$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft File: RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json) Hash identifier: FbHjvKazM6FAOCi9onFPKR+q4/i3dWrcGjtKvdtg+EM= Subject key identifier: 08:B5:BE:C7:75:EE:23:F2:00:6C:D9:4D:C2:20:C7:CA:E7:71:FE:DA Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 36DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft Manifest number: 3579 Signing time: Wed 02 Jul 2025 14:20:42 +0000 Manifest this update: Wed 02 Jul 2025 14:20:42 +0000 Manifest next update: Wed 09 Jul 2025 14:20:42 +0000 Files and hashes: 1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: xkbtYX7svUusTenWI7NEVs0FDEdLm+wxdyLUHidJgCQ=) 2: 8ECE13F244FC11F08FADF180C4F9AE02.roa (hash: Wqmw9k2tUUV+JpUW2UkJgSyC1pP6oE8rtXQ0CSxbtRk=) 3: B945666A66B111EEA69EB059C4F9AE02.roa (hash: P1e6T3fUvsOYCEl6lkzY5SukytZoDguqwb/uoxZkVKM=) 4: 75215386652A11EF8B5EB953C4F9AE02.roa (hash: VsF6mP7a/GSIQ7I2UEu/NtkZYfH3IqoObHXoyPSC370=) 5: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: cYsL4Km2z8/eLaDdJuE1fTn6jNePayD7xyunTnEo6lY=) 6: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: 27QhH8i/0gJ0//H+2ptMZ+EyBceS5sMbMIEu659I9v8=) 7: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=) 8: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: iLCML5NbSaRD8kDEAs93AJjB8u+iJHUDcG8J2vYU9sc=) 9: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=) 10: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: 6u5sB+7YNxVl5C/ghTigw0xTKib22IuiJgBkqwdLCcY=) 11: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=) 12: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=) 13: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: ZMSUrNWda6eAQ2y1dpcUsswV5gNptYXhl2o3730ebpY=) 14: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: bHeA3qoZ4lZQSCkiwi56f/mMODdImMmOLthfvH5JELs=) 15: 7179245C619311EE9B52D046C4F9AE02.roa (hash: OIoiXK5HUidUkMvfbT28pcn/cDbn540RgN8Pi5zH+4Y=) 16: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: AB7ONpZx9XVpWPf/ZL1Zkpp0nWBsAXZmnaIKchQVfSQ=) 17: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=) 18: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I=) 19: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=) 20: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=) 21: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: bQNKNVtSrkbmOTLrcZePdZ/lpfvMrtslhHEI0z5+rM0=) 22: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: UOFsEyRUeoUA0A9/Nio2knAXvgMc2yvIGUft0ltmKhI=) 23: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: RZl2cb5dn6ASnfAVKfz/IPxBU98j/kEEE2Beq2zR6Oc=) 24: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA=) 25: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: rvY+LkMKAD7I9F4fJqFK4vOJYN8p/UI2Ku0scGCRPiA=) 26: 37E946F4902C11EA898EFD7FC4F9AE02.roa (hash: k5hwToFGF2YVUVlYfpHmB3V0k3Woizg0namGJUOkl9g=) 27: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: pCZkPuBFHsSu/4sLLOtoITD4qq/HQqQZRN16R/bkpiU=) 28: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: Abn6jVylboaSLiKBPnyzjN9v9cXF+QhNGF8xH9KRXC8=) 29: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: ViLxILuMa3CBIFauG3NtJHg9AZOzslFDPDkZtOMmV6c=) 30: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: 11TByYSsblneUXhUk+j5cqeZWCsrnJ0LEBcJaF4T/h8=) 31: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: 8Vt0vedoklkslOnz2Z1wL8KgTgWALQ+K4RanzdNW1jE=) 32: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: 1v/FDo+782n5aBhE9sC6RKfy+7DKw89dbwb0xEns3Bg=) 33: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: hipDqtuA6tKa/DovXP31v3QUE5kTEzKq8fl//VHu/GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14042 (0x36da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Jul 2 14:20:42 2025 GMT Not After : Jul 9 14:20:42 2025 GMT Subject: CN=6865403a-21d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:34:9e:02:6e:c2:26:d7:81:cf:42:01:da: a4:12:27:1b:43:9e:14:fd:f4:6b:c4:47:3d:ac:03: 73:1a:46:50:82:90:15:92:e5:ca:34:c7:0f:da:70: f2:75:f9:50:d0:1f:08:10:a8:eb:6a:cb:7c:3a:0a: f6:ab:c8:fb:dd:3c:2f:d3:35:7d:bb:6e:1f:34:1f: 40:c2:7a:e2:73:3e:7f:1c:53:c8:8e:27:94:ed:cc: 40:3b:e3:c8:19:84:62:09:4a:38:f6:7e:12:d0:65: 49:bd:9b:60:0a:74:8d:02:1b:be:d5:69:cd:7e:a5: 86:78:bc:ba:2d:86:db:9c:ac:14:af:dd:18:bb:af: c5:0f:ec:d6:7c:0d:9a:37:bb:0a:58:10:43:d8:98: bc:c7:af:5e:fd:65:89:15:33:26:75:96:a2:6b:fa: a5:42:65:c4:8f:a5:d3:de:b4:9b:e3:bd:81:e8:e2: 91:66:1a:35:54:a3:0a:8c:be:54:df:24:52:fc:af: 91:49:62:80:6f:a4:e6:7b:c2:73:b9:12:5e:80:70: fa:2d:a9:e1:17:fe:b6:db:bc:e0:2d:5e:b6:4e:b5: 46:ce:0d:0c:56:cb:ee:39:7a:c5:91:23:7d:13:29: d4:47:0a:4b:7f:06:c6:48:53:7b:f9:f8:4f:1f:e9: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B5:BE:C7:75:EE:23:F2:00:6C:D9:4D:C2:20:C7:CA:E7:71:FE:DA X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:fb:eb:b6:31:2c:12:3e:d2:ba:83:e0:ca:63:99:dc:29:2c: 39:9a:74:16:d1:26:ce:55:ac:2c:75:ad:5f:61:ac:48:cf:33: af:89:da:f7:e2:ae:b4:26:6c:13:ae:70:64:c3:45:8f:c9:c0: f2:64:6e:2b:72:99:8c:a4:4b:5c:4c:ca:d7:38:02:7b:6c:ae: 2a:23:c0:dc:61:c6:66:94:df:b7:14:f7:90:a0:73:13:e8:ee: 8c:ae:98:47:6a:0e:de:fa:17:0e:10:8d:4c:89:f9:1c:a5:11: 15:1d:b9:0e:ed:7a:ea:8e:32:5d:fc:1e:88:a2:8a:24:7a:aa: 06:65:82:d8:69:41:08:3e:2e:e0:ab:0f:8d:bd:39:30:74:cc: ed:13:d1:72:77:0d:16:42:5f:69:c2:29:e6:f5:03:74:18:80: 35:ed:cd:e1:90:85:f0:86:db:c7:18:97:12:5b:3e:b0:8e:bf: 53:fe:ef:8b:03:1e:c3:9e:89:2e:46:a7:82:ab:45:9c:6f:61: 69:44:22:d4:2b:86:43:67:21:2d:7e:a0:58:82:a5:ca:cb:f7: 01:84:90:d5:cd:1a:03:81:e0:75:f2:06:7b:b2:c9:b9:54:cb: d3:87:36:da:f0:eb:62:8c:86:f4:e1:d1:86:b0:39:8e:d2:f5: d2:4a:29:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjUwNzAyMTQyMDQyWhcNMjUwNzA5MTQyMDQyWjAYMRYwFAYD VQQDEw02ODY1NDAzYS0yMWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmQ0ngJuwibXgc9CAdqkEicbQ54U/fRrxEc9rANzGkZQgpAVkuXKNMcP2nDy dflQ0B8IEKjrast8Ogr2q8j73Twv0zV9u24fNB9Awnricz5/HFPIjieU7cxAO+PI GYRiCUo49n4S0GVJvZtgCnSNAhu+1WnNfqWGeLy6LYbbnKwUr90Yu6/FD+zWfA2a N7sKWBBD2Ji8x69e/WWJFTMmdZaia/qlQmXEj6XT3rSb472B6OKRZho1VKMKjL5U 3yRS/K+RSWKAb6Tme8JzuRJegHD6LanhF/6227zgLV62TrVGzg0MVsvuOXrFkSN9 EynURwpLfwbGSFN7+fhPH+ldgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAi1vsd1 7iPyAGzZTcIgx8rncf7aMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4++u2MSwSPtK6g+DKY5ncKSw5mnQW0SbOVawsda1fYaxIzzOvidr3 4q60JmwTrnBkw0WPycDyZG4rcpmMpEtcTMrXOAJ7bK4qI8DcYcZmlN+3FPeQoHMT 6O6MrphHag7e+hcOEI1MifkcpREVHbkO7XrqjjJd/B6IoookeqoGZYLYaUEIPi7g qw+NvTkwdMztE9Fydw0WQl9pwinm9QN0GIA17c3hkIXwhtvHGJcSWz6wjr9T/u+L Ax7DnokuRqeCq0Wcb2FpRCLUK4ZDZyEtfqBYgqXKy/cBhJDVzRoDgeB18gZ7ssm5 VMvThzba8OtijIb04dGGsDmO0vXSSime -----END CERTIFICATE-----Generated at Wed Jul 2 21:04:47 2025 by rpki-client