$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft File: RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json) Hash identifier: 4mNL1JbVQQJCdW+W9hbCNmUoyNH9fhVVhLTORV85phI= Subject key identifier: EE:29:93:85:27:F3:5E:1F:47:8C:2A:66:DC:5A:29:CD:10:6A:6A:13 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 3731 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft Manifest number: 35C3 Signing time: Sat 18 Oct 2025 14:21:48 +0000 Manifest this update: Sat 18 Oct 2025 14:21:47 +0000 Manifest next update: Sat 25 Oct 2025 14:21:47 +0000 Files and hashes: 1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: itUmlqlQngRgpzReREp59vMNh3YNrjbtaFvxtIZu5e4=) 2: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=) 3: B945666A66B111EEA69EB059C4F9AE02.roa (hash: P1e6T3fUvsOYCEl6lkzY5SukytZoDguqwb/uoxZkVKM=) 4: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: bQNKNVtSrkbmOTLrcZePdZ/lpfvMrtslhHEI0z5+rM0=) 5: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=) 6: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: cYsL4Km2z8/eLaDdJuE1fTn6jNePayD7xyunTnEo6lY=) 7: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: 27QhH8i/0gJ0//H+2ptMZ+EyBceS5sMbMIEu659I9v8=) 8: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: RZl2cb5dn6ASnfAVKfz/IPxBU98j/kEEE2Beq2zR6Oc=) 9: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: UOFsEyRUeoUA0A9/Nio2knAXvgMc2yvIGUft0ltmKhI=) 10: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=) 11: 5EC9A4DE822111F0A7AEE382C4F9AE02.roa (hash: mRWVFzSqyGBXd1tEsxzwbFd/2hUy0NaLH2Ze/iVKJwo=) 12: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA=) 13: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: rvY+LkMKAD7I9F4fJqFK4vOJYN8p/UI2Ku0scGCRPiA=) 14: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: Abn6jVylboaSLiKBPnyzjN9v9cXF+QhNGF8xH9KRXC8=) 15: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: pCZkPuBFHsSu/4sLLOtoITD4qq/HQqQZRN16R/bkpiU=) 16: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: iLCML5NbSaRD8kDEAs93AJjB8u+iJHUDcG8J2vYU9sc=) 17: 27381000831611F0BE76CB53C4F9AE02.roa (hash: WuFi3OZM0w+siCrc7YaWkcb1HixUMGMBUYmWe98n4So=) 18: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=) 19: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: ViLxILuMa3CBIFauG3NtJHg9AZOzslFDPDkZtOMmV6c=) 20: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: 6u5sB+7YNxVl5C/ghTigw0xTKib22IuiJgBkqwdLCcY=) 21: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=) 22: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: 8Vt0vedoklkslOnz2Z1wL8KgTgWALQ+K4RanzdNW1jE=) 23: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: 11TByYSsblneUXhUk+j5cqeZWCsrnJ0LEBcJaF4T/h8=) 24: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=) 25: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: ZMSUrNWda6eAQ2y1dpcUsswV5gNptYXhl2o3730ebpY=) 26: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: bHeA3qoZ4lZQSCkiwi56f/mMODdImMmOLthfvH5JELs=) 27: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: 1v/FDo+782n5aBhE9sC6RKfy+7DKw89dbwb0xEns3Bg=) 28: 7179245C619311EE9B52D046C4F9AE02.roa (hash: OIoiXK5HUidUkMvfbT28pcn/cDbn540RgN8Pi5zH+4Y=) 29: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: AB7ONpZx9XVpWPf/ZL1Zkpp0nWBsAXZmnaIKchQVfSQ=) 30: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=) 31: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I=) 32: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: hipDqtuA6tKa/DovXP31v3QUE5kTEzKq8fl//VHu/GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14129 (0x3731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Oct 18 14:21:47 2025 GMT Not After : Oct 25 14:21:47 2025 GMT Subject: CN=68f3a27b-68a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a6:a7:41:1c:a3:87:ec:20:d8:9d:8a:f4:e3: 9d:cc:b6:bb:64:62:05:1f:5a:ff:76:79:4f:63:3c: 18:d3:de:96:f3:a8:ed:e4:66:fc:1e:12:9c:4f:4f: ae:1f:f5:ae:08:8e:f5:e7:9d:8b:c7:a0:e9:c1:6f: 52:b2:59:cb:f1:66:cd:94:06:3b:9a:4e:3a:a3:81: 00:44:d5:bd:ca:50:5d:54:2e:34:15:19:39:e7:bc: f1:f5:30:b8:32:cf:6e:4a:32:3b:a4:8b:5f:41:f1: c8:26:0e:5d:8b:d9:8d:59:12:f3:5a:a5:da:62:af: 84:42:20:1a:00:74:5e:a4:6a:6f:b6:97:75:f3:f1: 07:9a:c5:d2:53:6f:2d:02:1b:c9:f9:b9:46:a6:1b: 48:d0:36:a1:83:a0:2d:8d:23:8b:9e:38:4a:e2:9e: 8e:a7:e2:fb:7f:59:64:ca:d3:48:3a:2a:bf:81:de: 7d:5b:2b:0d:89:c9:74:04:be:17:bd:37:da:29:46: 0d:39:76:8b:ce:0d:5d:1b:a9:79:e0:a1:22:17:6b: 9e:06:4c:f6:ff:d6:69:e8:6b:69:79:17:82:5d:9a: ff:37:d7:97:a5:3d:fd:1d:6d:59:21:6f:d6:0c:04: 6a:d9:a6:be:14:5d:f0:4a:c9:c2:5a:40:b7:aa:bc: 8d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:29:93:85:27:F3:5E:1F:47:8C:2A:66:DC:5A:29:CD:10:6A:6A:13 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:fb:63:ff:cf:cf:c3:e6:a3:86:c7:ed:17:88:f8:37:0b:db: 57:c4:24:bf:f3:0c:03:0e:54:bf:ae:8c:cf:50:e2:88:2b:96: 43:5b:69:a6:c0:bf:33:8f:56:0d:e2:c3:f4:8b:9a:80:1f:a3: ad:61:8b:50:34:a9:06:c8:b6:d5:2f:31:83:63:28:20:e5:a3: f0:01:6e:f7:13:73:2d:93:08:95:6e:0d:3e:49:a6:11:d2:7a: e6:21:a2:ef:76:c5:e7:79:79:e2:ea:81:34:f8:45:56:0d:9a: 7e:0a:38:67:27:55:5b:56:14:79:e3:6e:1b:1e:85:43:fa:2e: 1a:47:79:1b:9d:4d:8e:06:35:0b:d7:0b:24:6a:98:b6:bf:48: 92:67:ee:60:01:9c:ad:2a:c2:a2:ca:1d:7e:f4:5f:e7:d9:d1: 19:eb:82:1e:ad:26:f1:c7:f0:fe:59:06:3d:0b:11:69:28:f2: 96:ba:a2:3f:f6:83:bf:42:8f:38:99:3c:69:c1:a3:ab:61:fd: 74:be:dc:a0:d5:c4:76:04:d4:15:2e:3b:bd:cf:50:e9:5e:c5: d1:5c:8a:34:5f:82:1f:3f:28:80:e2:d7:3e:c5:fa:ab:9c:ee: ee:0b:a6:01:b5:df:7c:21:95:1c:3d:32:27:27:be:07:0d:17: 9d:5e:3a:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjUxMDE4MTQyMTQ3WhcNMjUxMDI1MTQyMTQ3WjAYMRYwFAYD VQQDEw02OGYzYTI3Yi02OGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7qanQRyjh+wg2J2K9OOdzLa7ZGIFH1r/dnlPYzwY096W86jt5Gb8HhKcT0+u H/WuCI71552Lx6DpwW9SslnL8WbNlAY7mk46o4EARNW9ylBdVC40FRk557zx9TC4 Ms9uSjI7pItfQfHIJg5di9mNWRLzWqXaYq+EQiAaAHRepGpvtpd18/EHmsXSU28t AhvJ+blGphtI0Dahg6AtjSOLnjhK4p6Op+L7f1lkytNIOiq/gd59WysNicl0BL4X vTfaKUYNOXaLzg1dG6l54KEiF2ueBkz2/9Zp6GtpeReCXZr/N9eXpT39HW1ZIW/W DARq2aa+FF3wSsnCWkC3qryN5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4pk4Un 814fR4wqZtxaKc0QamoTMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk+2P/z8/D5qOGx+0XiPg3C9tXxCS/8wwDDlS/rozPUOKIK5ZDW2mm wL8zj1YN4sP0i5qAH6OtYYtQNKkGyLbVLzGDYygg5aPwAW73E3MtkwiVbg0+SaYR 0nrmIaLvdsXneXni6oE0+EVWDZp+CjhnJ1VbVhR5424bHoVD+i4aR3kbnU2OBjUL 1wskapi2v0iSZ+5gAZytKsKiyh1+9F/n2dEZ64IerSbxx/D+WQY9CxFpKPKWuqI/ 9oO/Qo84mTxpwaOrYf10vtyg1cR2BNQVLju9z1DpXsXRXIo0X4IfPyiA4tc+xfqr nO7uC6YBtd98IZUcPTInJ74HDRedXjpJ -----END CERTIFICATE-----Generated at Mon Oct 20 11:37:00 2025 by rpki-client