$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft File: RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json) Hash identifier: mfb1TJVBy5+y8lRt/EX0Hxz2/xjZ+TWUxwGsvP2/jrg= Subject key identifier: B8:41:2E:12:7C:A6:3A:90:18:1B:EE:BA:55:A1:0F:1F:A2:59:46:C6 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 36A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft Manifest number: 3552 Signing time: Mon 12 May 2025 14:20:25 +0000 Manifest this update: Mon 12 May 2025 14:20:24 +0000 Manifest next update: Mon 19 May 2025 14:20:24 +0000 Files and hashes: 1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: wP+/W+2SNlONVjVlrjavGOZ012QUZEuuyOF1Fkg6fLw=) 2: B945666A66B111EEA69EB059C4F9AE02.roa (hash: P1e6T3fUvsOYCEl6lkzY5SukytZoDguqwb/uoxZkVKM=) 3: 75215386652A11EF8B5EB953C4F9AE02.roa (hash: VsF6mP7a/GSIQ7I2UEu/NtkZYfH3IqoObHXoyPSC370=) 4: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: cYsL4Km2z8/eLaDdJuE1fTn6jNePayD7xyunTnEo6lY=) 5: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: 27QhH8i/0gJ0//H+2ptMZ+EyBceS5sMbMIEu659I9v8=) 6: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=) 7: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: iLCML5NbSaRD8kDEAs93AJjB8u+iJHUDcG8J2vYU9sc=) 8: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=) 9: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: 6u5sB+7YNxVl5C/ghTigw0xTKib22IuiJgBkqwdLCcY=) 10: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=) 11: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=) 12: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: ZMSUrNWda6eAQ2y1dpcUsswV5gNptYXhl2o3730ebpY=) 13: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: bHeA3qoZ4lZQSCkiwi56f/mMODdImMmOLthfvH5JELs=) 14: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: AB7ONpZx9XVpWPf/ZL1Zkpp0nWBsAXZmnaIKchQVfSQ=) 15: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=) 16: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I=) 17: 7179245C619311EE9B52D046C4F9AE02.roa (hash: UNWWiixe7D0hC7+k0ni4RN//93pBfhiLfmqDqnPNyLE=) 18: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=) 19: F862EC324E2311EF82ED4457C4F9AE02.roa (hash: KQkjxNzqPSCZ6/LFzFCTJ40N+JKFCc/EDksFhJTO7e0=) 20: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=) 21: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: 9PoXAO44TxKXmsPza4H+BeSPhhDx3DGw5cMzvt2XV6Q=) 22: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: UOFsEyRUeoUA0A9/Nio2knAXvgMc2yvIGUft0ltmKhI=) 23: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: RZl2cb5dn6ASnfAVKfz/IPxBU98j/kEEE2Beq2zR6Oc=) 24: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA=) 25: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: rvY+LkMKAD7I9F4fJqFK4vOJYN8p/UI2Ku0scGCRPiA=) 26: 37E946F4902C11EA898EFD7FC4F9AE02.roa (hash: k5hwToFGF2YVUVlYfpHmB3V0k3Woizg0namGJUOkl9g=) 27: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: pCZkPuBFHsSu/4sLLOtoITD4qq/HQqQZRN16R/bkpiU=) 28: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: Abn6jVylboaSLiKBPnyzjN9v9cXF+QhNGF8xH9KRXC8=) 29: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: ViLxILuMa3CBIFauG3NtJHg9AZOzslFDPDkZtOMmV6c=) 30: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: 11TByYSsblneUXhUk+j5cqeZWCsrnJ0LEBcJaF4T/h8=) 31: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: 8Vt0vedoklkslOnz2Z1wL8KgTgWALQ+K4RanzdNW1jE=) 32: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: 1v/FDo+782n5aBhE9sC6RKfy+7DKw89dbwb0xEns3Bg=) 33: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: hipDqtuA6tKa/DovXP31v3QUE5kTEzKq8fl//VHu/GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13993 (0x36a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: May 12 14:20:24 2025 GMT Not After : May 19 14:20:24 2025 GMT Subject: CN=682203a8-f8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:3d:42:b4:d0:0c:36:b5:3c:3d:a6:8c:a9: 64:05:64:33:3a:62:72:44:51:a0:43:4d:e2:4d:2d: 7c:9e:8b:d9:4f:ee:6c:0d:a7:6a:47:d4:57:6b:e9: b6:58:30:79:ee:b2:3f:a5:be:d6:da:49:41:80:22: f7:4d:bb:5d:b4:c9:15:94:e4:8f:ad:00:d7:25:a5: 1f:9e:c8:1f:10:7c:82:2d:08:8a:52:7a:12:35:d4: a3:79:1e:a1:c3:d4:97:36:32:44:d3:6e:f4:18:78: 08:d9:3f:97:13:33:24:ce:6b:df:c2:bc:d2:de:39: 65:d7:66:21:f0:dd:2c:70:50:0f:10:34:21:76:8d: cf:48:f6:16:e8:22:9a:c5:cf:69:ad:6d:2c:2d:90: 19:5b:24:40:a3:58:9b:4f:2a:e0:83:6c:63:ac:7d: 25:ac:25:42:de:3a:7d:e8:19:e0:61:eb:f1:17:aa: 8d:da:8b:df:38:bb:14:4d:5d:88:37:e3:ac:74:e0: c7:47:df:dd:4b:90:56:ff:b9:d1:e3:b9:d2:fa:94: f7:3e:2b:bb:ae:8a:1b:12:ad:fc:fa:f6:26:08:d6: f9:e4:1b:ec:62:90:ce:e7:cb:49:e7:38:68:eb:d6: 08:b0:24:1e:bb:30:d0:db:ef:2c:65:35:63:9a:71: f4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:41:2E:12:7C:A6:3A:90:18:1B:EE:BA:55:A1:0F:1F:A2:59:46:C6 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:6c:ee:10:e5:6e:1c:b5:69:2d:59:38:73:62:43:c2:dc:42: cd:7c:97:3b:f0:4b:ab:6d:4a:fd:f4:99:fc:79:cb:aa:d6:ac: c3:a3:a8:4d:8b:2e:ad:c4:79:20:2c:af:62:34:7d:21:23:cd: 6e:75:1d:78:91:75:77:45:20:80:05:a0:00:3e:3a:54:a0:d5: ac:c7:e8:99:0e:05:b6:09:a0:63:74:c4:be:05:db:f7:4c:c6: 59:68:92:ac:ec:c3:ab:cc:29:6c:ec:9a:a0:4d:9f:e1:cf:6e: 9e:1f:64:45:ad:44:69:34:68:78:02:81:e0:ae:0c:69:2f:34: 6d:f8:a4:d1:b6:bd:5b:24:b4:b9:65:b5:e6:e3:e5:4f:30:c0: db:dd:e4:84:71:0c:75:da:8a:b2:87:95:59:52:99:c8:3f:14: e4:45:48:d5:fc:c3:c9:a7:a7:30:62:e9:ff:5d:82:df:e5:de: 47:dd:c7:71:92:53:38:47:ee:5a:e2:64:17:c7:7c:99:04:93: 7e:e5:d5:99:41:6e:84:70:e5:45:01:7e:7e:9d:1e:f2:45:0b: a3:4c:30:55:3b:f7:56:c1:04:88:4a:2a:f0:fb:81:bd:ec:36: 79:f0:65:84:74:29:cf:43:17:97:95:e3:59:a0:88:87:c9:a0: b0:ff:e2:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjUwNTEyMTQyMDI0WhcNMjUwNTE5MTQyMDI0WjAYMRYwFAYD VQQDEw02ODIyMDNhOC1mOGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdw9QrTQDDa1PD2mjKlkBWQzOmJyRFGgQ03iTS18novZT+5sDadqR9RXa+m2 WDB57rI/pb7W2klBgCL3TbtdtMkVlOSPrQDXJaUfnsgfEHyCLQiKUnoSNdSjeR6h w9SXNjJE0270GHgI2T+XEzMkzmvfwrzS3jll12Yh8N0scFAPEDQhdo3PSPYW6CKa xc9prW0sLZAZWyRAo1ibTyrgg2xjrH0lrCVC3jp96BngYevxF6qN2ovfOLsUTV2I N+OsdODHR9/dS5BW/7nR47nS+pT3Piu7roobEq38+vYmCNb55BvsYpDO58tJ5zho 69YIsCQeuzDQ2+8sZTVjmnH0CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhBLhJ8 pjqQGBvuulWhDx+iWUbGMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCbO4Q5W4ctWktWThzYkPC3ELNfJc78EurbUr99Jn8ecuq1qzDo6hN iy6txHkgLK9iNH0hI81udR14kXV3RSCABaAAPjpUoNWsx+iZDgW2CaBjdMS+Bdv3 TMZZaJKs7MOrzCls7JqgTZ/hz26eH2RFrURpNGh4AoHgrgxpLzRt+KTRtr1bJLS5 ZbXm4+VPMMDb3eSEcQx12oqyh5VZUpnIPxTkRUjV/MPJp6cwYun/XYLf5d5H3cdx klM4R+5a4mQXx3yZBJN+5dWZQW6EcOVFAX5+nR7yRQujTDBVO/dWwQSISirw+4G9 7DZ58GWEdCnPQxeXleNZoIiHyaCw/+Lw -----END CERTIFICATE-----Generated at Tue May 13 18:25:18 2025 by rpki-client