$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft File: RED2xCLpUAx9RqYtfetw0zqIdQ4.mft (raw, json) Hash identifier: 02FpxbQUk/Dlg99ooYwf8GA6IfgYX2eXfbp3HuLI0bE= Subject key identifier: B1:0A:39:6F:ED:9D:4F:A4:CD:7B:B2:33:21:2D:8B:89:16:6C:3C:67 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 36A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft Manifest number: 354B Signing time: Mon 28 Apr 2025 14:20:25 +0000 Manifest this update: Mon 28 Apr 2025 14:20:25 +0000 Manifest next update: Mon 05 May 2025 14:20:25 +0000 Files and hashes: 1: RED2xCLpUAx9RqYtfetw0zqIdQ4.crl (hash: 0dc+ccyw+p1PUoQK9k4FvmUUrcONkyH0fHB0vH//CX8=) 2: B945666A66B111EEA69EB059C4F9AE02.roa (hash: P1e6T3fUvsOYCEl6lkzY5SukytZoDguqwb/uoxZkVKM=) 3: 75215386652A11EF8B5EB953C4F9AE02.roa (hash: VsF6mP7a/GSIQ7I2UEu/NtkZYfH3IqoObHXoyPSC370=) 4: F46970C4354511EBB04ACA53C4F9AE02.roa (hash: cYsL4Km2z8/eLaDdJuE1fTn6jNePayD7xyunTnEo6lY=) 5: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (hash: 27QhH8i/0gJ0//H+2ptMZ+EyBceS5sMbMIEu659I9v8=) 6: 34AB2020902C11EA898EFD7FC4F9AE02.roa (hash: ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=) 7: 35E6778C902C11EA898EFD7FC4F9AE02.roa (hash: iLCML5NbSaRD8kDEAs93AJjB8u+iJHUDcG8J2vYU9sc=) 8: A7AD52CE961811EDB002DB30C4F9AE02.roa (hash: r7QIlwWYsZB8pWCMd1mULzDtwUNkXdvZcRfm7MCZd2g=) 9: 36BB144C902C11EA898EFD7FC4F9AE02.roa (hash: 6u5sB+7YNxVl5C/ghTigw0xTKib22IuiJgBkqwdLCcY=) 10: 3E939EC8902C11EA898EFD7FC4F9AE02.roa (hash: UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=) 11: 396955AA902C11EA898EFD7FC4F9AE02.roa (hash: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY=) 12: 0F8978CC1D3111EB9ED04852C4F9AE02.roa (hash: ZMSUrNWda6eAQ2y1dpcUsswV5gNptYXhl2o3730ebpY=) 13: 816B5C3685AE11EB82E3AB17C4F9AE02.roa (hash: bHeA3qoZ4lZQSCkiwi56f/mMODdImMmOLthfvH5JELs=) 14: 0C9C9680A34711EA996BB179C4F9AE02.roa (hash: AB7ONpZx9XVpWPf/ZL1Zkpp0nWBsAXZmnaIKchQVfSQ=) 15: 101569A41D3111EB9ED04852C4F9AE02.roa (hash: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU=) 16: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (hash: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I=) 17: 7179245C619311EE9B52D046C4F9AE02.roa (hash: UNWWiixe7D0hC7+k0ni4RN//93pBfhiLfmqDqnPNyLE=) 18: 8BB62454AEAA11EA816DD75DC4F9AE02.roa (hash: 6wvbgKooIY282F33+EeUOZENKHKV/xlvS8ELBaHperA=) 19: F862EC324E2311EF82ED4457C4F9AE02.roa (hash: KQkjxNzqPSCZ6/LFzFCTJ40N+JKFCc/EDksFhJTO7e0=) 20: 3AC61D98902C11EA898EFD7FC4F9AE02.roa (hash: Nl8oOTML2O046HmRiWF3FKtrQWfA7+nkN22nIPoncb0=) 21: F5BD52E2085511EF9C53A557C4F9AE02.roa (hash: 9PoXAO44TxKXmsPza4H+BeSPhhDx3DGw5cMzvt2XV6Q=) 22: 976CE5744E2611EFA302D279C4F9AE02.roa (hash: UOFsEyRUeoUA0A9/Nio2knAXvgMc2yvIGUft0ltmKhI=) 23: 374334EE902C11EA898EFD7FC4F9AE02.roa (hash: RZl2cb5dn6ASnfAVKfz/IPxBU98j/kEEE2Beq2zR6Oc=) 24: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (hash: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA=) 25: DDE4B378619211EEB366AF27C4F9AE02.roa (hash: rvY+LkMKAD7I9F4fJqFK4vOJYN8p/UI2Ku0scGCRPiA=) 26: 37E946F4902C11EA898EFD7FC4F9AE02.roa (hash: k5hwToFGF2YVUVlYfpHmB3V0k3Woizg0namGJUOkl9g=) 27: 353A7194902C11EA898EFD7FC4F9AE02.roa (hash: pCZkPuBFHsSu/4sLLOtoITD4qq/HQqQZRN16R/bkpiU=) 28: FF54461CC7BC11EB9E6C9A69C4F9AE02.roa (hash: Abn6jVylboaSLiKBPnyzjN9v9cXF+QhNGF8xH9KRXC8=) 29: 39F7B4EE902C11EA898EFD7FC4F9AE02.roa (hash: ViLxILuMa3CBIFauG3NtJHg9AZOzslFDPDkZtOMmV6c=) 30: BB09B220085111EFA54E4D54C4F9AE02.roa (hash: 11TByYSsblneUXhUk+j5cqeZWCsrnJ0LEBcJaF4T/h8=) 31: 3420BD0E902C11EA898EFD7FC4F9AE02.roa (hash: 8Vt0vedoklkslOnz2Z1wL8KgTgWALQ+K4RanzdNW1jE=) 32: 38B031A6902C11EA898EFD7FC4F9AE02.roa (hash: 1v/FDo+782n5aBhE9sC6RKfy+7DKw89dbwb0xEns3Bg=) 33: 20B5026203BC11EB9D8B117AC4F9AE02.roa (hash: hipDqtuA6tKa/DovXP31v3QUE5kTEzKq8fl//VHu/GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13986 (0x36a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Apr 28 14:20:25 2025 GMT Not After : May 5 14:20:25 2025 GMT Subject: CN=680f8ea9-21df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:61:f4:d5:b2:29:fd:cd:bf:58:9f:3a:9a:77: 9b:86:c1:7d:cd:12:84:d9:06:c8:5b:95:d0:2f:29: 9d:95:ae:67:b3:1d:4a:91:8b:05:51:05:64:eb:b9: 46:88:51:60:03:0a:8a:26:13:36:d6:88:4e:92:91: d2:25:ab:1b:29:7e:21:f6:07:12:62:73:86:56:bd: 14:39:10:08:37:ae:cc:e1:57:73:c6:83:8d:76:21: 77:7a:a8:4a:3d:2a:96:84:d9:ec:ab:5f:90:cc:b3: cb:ab:ab:8d:e9:b3:10:ba:95:d3:cc:e3:c5:3c:d8: 6d:4f:b3:28:79:ec:94:cc:34:c8:7a:3a:3b:fa:2e: 26:5f:d2:fe:5f:e7:55:31:67:c7:2e:3d:f4:96:bc: d1:2f:cb:97:cf:e5:5b:bc:6c:2a:30:b5:47:33:e3: 45:10:2c:8e:c6:56:04:8d:3c:f1:00:ee:2e:7b:21: 01:90:27:75:7c:8b:0d:b3:2e:56:16:15:7a:2c:4c: fa:fb:56:fd:e1:01:ed:43:8b:7c:a1:2b:d8:bc:62: b7:9c:c8:16:0b:4b:c8:1d:02:d8:ff:04:37:ee:25: 33:13:64:e4:c2:b4:b5:0c:f8:bb:dc:7b:de:ba:23: 83:c6:a0:05:10:6c:bd:7f:4e:f9:4a:23:ca:e3:90: 15:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0A:39:6F:ED:9D:4F:A4:CD:7B:B2:33:21:2D:8B:89:16:6C:3C:67 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:79:24:b7:ef:f1:47:14:16:c2:31:b8:54:93:98:86:de:5d: ef:2b:b1:26:e1:8b:d5:cc:61:1b:cd:dd:2d:43:3b:76:41:09: 21:a8:73:10:37:44:9a:d1:44:3f:d6:04:97:1b:a7:1b:60:1d: 8e:51:73:92:cf:d9:a3:18:29:9a:0b:f0:a2:54:39:9d:8f:d2: 30:9d:fd:2c:75:a8:99:48:8f:ea:d4:96:c1:4b:2d:01:91:5b: 7d:46:5e:cd:51:9f:21:8c:7f:fd:db:7f:cf:ec:03:9c:5e:f5: 41:fe:b6:7e:65:9c:7e:90:19:10:cd:5c:8b:cd:33:73:4a:89: 30:bb:ef:a8:3a:ec:8d:8b:47:ec:da:e2:79:54:64:73:69:2f: d6:b4:85:08:26:29:e4:4b:f5:5e:9e:42:40:49:5b:f0:2c:8c: 0f:2a:fc:77:d4:f8:41:eb:35:a1:95:97:04:ab:e6:50:36:69: a5:94:47:6c:2b:25:2b:e7:94:6a:fc:48:d4:87:66:9b:ad:29: 13:51:d3:ac:98:01:f1:4e:0c:39:da:f3:2c:c0:cb:b4:6d:c5: 21:62:97:5e:bd:77:83:a7:f8:86:50:1c:b0:0c:4f:c1:9e:67: 0b:fa:2e:42:0a:8d:0c:e3:5e:99:5b:81:3d:30:f8:4d:43:51: b6:c1:ec:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjUwNDI4MTQyMDI1WhcNMjUwNTA1MTQyMDI1WjAYMRYwFAYD VQQDEw02ODBmOGVhOS0yMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2H01bIp/c2/WJ86mnebhsF9zRKE2QbIW5XQLymdla5nsx1KkYsFUQVk67lG iFFgAwqKJhM21ohOkpHSJasbKX4h9gcSYnOGVr0UORAIN67M4VdzxoONdiF3eqhK PSqWhNnsq1+QzLPLq6uN6bMQupXTzOPFPNhtT7MoeeyUzDTIejo7+i4mX9L+X+dV MWfHLj30lrzRL8uXz+VbvGwqMLVHM+NFECyOxlYEjTzxAO4ueyEBkCd1fIsNsy5W FhV6LEz6+1b94QHtQ4t8oSvYvGK3nMgWC0vIHQLY/wQ37iUzE2TkwrS1DPi73Hve uiODxqAFEGy9f075SiPK45AVZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEKOW/t nU+kzXuyMyEti4kWbDxnMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS9BQjQ0Nzk3MjFENzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVB eDlScVl0ZmV0dzB6cUlkUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5eSS37/FHFBbCMbhUk5iG3l3vK7Em4YvVzGEbzd0tQzt2QQkhqHMQ N0Sa0UQ/1gSXG6cbYB2OUXOSz9mjGCmaC/CiVDmdj9Iwnf0sdaiZSI/q1JbBSy0B kVt9Rl7NUZ8hjH/923/P7AOcXvVB/rZ+ZZx+kBkQzVyLzTNzSokwu++oOuyNi0fs 2uJ5VGRzaS/WtIUIJinkS/VenkJASVvwLIwPKvx31PhB6zWhlZcEq+ZQNmmllEds KyUr55Rq/EjUh2abrSkTUdOsmAHxTgw52vMswMu0bcUhYpdevXeDp/iGUBywDE/B nmcL+i5CCo0M416ZW4E9MPhNQ1G2weyQ -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:46 2025 by rpki-client on console.sobornost.net