$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft File: RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json) Hash identifier: ygqiM5VDGVaTEVMKGHMf3lqNotiaeiV9EkWNxO6tnEw= Subject key identifier: 0B:DF:92:80:0A:DD:08:13:28:75:82:45:0C:D0:F8:55:E3:51:D8:73 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 371D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft Manifest number: 35AF Signing time: Mon 08 Sep 2025 14:20:17 +0000 Manifest this update: Mon 08 Sep 2025 14:20:17 +0000 Manifest next update: Mon 15 Sep 2025 14:20:17 +0000 Files and hashes: 1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: QXtvepPSW6XSrQHwcjm+7egbBaXWdkgoCn3fc2DJZ4Q=) 2: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=) 3: B945666A66B111EEA69EB059C4F9AE02.roa (hash: P1e6T3fUvsOYCEl6lkzY5SukytZoDguqwb/uoxZkVKM=) 4: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: bQNKNVtSrkbmOTLrcZePdZ/lpfvMrtslhHEI0z5+rM0=) 5: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=) 6: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: cYsL4Km2z8/eLaDdJuE1fTn6jNePayD7xyunTnEo6lY=) 7: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: 27QhH8i/0gJ0//H+2ptMZ+EyBceS5sMbMIEu659I9v8=) 8: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: RZl2cb5dn6ASnfAVKfz/IPxBU98j/kEEE2Beq2zR6Oc=) 9: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: UOFsEyRUeoUA0A9/Nio2knAXvgMc2yvIGUft0ltmKhI=) 10: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=) 11: 5EC9A4DE822111F0A7AEE382C4F9AE02.roa (hash: mRWVFzSqyGBXd1tEsxzwbFd/2hUy0NaLH2Ze/iVKJwo=) 12: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA=) 13: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: rvY+LkMKAD7I9F4fJqFK4vOJYN8p/UI2Ku0scGCRPiA=) 14: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: Abn6jVylboaSLiKBPnyzjN9v9cXF+QhNGF8xH9KRXC8=) 15: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: pCZkPuBFHsSu/4sLLOtoITD4qq/HQqQZRN16R/bkpiU=) 16: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: iLCML5NbSaRD8kDEAs93AJjB8u+iJHUDcG8J2vYU9sc=) 17: 27381000831611F0BE76CB53C4F9AE02.roa (hash: WuFi3OZM0w+siCrc7YaWkcb1HixUMGMBUYmWe98n4So=) 18: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=) 19: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: ViLxILuMa3CBIFauG3NtJHg9AZOzslFDPDkZtOMmV6c=) 20: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: 6u5sB+7YNxVl5C/ghTigw0xTKib22IuiJgBkqwdLCcY=) 21: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=) 22: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: 8Vt0vedoklkslOnz2Z1wL8KgTgWALQ+K4RanzdNW1jE=) 23: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: 11TByYSsblneUXhUk+j5cqeZWCsrnJ0LEBcJaF4T/h8=) 24: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=) 25: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: ZMSUrNWda6eAQ2y1dpcUsswV5gNptYXhl2o3730ebpY=) 26: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: bHeA3qoZ4lZQSCkiwi56f/mMODdImMmOLthfvH5JELs=) 27: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: 1v/FDo+782n5aBhE9sC6RKfy+7DKw89dbwb0xEns3Bg=) 28: 7179245C619311EE9B52D046C4F9AE02.roa (hash: OIoiXK5HUidUkMvfbT28pcn/cDbn540RgN8Pi5zH+4Y=) 29: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: AB7ONpZx9XVpWPf/ZL1Zkpp0nWBsAXZmnaIKchQVfSQ=) 30: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=) 31: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I=) 32: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: hipDqtuA6tKa/DovXP31v3QUE5kTEzKq8fl//VHu/GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 14:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14109 (0x371d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Sep 8 14:20:17 2025 GMT Not After : Sep 15 14:20:17 2025 GMT Subject: CN=68bee621-4978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:11:ef:f6:ca:17:f7:a8:d3:23:f3:b2:57: 07:46:2a:33:7b:28:e7:93:79:9d:07:05:8d:ed:c0: 01:3c:ba:ac:38:4c:b6:ee:f9:a9:4c:f5:4b:b0:1d: c6:9f:ea:a5:5f:fd:77:9f:ef:24:22:89:96:37:fa: de:d8:85:78:ac:b1:da:2d:8a:79:3a:47:83:34:e7: d4:a3:fc:51:94:42:29:05:4f:16:f4:12:37:79:e8: c2:7c:0c:bb:f2:83:39:90:b8:18:9e:1a:49:fa:96: 11:9d:73:52:31:50:fd:9f:b8:63:10:3d:75:70:ca: 63:2f:1a:25:f5:aa:7b:61:e2:a4:ec:e9:90:51:f5: 8b:ef:d7:2c:86:c9:bd:4c:0c:e8:e8:20:cb:f5:f3: 19:ac:df:32:32:d1:2f:e3:d1:46:f2:2f:39:7e:9a: 42:46:46:ba:81:3b:f8:38:f7:4f:1e:f3:35:0d:13: 50:52:5b:c1:76:66:5c:e5:0f:06:c8:ff:3a:92:b8: 8f:e0:14:a3:b0:8f:76:a8:19:dd:aa:06:fe:fc:f7: 19:91:dd:c5:0f:eb:11:50:42:c9:6f:0a:5e:60:48: 94:a9:eb:b3:7d:09:ff:c5:5c:6f:eb:17:1a:90:71: d4:18:30:aa:5c:37:72:bd:8e:61:0d:c5:8b:9a:30: 87:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DF:92:80:0A:DD:08:13:28:75:82:45:0C:D0:F8:55:E3:51:D8:73 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:23:60:82:08:88:89:15:7d:0e:69:ed:0a:48:f8:54:8e:2c: 74:d6:09:3c:9b:4d:82:9a:68:15:59:92:1c:d6:c2:38:f3:03: 97:9b:54:72:8a:7f:b3:20:a1:63:1a:f6:62:e1:0e:97:67:64: 6a:e9:ff:ad:fb:70:9f:06:4f:54:0c:23:1a:a0:81:57:0c:a0: c8:b9:d2:12:f0:d1:5f:c4:3a:5d:da:d8:9c:d0:9c:f1:53:cc: c2:f8:8f:fb:db:03:38:fe:7a:c0:b4:5d:f0:b0:49:34:60:01: 89:de:2d:47:7c:46:28:3d:e1:f4:81:12:b7:a2:72:cc:8e:ef: 14:a6:74:69:d2:a8:1b:fb:2a:fd:e2:5b:5c:ff:ec:d3:7e:fa: ba:fd:84:9b:42:88:54:07:a7:9c:21:64:39:5d:8b:81:dc:68: d4:bd:74:0c:82:f6:36:86:55:61:4a:b9:7c:d1:9a:22:0e:b6: a7:e5:fe:cc:51:33:e4:fe:7d:4c:fc:6e:24:e7:f8:78:8e:dd: 00:7b:c4:64:a3:5a:04:3c:2b:67:9b:7f:ed:99:c7:f3:f7:d7: 0a:e9:4d:88:7e:77:2c:f5:1c:fa:cd:39:f9:f0:fc:39:9a:aa: 15:aa:f6:4f:41:ab:cf:02:28:18:1b:6b:5a:20:a8:bc:39:e1: 0a:ce:a2:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjUwOTA4MTQyMDE3WhcNMjUwOTE1MTQyMDE3WjAYMRYwFAYD VQQDEw02OGJlZTYyMS00OTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv48R7/bKF/eo0yPzslcHRiozeyjnk3mdBwWN7cABPLqsOEy27vmpTPVLsB3G n+qlX/13n+8kIomWN/re2IV4rLHaLYp5OkeDNOfUo/xRlEIpBU8W9BI3eejCfAy7 8oM5kLgYnhpJ+pYRnXNSMVD9n7hjED11cMpjLxol9ap7YeKk7OmQUfWL79cshsm9 TAzo6CDL9fMZrN8yMtEv49FG8i85fppCRka6gTv4OPdPHvM1DRNQUlvBdmZc5Q8G yP86kriP4BSjsI92qBndqgb+/PcZkd3FD+sRUELJbwpeYEiUqeuzfQn/xVxv6xca kHHUGDCqXDdyvY5hDcWLmjCHowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvfkoAK 3QgTKHWCRQzQ+FXjUdhzMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9I2CCCIiJFX0Oae0KSPhUjix01gk8m02CmmgVWZIc1sI48wOXm1Ry in+zIKFjGvZi4Q6XZ2Rq6f+t+3CfBk9UDCMaoIFXDKDIudIS8NFfxDpd2tic0Jzx U8zC+I/72wM4/nrAtF3wsEk0YAGJ3i1HfEYoPeH0gRK3onLMju8UpnRp0qgb+yr9 4ltc/+zTfvq6/YSbQohUB6ecIWQ5XYuB3GjUvXQMgvY2hlVhSrl80ZoiDran5f7M UTPk/n1M/G4k5/h4jt0Ae8Rko1oEPCtnm3/tmcfz99cK6U2Ifncs9Rz6zTn58Pw5 mqoVqvZPQavPAigYG2taIKi8OeEKzqIK -----END CERTIFICATE-----Generated at Tue Sep 9 07:50:24 2025 by rpki-client