$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft File: RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json) Hash identifier: MIB4ey5mxfRYoZIRhu89fEcvRn7v51CHt3UqfBtaA08= Subject key identifier: CA:3C:F6:AF:A8:3B:83:C3:1D:79:09:25:F7:28:7E:7F:AD:C7:59:A3 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 36C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft Manifest number: 3565 Signing time: Mon 09 Jun 2025 05:13:25 +0000 Manifest this update: Mon 09 Jun 2025 05:13:25 +0000 Manifest next update: Mon 16 Jun 2025 05:13:25 +0000 Files and hashes: 1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: wlPkzzeDIzfKRsJgGB/KW2db5NYdSEyDMwiCo3SHm+k=) 2: B945666A66B111EEA69EB059C4F9AE02.roa (hash: P1e6T3fUvsOYCEl6lkzY5SukytZoDguqwb/uoxZkVKM=) 3: 75215386652A11EF8B5EB953C4F9AE02.roa (hash: VsF6mP7a/GSIQ7I2UEu/NtkZYfH3IqoObHXoyPSC370=) 4: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: cYsL4Km2z8/eLaDdJuE1fTn6jNePayD7xyunTnEo6lY=) 5: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: 27QhH8i/0gJ0//H+2ptMZ+EyBceS5sMbMIEu659I9v8=) 6: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=) 7: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: iLCML5NbSaRD8kDEAs93AJjB8u+iJHUDcG8J2vYU9sc=) 8: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=) 9: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: 6u5sB+7YNxVl5C/ghTigw0xTKib22IuiJgBkqwdLCcY=) 10: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=) 11: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=) 12: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: ZMSUrNWda6eAQ2y1dpcUsswV5gNptYXhl2o3730ebpY=) 13: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: bHeA3qoZ4lZQSCkiwi56f/mMODdImMmOLthfvH5JELs=) 14: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: AB7ONpZx9XVpWPf/ZL1Zkpp0nWBsAXZmnaIKchQVfSQ=) 15: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=) 16: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I=) 17: 7179245C619311EE9B52D046C4F9AE02.roa (hash: UNWWiixe7D0hC7+k0ni4RN//93pBfhiLfmqDqnPNyLE=) 18: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=) 19: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=) 20: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: bQNKNVtSrkbmOTLrcZePdZ/lpfvMrtslhHEI0z5+rM0=) 21: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: UOFsEyRUeoUA0A9/Nio2knAXvgMc2yvIGUft0ltmKhI=) 22: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: RZl2cb5dn6ASnfAVKfz/IPxBU98j/kEEE2Beq2zR6Oc=) 23: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA=) 24: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: rvY+LkMKAD7I9F4fJqFK4vOJYN8p/UI2Ku0scGCRPiA=) 25: 37E946F4902C11EA898EFD7FC4F9AE02.roa (hash: k5hwToFGF2YVUVlYfpHmB3V0k3Woizg0namGJUOkl9g=) 26: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: pCZkPuBFHsSu/4sLLOtoITD4qq/HQqQZRN16R/bkpiU=) 27: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: Abn6jVylboaSLiKBPnyzjN9v9cXF+QhNGF8xH9KRXC8=) 28: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: ViLxILuMa3CBIFauG3NtJHg9AZOzslFDPDkZtOMmV6c=) 29: 768DCAE644F011F08D9BD52EC4F9AE02.roa (hash: 3woP0mi89S9xUVM3PcEM1yp5u9cLdzIuYHf0wfEgnY0=) 30: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: 11TByYSsblneUXhUk+j5cqeZWCsrnJ0LEBcJaF4T/h8=) 31: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: 8Vt0vedoklkslOnz2Z1wL8KgTgWALQ+K4RanzdNW1jE=) 32: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: 1v/FDo+782n5aBhE9sC6RKfy+7DKw89dbwb0xEns3Bg=) 33: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: hipDqtuA6tKa/DovXP31v3QUE5kTEzKq8fl//VHu/GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 04:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14017 (0x36c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Jun 9 05:13:25 2025 GMT Not After : Jun 16 05:13:25 2025 GMT Subject: CN=68466d75-f511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:8b:1a:2b:24:9b:9e:e2:dd:d1:52:48:05: 08:59:ab:a2:42:c5:c4:6d:89:ee:0d:e0:1d:6a:9e: dd:31:d6:a8:b1:1a:e5:66:fa:df:55:37:a0:52:1d: 6b:39:25:18:73:40:c6:da:c2:a7:99:2e:d6:2b:64: 2a:09:7d:1f:4b:b4:01:46:48:a3:c6:69:f0:2f:10: 32:92:67:64:f8:69:ad:f8:83:de:47:bb:ac:cc:98: d3:69:6a:65:fa:23:24:c1:34:b9:bf:51:0e:35:07: f4:7f:77:f7:bb:5e:65:c5:e2:a0:47:74:9b:c9:14: 6d:ed:43:35:47:dc:b3:06:fb:08:48:5e:88:5e:78: 55:9d:b4:71:6b:83:5b:fb:f9:54:47:e1:ca:27:f5: 0d:2c:b1:87:52:66:ce:3f:93:0d:91:5e:d1:7a:d5: e8:8b:e5:48:74:df:c6:45:d6:e5:47:95:f7:8c:3e: 8a:89:97:ea:6c:d7:4d:cf:49:4f:86:80:ff:cc:c3: b9:f8:18:69:80:49:16:65:52:f2:b9:3f:79:6c:7a: 91:b5:78:8d:32:28:4a:6d:e5:7c:38:06:6f:c6:0d: 19:5f:d9:a7:09:c0:54:f1:ad:8a:1d:a0:78:d9:ce: 92:54:89:c7:de:d1:1f:b1:3d:e9:49:65:2f:4d:41: 9f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3C:F6:AF:A8:3B:83:C3:1D:79:09:25:F7:28:7E:7F:AD:C7:59:A3 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:f6:a1:18:36:2b:12:86:ea:3c:7f:55:0b:a4:d2:5c:1b:cd: 6c:70:9c:8c:bc:ae:f9:54:32:3e:22:d1:ae:91:c5:85:05:da: 08:9e:fc:7c:cb:5e:b5:c5:a3:20:52:d7:0b:90:a6:bd:4c:03: e8:c0:7b:55:c8:39:54:3d:73:1f:92:41:04:f5:11:1b:a2:f5: ca:86:b8:50:e0:3f:2e:57:79:1a:bd:09:d9:86:ad:00:73:55: 2e:13:41:49:50:21:cb:5b:ae:15:50:e5:74:89:1b:2d:c0:5c: a8:90:d2:25:63:ac:82:c1:22:65:a3:20:05:4b:94:64:03:55: ed:cd:8d:fc:aa:5c:6a:57:12:3a:3e:3e:2a:54:92:58:22:7c: 7e:7a:fe:60:27:4b:18:e6:a3:e4:d5:40:84:b7:38:93:26:1e: 12:81:0e:91:9b:c4:37:12:dc:6c:02:22:5a:9d:ce:59:d7:61: 49:d5:04:db:24:16:61:d1:64:5c:a5:42:38:33:27:d9:f8:78: e9:d5:0e:7a:d4:9b:26:7b:4c:f6:fb:dd:f0:71:c9:4c:47:b5: ba:31:15:4b:28:ec:78:f0:9c:ab:cb:90:c0:c7:a2:1e:b8:71: 08:ff:91:06:d2:4a:f7:bc:73:21:f9:f5:55:a2:a0:9a:4a:4f: 94:f1:dc:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjUwNjA5MDUxMzI1WhcNMjUwNjE2MDUxMzI1WjAYMRYwFAYD VQQDEw02ODQ2NmQ3NS1mNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQqLGiskm57i3dFSSAUIWauiQsXEbYnuDeAdap7dMdaosRrlZvrfVTegUh1r OSUYc0DG2sKnmS7WK2QqCX0fS7QBRkijxmnwLxAykmdk+Gmt+IPeR7uszJjTaWpl +iMkwTS5v1EONQf0f3f3u15lxeKgR3SbyRRt7UM1R9yzBvsISF6IXnhVnbRxa4Nb +/lUR+HKJ/UNLLGHUmbOP5MNkV7RetXoi+VIdN/GRdblR5X3jD6KiZfqbNdNz0lP hoD/zMO5+BhpgEkWZVLyuT95bHqRtXiNMihKbeV8OAZvxg0ZX9mnCcBU8a2KHaB4 2c6SVInH3tEfsT3pSWUvTUGftwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMo89q+o O4PDHXkJJfcofn+tx1mjMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC29qEYNisShuo8f1ULpNJcG81scJyMvK75VDI+ItGukcWFBdoInvx8 y161xaMgUtcLkKa9TAPowHtVyDlUPXMfkkEE9REbovXKhrhQ4D8uV3kavQnZhq0A c1UuE0FJUCHLW64VUOV0iRstwFyokNIlY6yCwSJloyAFS5RkA1XtzY38qlxqVxI6 Pj4qVJJYInx+ev5gJ0sY5qPk1UCEtziTJh4SgQ6Rm8Q3EtxsAiJanc5Z12FJ1QTb JBZh0WRcpUI4MyfZ+Hjp1Q561Jsme0z2+93wcclMR7W6MRVLKOx48Jyry5DAx6Ie uHEI/5EG0kr3vHMh+fVVoqCaSk+U8dxn -----END CERTIFICATE-----Generated at Mon Jun 9 07:38:53 2025 by rpki-client