79:78:ea:c2:8a:d0: 59:e2:2f:4e:62:7a:fb:db:27:07:f6:a9:ea:58:98:7c:b6:05: 13:02:04:8a:7a:4f:49:3a:ad:d2:b9:c5:6e:88:29:9b:64:21: d3:1b:0a:28:41:26:44:86:40:34:3f:f7:70:d2:1c:79:a0:9b: d8:eb:ad:ae:67:30:9a:4b:0f:5b:91:d4:c9:47:f6:1c:03:32: 95:19:f8:68:aa:05:40:f1:3c:5c:60:df:53:d2:5d:6b:3c:85: fc:42:90:46:c3:9b:be:eb:01:77:83:fb:e1:68:14:25:60:c1: 27:8a:b3:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjQxMTIwMTQyMDI1WhcNMjQxMTI3MTQyMDI1WjAYMRYwFAYD VQQDEw02NzNkZjAyYS01NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5n4BTWzrVvy3+EieNBhOt/tfTLA4hl72sJ4fugqkiL7Hvtg8o0xkaex+KC/Y /rsQW29HTZmU7tPYP1f36tCtpsDHDeW5uSsVTUXC8IaJ5Hy31FSCi7+OeesU91UM uf+SWENYLvhyqI2J/NQ+sdBum7kLOr0U0yPmpWGQxc2qY+PMzQ+6hK1Ypl05rKjl JuqcNRCZnZ5c2cZNfeaOKLgjKG8C9qtYLF4x7C/BLF38bPd7Yb3vvvRXARi+flm4 4f8mYMkuAp3312QhLTFFDM5n1NVZAa9S8dRpwMUrB+EJfk1D18px1FniDQGC6ocH TGIF3TEuxh2q9cycrR/p1RC3awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKQK7bB Bont+aEwVGOH4Hq+LMFAMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK7+ky/3BFf29jOJE7uRauvNsZp3906lRztPisj24mj9chuCnX2KPE Oo8Ky60izoAy/xWowUxhetLniw5hZjokqGJTzvQoVF0OnTzZZezmhoIXXKIMVXdo jOAtnQAMZ+spFttYj1MWBmxuGJYIt6MK9HOUTvEOiXhE1bCF6DcyxKs5tziZuyfJ c4F5eOrCitBZ4i9OYnr72ycH9qnqWJh8tgUTAgSKek9JOq3SucVuiCmbZCHTGwoo QSZEhkA0P/dw0hx5oJvY662uZzCaSw9bkdTJR/YcAzKVGfhoqgVA8TxcYN9T0l1r PIX8QpBGw5u+6wF3g/vhaBQlYMEnirOZ -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:06 2024 by rpki-client on console-ams.rpki-client.org