Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
File:                     RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json)
Hash identifier:          xuwuzCxAfnY56sNJ8Iei+UYQD1m97X0KrFo10z16BFM=
Subject key identifier:   9B:26:DC:9E:20:14:72:4B:19:ED:36:66:AF:EC:C8:C3:8D:37:30:59
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       3703
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
Manifest number:          359C
Signing time:             Fri 22 Aug 2025 14:20:46 +0000
Manifest this update:     Fri 22 Aug 2025 14:20:46 +0000
Manifest next update:     Fri 29 Aug 2025 14:20:46 +0000
Files and hashes:         1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: KD3SdlCf2n3fNTlA6PQrAR2+h31wQmMlBWNJJzz9J9U=)
                          2: B945666A66B111EEA69EB059C4F9AE02.roa (hash: P1e6T3fUvsOYCEl6lkzY5SukytZoDguqwb/uoxZkVKM=)
                          3: 75215386652A11EF8B5EB953C4F9AE02.roa (hash: VsF6mP7a/GSIQ7I2UEu/NtkZYfH3IqoObHXoyPSC370=)
                          4: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: cYsL4Km2z8/eLaDdJuE1fTn6jNePayD7xyunTnEo6lY=)
                          5: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: 27QhH8i/0gJ0//H+2ptMZ+EyBceS5sMbMIEu659I9v8=)
                          6: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=)
                          7: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: iLCML5NbSaRD8kDEAs93AJjB8u+iJHUDcG8J2vYU9sc=)
                          8: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=)
                          9: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: 6u5sB+7YNxVl5C/ghTigw0xTKib22IuiJgBkqwdLCcY=)
                          10: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=)
                          11: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=)
                          12: 79424C687F1911F0AE7E7A59C4F9AE02.roa (hash: +WWklMDLEQDMGEMqXJrMd+jQrrgrZCYOfCTJo3LHRFw=)
                          13: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: ZMSUrNWda6eAQ2y1dpcUsswV5gNptYXhl2o3730ebpY=)
                          14: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: bHeA3qoZ4lZQSCkiwi56f/mMODdImMmOLthfvH5JELs=)
                          15: 7179245C619311EE9B52D046C4F9AE02.roa (hash: OIoiXK5HUidUkMvfbT28pcn/cDbn540RgN8Pi5zH+4Y=)
                          16: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: AB7ONpZx9XVpWPf/ZL1Zkpp0nWBsAXZmnaIKchQVfSQ=)
                          17: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=)
                          18: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I=)
                          19: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=)
                          20: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=)
                          21: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: bQNKNVtSrkbmOTLrcZePdZ/lpfvMrtslhHEI0z5+rM0=)
                          22: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: UOFsEyRUeoUA0A9/Nio2knAXvgMc2yvIGUft0ltmKhI=)
                          23: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: RZl2cb5dn6ASnfAVKfz/IPxBU98j/kEEE2Beq2zR6Oc=)
                          24: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA=)
                          25: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: rvY+LkMKAD7I9F4fJqFK4vOJYN8p/UI2Ku0scGCRPiA=)
                          26: 37E946F4902C11EA898EFD7FC4F9AE02.roa (hash: k5hwToFGF2YVUVlYfpHmB3V0k3Woizg0namGJUOkl9g=)
                          27: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: pCZkPuBFHsSu/4sLLOtoITD4qq/HQqQZRN16R/bkpiU=)
                          28: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: Abn6jVylboaSLiKBPnyzjN9v9cXF+QhNGF8xH9KRXC8=)
                          29: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: ViLxILuMa3CBIFauG3NtJHg9AZOzslFDPDkZtOMmV6c=)
                          30: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: 11TByYSsblneUXhUk+j5cqeZWCsrnJ0LEBcJaF4T/h8=)
                          31: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: 8Vt0vedoklkslOnz2Z1wL8KgTgWALQ+K4RanzdNW1jE=)
                          32: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: 1v/FDo+782n5aBhE9sC6RKfy+7DKw89dbwb0xEns3Bg=)
                          33: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: hipDqtuA6tKa/DovXP31v3QUE5kTEzKq8fl//VHu/GY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14083 (0x3703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Aug 22 14:20:46 2025 GMT
            Not After : Aug 29 14:20:46 2025 GMT
        Subject: CN=68a87cbe-b609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:f7:36:c5:6c:fb:40:61:0a:0d:c3:16:e4:
                    08:1c:fd:e5:18:c4:ae:72:28:85:f0:60:a7:af:4e:
                    71:05:44:7f:6b:53:a6:ea:50:82:7d:2f:cd:24:58:
                    75:1a:0d:c3:4a:54:c2:af:35:2b:48:93:0b:52:8f:
                    c2:cf:38:bf:db:31:37:bf:5b:2d:c5:0a:e6:29:cf:
                    da:21:b5:12:21:cc:05:91:6d:92:11:4b:74:65:91:
                    44:90:31:2f:6f:37:c1:bd:6a:19:92:0d:26:ab:c6:
                    e9:45:45:02:8e:6f:04:a2:f7:28:66:3e:22:16:8d:
                    c1:ec:87:2e:63:e6:b4:84:35:48:50:e3:30:f5:68:
                    5d:e8:67:5f:b6:a7:a0:36:71:6c:5e:d2:5c:e1:b3:
                    11:bb:14:75:5c:df:e9:d9:2a:7e:7c:ba:79:6f:7c:
                    fd:7e:54:7d:6b:b1:45:5e:1a:a4:19:45:c9:f2:dd:
                    9a:08:97:7d:9d:4c:b4:a3:91:4f:e2:99:b1:da:c5:
                    2c:75:8c:c4:22:7c:1e:4c:bc:b9:2a:b1:a1:0d:8f:
                    e4:41:6f:c0:91:af:62:9f:93:0a:93:db:6a:1c:a1:
                    c1:1b:49:96:e9:4d:e6:5e:ac:28:14:de:f7:95:77:
                    fd:80:5b:3c:67:6d:28:63:f4:2f:d7:4b:fe:a3:ae:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:26:DC:9E:20:14:72:4B:19:ED:36:66:AF:EC:C8:C3:8D:37:30:59
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:17:b3:1c:a5:84:e5:4e:34:53:00:b1:ab:8c:28:64:bf:66:
         fa:90:e8:95:e0:d5:2f:db:cb:30:f6:d4:eb:4b:fa:a7:2a:86:
         7c:ed:7f:cb:d4:63:58:57:19:c5:94:c1:cd:f7:90:a6:6f:cb:
         b8:0c:e0:4f:4c:e5:ff:4a:a4:0a:a8:6d:5b:d8:29:1a:f1:59:
         8f:8c:56:e6:f9:4e:40:1f:ba:c8:14:25:14:27:57:e7:0b:57:
         b0:5d:c6:23:ac:b9:e9:56:b2:d3:97:c9:98:6d:21:c9:7c:97:
         d4:30:c2:7e:fa:8f:b0:9b:08:d8:0e:3a:4a:48:a7:b4:81:90:
         f0:4b:a6:54:ca:48:66:15:3d:18:c4:f0:71:20:37:06:fc:5b:
         03:46:56:db:4e:c2:a8:d1:12:08:9f:4d:96:8b:86:9e:59:9c:
         80:c6:c5:38:64:98:82:48:21:b1:9f:29:bb:f4:9f:98:2d:23:
         eb:90:50:fd:a9:3e:21:17:e0:aa:a8:59:62:59:06:25:48:8d:
         4c:ec:3a:95:ac:4e:f7:7b:aa:ea:dc:b4:cd:fa:73:18:67:87:
         1f:3c:e9:11:ca:b5:02:2e:0d:1c:da:48:70:c2:69:0b:86:19:
         76:c5:a4:5b:41:3d:98:64:37:ba:b8:18:68:fd:07:88:70:40:
         b3:c3:b6:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz
M0E4ODc1MEUwHhcNMjUwODIyMTQyMDQ2WhcNMjUwODI5MTQyMDQ2WjAYMRYwFAYD
VQQDEw02OGE4N2NiZS1iNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwEH3NsVs+0BhCg3DFuQIHP3lGMSuciiF8GCnr05xBUR/a1Om6lCCfS/NJFh1
Gg3DSlTCrzUrSJMLUo/Czzi/2zE3v1stxQrmKc/aIbUSIcwFkW2SEUt0ZZFEkDEv
bzfBvWoZkg0mq8bpRUUCjm8EovcoZj4iFo3B7IcuY+a0hDVIUOMw9Whd6Gdftqeg
NnFsXtJc4bMRuxR1XN/p2Sp+fLp5b3z9flR9a7FFXhqkGUXJ8t2aCJd9nUy0o5FP
4pmx2sUsdYzEInweTLy5KrGhDY/kQW/Aka9in5MKk9tqHKHBG0mW6U3mXqwoFN73
lXf9gFs8Z20oY/Qv10v+o642lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsm3J4g
FHJLGe02Zq/syMONNzBZMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE
NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB
eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1F7McpYTlTjRTALGrjChkv2b6kOiV4NUv28sw9tTrS/qnKoZ87X/L
1GNYVxnFlMHN95Cmb8u4DOBPTOX/SqQKqG1b2Cka8VmPjFbm+U5AH7rIFCUUJ1fn
C1ewXcYjrLnpVrLTl8mYbSHJfJfUMMJ++o+wmwjYDjpKSKe0gZDwS6ZUykhmFT0Y
xPBxIDcG/FsDRlbbTsKo0RIIn02Wi4aeWZyAxsU4ZJiCSCGxnym79J+YLSPrkFD9
qT4hF+CqqFliWQYlSI1M7DqVrE73e6rq3LTN+nMYZ4cfPOkRyrUCLg0c2khwwmkL
hhl2xaRbQT2YZDe6uBho/QeIcECzw7Ym
-----END CERTIFICATE-----
Generated at Sat Aug 23 04:25:36 2025 by rpki-client