$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft File: RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json) Hash identifier: JcVcx1ylinC0uuPGrmR4odqwMz5RYET9Jg5Lg0Xjy8Q= Subject key identifier: D3:57:BB:77:BE:F6:ED:01:D8:58:95:E0:C2:6B:0A:40:99:6D:90:0E Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 3737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft Manifest number: 35C9 Signing time: Fri 24 Oct 2025 14:21:07 +0000 Manifest this update: Fri 24 Oct 2025 14:21:07 +0000 Manifest next update: Fri 31 Oct 2025 14:21:07 +0000 Files and hashes: 1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: xpxejmaMqQ8BJ5l5TweDUqOC7z3C0gbutSEaDAjWJuo=) 2: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=) 3: B945666A66B111EEA69EB059C4F9AE02.roa (hash: P1e6T3fUvsOYCEl6lkzY5SukytZoDguqwb/uoxZkVKM=) 4: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: bQNKNVtSrkbmOTLrcZePdZ/lpfvMrtslhHEI0z5+rM0=) 5: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=) 6: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: cYsL4Km2z8/eLaDdJuE1fTn6jNePayD7xyunTnEo6lY=) 7: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: 27QhH8i/0gJ0//H+2ptMZ+EyBceS5sMbMIEu659I9v8=) 8: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: RZl2cb5dn6ASnfAVKfz/IPxBU98j/kEEE2Beq2zR6Oc=) 9: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: UOFsEyRUeoUA0A9/Nio2knAXvgMc2yvIGUft0ltmKhI=) 10: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=) 11: 5EC9A4DE822111F0A7AEE382C4F9AE02.roa (hash: mRWVFzSqyGBXd1tEsxzwbFd/2hUy0NaLH2Ze/iVKJwo=) 12: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA=) 13: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: rvY+LkMKAD7I9F4fJqFK4vOJYN8p/UI2Ku0scGCRPiA=) 14: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: Abn6jVylboaSLiKBPnyzjN9v9cXF+QhNGF8xH9KRXC8=) 15: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: pCZkPuBFHsSu/4sLLOtoITD4qq/HQqQZRN16R/bkpiU=) 16: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: iLCML5NbSaRD8kDEAs93AJjB8u+iJHUDcG8J2vYU9sc=) 17: 27381000831611F0BE76CB53C4F9AE02.roa (hash: WuFi3OZM0w+siCrc7YaWkcb1HixUMGMBUYmWe98n4So=) 18: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=) 19: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: ViLxILuMa3CBIFauG3NtJHg9AZOzslFDPDkZtOMmV6c=) 20: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: 6u5sB+7YNxVl5C/ghTigw0xTKib22IuiJgBkqwdLCcY=) 21: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=) 22: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: 8Vt0vedoklkslOnz2Z1wL8KgTgWALQ+K4RanzdNW1jE=) 23: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: 11TByYSsblneUXhUk+j5cqeZWCsrnJ0LEBcJaF4T/h8=) 24: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=) 25: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: ZMSUrNWda6eAQ2y1dpcUsswV5gNptYXhl2o3730ebpY=) 26: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: bHeA3qoZ4lZQSCkiwi56f/mMODdImMmOLthfvH5JELs=) 27: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: 1v/FDo+782n5aBhE9sC6RKfy+7DKw89dbwb0xEns3Bg=) 28: 7179245C619311EE9B52D046C4F9AE02.roa (hash: OIoiXK5HUidUkMvfbT28pcn/cDbn540RgN8Pi5zH+4Y=) 29: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: AB7ONpZx9XVpWPf/ZL1Zkpp0nWBsAXZmnaIKchQVfSQ=) 30: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=) 31: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I=) 32: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: hipDqtuA6tKa/DovXP31v3QUE5kTEzKq8fl//VHu/GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 14:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14135 (0x3737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Oct 24 14:21:07 2025 GMT Not After : Oct 31 14:21:07 2025 GMT Subject: CN=68fb8b53-cfbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2b:9e:93:b9:9a:f4:6d:fa:e4:64:36:36:52: 1f:27:e6:ca:5c:82:92:41:03:8a:1e:df:d3:d5:1a: 6d:1a:6e:37:39:15:87:58:91:8e:56:66:91:e6:96: fc:24:0a:36:b9:d0:c2:7e:be:15:f2:23:95:33:0b: 02:77:d5:58:a3:32:7f:53:db:d9:ce:d5:f8:c2:05: 66:5b:12:1e:75:41:3b:64:68:50:ad:55:33:a0:69: b9:41:87:00:65:27:a2:cc:2b:14:fe:c1:6a:af:0b: b9:a9:d5:3e:ac:70:d4:06:4b:c5:f4:cc:ec:f6:ce: 23:49:a4:50:e3:52:31:19:5c:40:84:d9:ac:ce:37: af:e5:8f:d1:41:21:5b:b0:48:e7:44:17:04:a9:77: 1a:5d:bb:af:99:7d:a9:fb:56:94:18:b4:d2:8a:bb: 92:43:47:8c:e8:1e:b9:2a:ce:58:5b:2c:1a:ce:54: f4:20:ea:5d:92:34:68:fe:18:a0:2c:e2:48:04:8d: d7:d2:b7:4c:63:1d:db:db:03:dd:7e:20:89:91:38: cd:ce:df:2c:a4:2e:b8:53:1b:ce:aa:e2:40:2f:46: 4d:b1:bf:82:5d:73:b4:cb:14:a9:ba:76:73:60:15: 2a:d3:22:5f:4e:80:80:87:3d:d1:f0:d1:2e:2c:ee: 78:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:57:BB:77:BE:F6:ED:01:D8:58:95:E0:C2:6B:0A:40:99:6D:90:0E X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:9d:d6:83:42:3a:ac:85:e0:4b:a0:7e:3a:37:d2:5a:f7:c3: 34:d3:b5:6a:9b:12:d0:f2:88:1e:bb:f2:14:3b:74:c4:bc:d4: 8e:d7:26:e7:74:a3:3f:e6:7d:6d:b9:d6:dd:2c:1e:b3:6f:47: 23:cd:15:0a:48:df:3f:15:41:fd:c5:25:c4:8c:8d:9b:cc:d3: de:45:4d:19:6e:12:3b:8c:ab:3e:2c:0e:36:22:40:ce:c8:43: 0c:fe:3f:38:17:3d:a4:c1:86:c9:f1:ab:70:df:c7:f5:42:8b: cb:27:b6:06:5f:fd:ee:64:a6:29:d2:74:02:7f:02:2d:bc:f5: a4:26:ad:db:70:6e:7d:db:a4:26:0e:30:23:25:8b:a6:9a:a0: 4f:9a:c7:91:8c:dc:de:6e:89:88:6c:cd:92:b8:43:b9:39:41: d4:79:e1:eb:86:cb:a7:a1:a2:2d:fc:b7:98:b2:11:e6:08:4a: 35:64:c7:13:5e:fd:dc:08:5f:c0:5e:71:1f:82:0c:b3:57:bf: 46:7c:8a:3f:38:9a:e2:12:74:a8:b7:c3:b2:4a:f9:f6:ba:98: 70:42:43:db:bf:bb:d2:fc:d4:28:64:5b:f9:fc:85:41:aa:8c: 59:ee:7a:a4:11:3a:46:51:6b:94:e6:9b:21:3b:d1:7f:30:5d: ee:6c:fd:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjUxMDI0MTQyMTA3WhcNMjUxMDMxMTQyMTA3WjAYMRYwFAYD VQQDEw02OGZiOGI1My1jZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCuek7ma9G365GQ2NlIfJ+bKXIKSQQOKHt/T1RptGm43ORWHWJGOVmaR5pb8 JAo2udDCfr4V8iOVMwsCd9VYozJ/U9vZztX4wgVmWxIedUE7ZGhQrVUzoGm5QYcA ZSeizCsU/sFqrwu5qdU+rHDUBkvF9Mzs9s4jSaRQ41IxGVxAhNmszjev5Y/RQSFb sEjnRBcEqXcaXbuvmX2p+1aUGLTSiruSQ0eM6B65Ks5YWywazlT0IOpdkjRo/hig LOJIBI3X0rdMYx3b2wPdfiCJkTjNzt8spC64UxvOquJAL0ZNsb+CXXO0yxSpunZz YBUq0yJfToCAhz3R8NEuLO543QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNXu3e+ 9u0B2FiV4MJrCkCZbZAOMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4ndaDQjqsheBLoH46N9Ja98M007VqmxLQ8ogeu/IUO3TEvNSO1ybn dKM/5n1tudbdLB6zb0cjzRUKSN8/FUH9xSXEjI2bzNPeRU0ZbhI7jKs+LA42IkDO yEMM/j84Fz2kwYbJ8atw38f1QovLJ7YGX/3uZKYp0nQCfwItvPWkJq3bcG5926Qm DjAjJYummqBPmseRjNzebomIbM2SuEO5OUHUeeHrhsunoaIt/LeYshHmCEo1ZMcT Xv3cCF/AXnEfggyzV79GfIo/OJriEnSot8OySvn2uphwQkPbv7vS/NQoZFv5/IVB qoxZ7nqkETpGUWuU5pshO9F/MF3ubP1u -----END CERTIFICATE-----Generated at Sat Oct 25 04:42:29 2025 by rpki-client