$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft File: RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json) Hash identifier: CstL5OWp8m3R0P12ePZsMW7O5wGE0jt5nr9IM2jtYwE= Subject key identifier: 1A:61:2F:F7:1E:81:22:56:C8:4F:CE:A2:67:7A:80:03:A4:9B:A9:47 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 35AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft Manifest number: 3480 Signing time: Thu 02 May 2024 14:21:37 +0000 Manifest this update: Thu 02 May 2024 14:21:36 +0000 Manifest next update: Thu 09 May 2024 14:21:36 +0000 Files and hashes: 1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: XIAnD1hSOxCDexDi6Fg0M0FcdCovVwb+hPqkQYbwnZU=) 2: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: SC5b+j4gDvIxAfn7xGaASJC49UUNnMEnAu2E4Ze5Wqs=) 3: B945666A66B111EEA69EB059C4F9AE02.roa (hash: ug4SEhvnAqbSYEe7ct15W9ugaJNCA2I1XU9Vd+d4qYI=) 4: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: XBPf4NH+a7dqiiYvf7DiFkG8apvnW8N9KNE+rdlqM8o=) 5: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: 6IX/+C2tZiQdUnN0w59aYOh1xU/CY2fQLPnfgz7EsW4=) 6: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: 0D2J+yy/ZB7evN4kCddzHgznLBt8DCOMI3Kv6JAIPGE=) 7: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: Wu1/IYLojPRNTANVKAdnUNwPWyOv0pzlQsxpke9jvTI=) 8: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: 6BUJ398DYxae+E4fooIIYkNzcIAYv4On9peI34/Pr+I=) 9: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: PaXTXpKBx9czLyVK9oTxpyG5GB4Ul44qFB3bGHyXRlg=) 10: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: nrEqm9HZU0c/RvqP949b7KD5H0U+8J/rR/0Xw0WVZM0=) 11: AD5CCDBC66B511EE80484A5EC4F9AE02.roa (hash: xNIPmWzqcN+56N8dhFiHD4PFFbrRKNhaQ4NpYzcVEsc=) 12: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: eqYs/CfLdsQWS6a2nU5tic+qtbY5XcXRbl4XY/r8Xmo=) 13: 37E946F4902C11EA898EFD7FC4F9AE02.roa (hash: CMLCCIzsBanqa+mXioiJJ3Ky0LX3AuQ5O3QPOTYsWCk=) 14: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: 9KQKh8CJ7V7pqBlD1MLNAVC/6HrQaCC5g6O6l97gnaQ=) 15: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: WjPZcEzMz1YIAb5PmAqYhL22+pv6cqwje9rZzLqwcVo=) 16: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: W8rKPjq3K/VStCMYuKznPuXRhYh6gAlFaPS1tobcayE=) 17: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: xjLVvucx6vcVI0+/P6AL7ptJJFqY1vehjG2K8ApiOdc=) 18: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: 4+5V+vAoXiW+3NpEIdyHPyFGZS2Uwfw6CAOuxckQw5c=) 19: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: EEdiqlF5LyBURSlyGDjt41p0t+kkRfIEuBc7ozomb5o=) 20: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: 8ezjvNGPNVkBOzZ+tkqGf4bevWhfZT2qEeGrqaydZrU=) 21: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: KD566cDASC3kfUfuvVStVV18pZXzvNCHtUa05s/jUrA=) 22: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: egfuYyMOERHpkG5Mv64t8Z9vudDLr2yjq+bP6aa/pUQ=) 23: 3DF267D8902C11EA898EFD7FC4F9AE02.roa (hash: /BMcxQygi9tpG4o82bbosjeUrZyeDbkq+vG+fFZRz5o=) 24: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: LIygJtJjRy9fnfq0E41kIc5c0xvln9j0hSvmWFTLJFA=) 25: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: EzGY30ffNSV3pN4XkB0z8vAXkybeBdeg++jxV/8105w=) 26: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: GP8lqrReYXIV3gUufw5Ei/fnvPj5Z7P+4RCKds9htH4=) 27: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: o0Xzmzbz0xyjbqUATOIGkUtO8VdHsr23GjZ6H5xYJsI=) 28: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: aVlhd+SLqMiKEArNYyT/S3eMcejLnoNJt4t624dsjBs=) 29: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: u3LgYtUZlz6BUBYFQnQYN2jVKVWcEC+l6vlIIyry9uQ=) 30: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: GZh862EjjtthTDx/PnjrUba63UqYNzB50ODtJVo7bnM=) 31: 7179245C619311EE9B52D046C4F9AE02.roa (hash: mgF934JShPzhSDQe1VU34/mkFMeVDqDgDUmVu+L9+xQ=) 32: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: YFEaA92UxHeNCe88zJx5kVnVSg46ocaX04iWT+IiiXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13739 (0x35ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: May 2 14:21:36 2024 GMT Not After : May 9 14:21:36 2024 GMT Subject: CN=6633a170-549f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:37:b5:3f:a3:da:91:25:70:d2:71:8b:6d: dc:44:24:ae:d4:9d:54:1c:d7:3d:df:c8:8b:91:d9: 6b:f3:54:46:35:ab:55:b1:98:09:dd:b4:ba:ca:9f: 6b:1f:27:76:d5:b2:cd:f4:58:b4:5e:ff:38:bc:68: 17:87:aa:52:2c:b5:81:a7:4f:86:1d:db:3f:44:98: 81:0b:a3:a1:50:f1:94:04:87:ac:82:68:ef:6e:db: cf:1c:83:75:97:1e:ca:ed:26:04:de:e1:c2:4f:38: 10:e0:85:d6:96:6f:d3:a5:95:6f:07:d7:cf:51:51: ea:cf:c5:7c:be:df:f8:92:d0:28:6d:c1:9e:a1:54: b6:c8:1c:9b:d1:3c:30:c4:87:3f:de:7a:f3:01:3b: 9a:fd:8d:ce:53:4d:d0:cf:5b:1b:50:bd:be:71:96: 31:5e:e0:8d:d6:b5:a0:21:79:03:43:22:f9:7b:c6: 29:78:2f:b9:04:8e:f5:41:1c:54:ce:19:ed:fe:4d: 61:a7:95:dd:42:ca:df:23:48:70:11:b4:f0:2a:5e: bc:e2:ef:09:77:e7:26:24:20:97:29:72:93:bc:8c: e4:2c:ff:bd:ce:56:67:18:4d:5e:bb:b7:03:db:0d: e2:39:ea:fc:3d:d3:71:15:55:bf:c5:35:f9:bd:98: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:61:2F:F7:1E:81:22:56:C8:4F:CE:A2:67:7A:80:03:A4:9B:A9:47 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:76:48:17:27:fa:0b:15:01:43:99:e6:35:d2:c0:a7:b0:25: d2:d2:4d:22:05:7b:e2:6d:5c:dd:7b:65:9d:59:59:de:10:ea: f0:f7:51:f1:8e:aa:fd:9d:0e:a4:19:c6:05:d2:a3:f1:5c:22: 22:a4:5b:e5:1d:75:95:10:26:d1:a6:87:76:e2:ac:b6:eb:62: 1b:08:a3:30:78:78:2d:3c:93:1f:fd:a5:3c:9f:b0:c9:64:58: 34:c6:f0:29:b1:89:58:15:d4:4f:7d:84:84:f0:b3:7c:f5:a6: 1e:7e:aa:c3:e1:ef:12:11:22:88:93:34:0b:5e:f7:40:36:92: bc:62:d3:3e:27:92:8e:78:7f:f4:2a:f0:95:3d:58:7f:2c:61: 50:f7:7a:be:34:3f:be:aa:72:d2:f7:04:7a:3e:06:e4:46:a8: 1e:f1:3f:f2:7d:ba:f9:91:5a:44:41:6d:8f:4a:99:37:de:18: 49:6a:43:3c:4d:d9:2e:e3:bb:42:55:b3:f3:04:c8:07:3d:74: fe:83:8c:df:45:38:2d:17:07:ee:03:4b:84:00:fb:35:f8:d0: 9e:60:35:8f:32:45:02:59:e5:d4:7a:54:da:b4:fd:82:36:f7: 18:dd:9b:00:07:24:f1:8e:1e:0a:fd:fe:e6:68:3c:9f:25:ec: a0:31:b7:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjQwNTAyMTQyMTM2WhcNMjQwNTA5MTQyMTM2WjAYMRYwFAYD VQQDEw02NjMzYTE3MC01NDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywY3tT+j2pElcNJxi23cRCSu1J1UHNc938iLkdlr81RGNatVsZgJ3bS6yp9r Hyd21bLN9Fi0Xv84vGgXh6pSLLWBp0+GHds/RJiBC6OhUPGUBIesgmjvbtvPHIN1 lx7K7SYE3uHCTzgQ4IXWlm/TpZVvB9fPUVHqz8V8vt/4ktAobcGeoVS2yByb0Tww xIc/3nrzATua/Y3OU03Qz1sbUL2+cZYxXuCN1rWgIXkDQyL5e8YpeC+5BI71QRxU zhnt/k1hp5XdQsrfI0hwEbTwKl684u8Jd+cmJCCXKXKTvIzkLP+9zlZnGE1eu7cD 2w3iOer8PdNxFVW/xTX5vZjWiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBphL/ce gSJWyE/Oomd6gAOkm6lHMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfdkgXJ/oLFQFDmeY10sCnsCXS0k0iBXvibVzde2WdWVneEOrw91Hx jqr9nQ6kGcYF0qPxXCIipFvlHXWVECbRpod24qy262IbCKMweHgtPJMf/aU8n7DJ ZFg0xvApsYlYFdRPfYSE8LN89aYefqrD4e8SESKIkzQLXvdANpK8YtM+J5KOeH/0 KvCVPVh/LGFQ93q+ND++qnLS9wR6PgbkRqge8T/yfbr5kVpEQW2PSpk33hhJakM8 Tdku47tCVbPzBMgHPXT+g4zfRTgtFwfuA0uEAPs1+NCeYDWPMkUCWeXUelTatP2C NvcY3ZsAByTxjh4K/f7maDyfJeygMbe9 -----END CERTIFICATE-----Generated at Thu May 2 17:18:26 2024 by rpki-client on console-ams.rpki-client.org