$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft File: RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json) Hash identifier: WmOUzr1mtvHNqi84zBkgQShgGtifiVldiDvbJpVW5Io= Subject key identifier: BE:BC:47:A1:B2:47:2C:BB:2F:7D:61:5E:72:B7:A0:15:14:6C:FF:BB Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 3697 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft Manifest number: 3540 Signing time: Sun 06 Apr 2025 14:20:25 +0000 Manifest this update: Sun 06 Apr 2025 14:20:24 +0000 Manifest next update: Sun 13 Apr 2025 14:20:24 +0000 Files and hashes: 1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: t9FgiDC93eGORMq2pO98StDm+4Hc5dVN8waqaBfBUy0=) 2: B945666A66B111EEA69EB059C4F9AE02.roa (hash: P1e6T3fUvsOYCEl6lkzY5SukytZoDguqwb/uoxZkVKM=) 3: 75215386652A11EF8B5EB953C4F9AE02.roa (hash: VsF6mP7a/GSIQ7I2UEu/NtkZYfH3IqoObHXoyPSC370=) 4: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: cYsL4Km2z8/eLaDdJuE1fTn6jNePayD7xyunTnEo6lY=) 5: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: 27QhH8i/0gJ0//H+2ptMZ+EyBceS5sMbMIEu659I9v8=) 6: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=) 7: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: iLCML5NbSaRD8kDEAs93AJjB8u+iJHUDcG8J2vYU9sc=) 8: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=) 9: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: 6u5sB+7YNxVl5C/ghTigw0xTKib22IuiJgBkqwdLCcY=) 10: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=) 11: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=) 12: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: ZMSUrNWda6eAQ2y1dpcUsswV5gNptYXhl2o3730ebpY=) 13: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: bHeA3qoZ4lZQSCkiwi56f/mMODdImMmOLthfvH5JELs=) 14: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: AB7ONpZx9XVpWPf/ZL1Zkpp0nWBsAXZmnaIKchQVfSQ=) 15: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=) 16: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I=) 17: 7179245C619311EE9B52D046C4F9AE02.roa (hash: UNWWiixe7D0hC7+k0ni4RN//93pBfhiLfmqDqnPNyLE=) 18: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=) 19: F862EC324E2311EF82ED4457C4F9AE02.roa (hash: KQkjxNzqPSCZ6/LFzFCTJ40N+JKFCc/EDksFhJTO7e0=) 20: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=) 21: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: 9PoXAO44TxKXmsPza4H+BeSPhhDx3DGw5cMzvt2XV6Q=) 22: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: UOFsEyRUeoUA0A9/Nio2knAXvgMc2yvIGUft0ltmKhI=) 23: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: RZl2cb5dn6ASnfAVKfz/IPxBU98j/kEEE2Beq2zR6Oc=) 24: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA=) 25: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: rvY+LkMKAD7I9F4fJqFK4vOJYN8p/UI2Ku0scGCRPiA=) 26: 37E946F4902C11EA898EFD7FC4F9AE02.roa (hash: k5hwToFGF2YVUVlYfpHmB3V0k3Woizg0namGJUOkl9g=) 27: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: pCZkPuBFHsSu/4sLLOtoITD4qq/HQqQZRN16R/bkpiU=) 28: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: Abn6jVylboaSLiKBPnyzjN9v9cXF+QhNGF8xH9KRXC8=) 29: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: ViLxILuMa3CBIFauG3NtJHg9AZOzslFDPDkZtOMmV6c=) 30: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: 11TByYSsblneUXhUk+j5cqeZWCsrnJ0LEBcJaF4T/h8=) 31: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: 8Vt0vedoklkslOnz2Z1wL8KgTgWALQ+K4RanzdNW1jE=) 32: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: 1v/FDo+782n5aBhE9sC6RKfy+7DKw89dbwb0xEns3Bg=) 33: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: hipDqtuA6tKa/DovXP31v3QUE5kTEzKq8fl//VHu/GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13975 (0x3697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475 Validity Not Before: Apr 6 14:20:24 2025 GMT Not After : Apr 13 14:20:24 2025 GMT Subject: CN=67f28da8-619b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:04:69:a0:89:2f:ef:a3:80:cc:51:0e:3b:39: ed:26:c0:52:b8:3a:c3:9b:0f:87:cf:02:d5:e0:68: 9c:a4:d8:3b:a0:4b:60:c6:40:3c:25:51:e3:fa:8b: a8:55:20:17:b7:f9:4d:fc:ed:4a:28:27:a4:7a:13: 85:48:b1:28:fc:99:ea:ed:f9:f8:e5:aa:f2:94:0c: d1:7c:99:aa:65:88:5b:46:29:47:1d:db:e5:f3:df: cb:6e:fe:d7:8c:0f:67:24:9b:ab:a2:9c:6d:e2:d1: 70:ea:3a:c8:73:c1:64:e6:39:03:18:e5:e3:5f:e4: a7:bf:ad:97:8f:60:55:67:5d:dd:34:94:42:e5:a0: cf:8f:50:3f:d2:43:67:12:80:e5:5a:5e:93:51:4a: fb:79:f2:b8:e0:54:0f:13:85:c5:9b:68:08:37:d7: 38:c1:4e:a4:b2:cf:31:12:73:d1:e9:2e:6f:f5:ad: 73:31:32:9f:1b:83:0b:17:3d:36:34:cc:c9:53:5d: e5:85:bf:39:7b:a1:ee:6d:01:3b:bb:a8:84:da:b1: c9:98:2c:4f:3f:c4:10:5c:c3:cc:96:7c:ff:b7:2b: 21:91:f2:2b:2f:4a:4c:fa:c0:60:60:03:3d:9b:01: 4d:ff:41:07:37:99:b9:ae:a1:21:0e:96:69:96:30: 67:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BC:47:A1:B2:47:2C:BB:2F:7D:61:5E:72:B7:A0:15:14:6C:FF:BB X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b7:fb:98:f4:dd:8f:6b:94:4b:99:17:bb:fd:a0:44:15:6b: d5:47:e5:0f:52:0c:f4:29:55:59:d6:00:cd:43:98:22:b5:51: 13:36:56:66:17:16:c5:09:37:87:cc:0a:03:a6:87:ec:a1:0d: 6f:18:d4:4e:68:72:91:71:c7:78:49:25:58:14:66:ef:81:a5: 79:b0:ba:bf:09:b1:29:78:b2:fd:14:02:28:73:2b:ac:9b:72: 61:2e:b2:12:ed:97:24:00:16:45:d1:fe:42:04:48:b8:81:a0: 30:32:48:10:5c:e5:f0:84:38:29:7d:99:7a:44:30:e8:cb:5e: 0a:09:fd:ac:41:02:da:85:a2:1b:8f:40:c1:28:73:e5:28:a4: b0:17:36:37:22:c6:3c:b8:9e:d7:61:56:57:9f:b2:2f:c5:e8: 4a:18:57:09:1c:39:96:82:87:d7:e1:0d:03:85:91:14:f9:52: ff:7d:d9:70:c1:dd:eb:55:52:52:e6:60:5e:4f:92:ca:a8:07: 6b:32:24:a8:2b:ad:90:95:83:fe:f5:3d:9b:be:1c:74:4e:b3: dd:80:cd:04:cb:d9:09:b0:04:ce:aa:12:e9:ed:56:8a:ca:6e: 6f:79:c7:25:c5:b3:02:7f:74:a9:76:26:01:43:39:e8:1a:a7: 0d:bc:53:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjUwNDA2MTQyMDI0WhcNMjUwNDEzMTQyMDI0WjAYMRYwFAYD VQQDEw02N2YyOGRhOC02MTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gRpoIkv76OAzFEOOzntJsBSuDrDmw+HzwLV4GicpNg7oEtgxkA8JVHj+ouo VSAXt/lN/O1KKCekehOFSLEo/Jnq7fn45arylAzRfJmqZYhbRilHHdvl89/Lbv7X jA9nJJuropxt4tFw6jrIc8Fk5jkDGOXjX+Snv62Xj2BVZ13dNJRC5aDPj1A/0kNn EoDlWl6TUUr7efK44FQPE4XFm2gIN9c4wU6kss8xEnPR6S5v9a1zMTKfG4MLFz02 NMzJU13lhb85e6HubQE7u6iE2rHJmCxPP8QQXMPMlnz/tyshkfIrL0pM+sBgYAM9 mwFN/0EHN5m5rqEhDpZpljBn8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL68R6Gy Ryy7L31hXnK3oBUUbP+7MB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbt/uY9N2Pa5RLmRe7/aBEFWvVR+UPUgz0KVVZ1gDNQ5gitVETNlZm FxbFCTeHzAoDpofsoQ1vGNROaHKRccd4SSVYFGbvgaV5sLq/CbEpeLL9FAIocyus m3JhLrIS7ZckABZF0f5CBEi4gaAwMkgQXOXwhDgpfZl6RDDoy14KCf2sQQLahaIb j0DBKHPlKKSwFzY3IsY8uJ7XYVZXn7IvxehKGFcJHDmWgofX4Q0DhZEU+VL/fdlw wd3rVVJS5mBeT5LKqAdrMiSoK62QlYP+9T2bvhx0TrPdgM0Ey9kJsATOqhLp7VaK ym5vecclxbMCf3SpdiYBQznoGqcNvFPK -----END CERTIFICATE-----Generated at Mon Apr 7 12:27:52 2025 by rpki-client