$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json) Hash identifier: y1dnxioYBkEeKSeOJPgz90lvHAeyFBbdP5aoKsDt1vM= Subject key identifier: 03:C4:A6:B2:2E:0E:43:58:86:D8:57:DB:F0:4E:B2:62:C0:EE:D7:AC Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Certificate serial: 0BEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft Manifest number: 0BCF Signing time: Tue 04 Nov 2025 19:03:30 +0000 Manifest this update: Tue 04 Nov 2025 19:03:29 +0000 Manifest next update: Tue 11 Nov 2025 19:03:29 +0000 Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: iZw2PZPGrzy7Ta3nwi1J/OWPd0wEwY8gysKva2Wdzak=) 2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: WohY8W0xB97fJlzc0NXwUcNoZJQ/eR2hTSMO+u9osbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3052 (0xbec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Validity Not Before: Nov 4 19:03:29 2025 GMT Not After : Nov 11 19:03:29 2025 GMT Subject: CN=690a4e01-0572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:e7:e3:5f:e0:77:7e:6f:0e:ab:20:c6:27:ef: fd:96:d5:56:65:06:68:d9:df:e3:e1:0a:62:9d:9b: 94:2a:b8:e9:ad:ca:6f:50:89:4c:cb:f7:78:0a:0c: 8e:c5:20:26:12:17:09:95:1c:f7:7f:36:d7:c4:ee: 09:68:03:7d:72:f2:76:37:0e:39:9e:b5:e2:13:d5: f6:6d:cb:09:fc:62:c2:9a:c0:49:2e:30:f1:7f:4a: 87:5e:1e:98:04:31:c5:70:ef:7b:61:30:00:ca:d9: 71:53:87:f0:cc:06:bb:49:b2:f9:99:a9:fa:18:8c: d1:24:08:99:7e:e3:04:05:b5:5d:c2:ca:b6:c8:aa: bd:08:aa:ca:f8:57:dc:50:39:d2:a1:f2:00:89:bd: fc:e2:99:11:00:b4:eb:fd:90:14:ff:d1:62:53:aa: 76:d8:bd:87:3b:64:eb:c6:0f:57:83:f4:7a:08:08: db:51:d7:f8:50:d7:b7:74:12:f3:45:f8:d6:ed:e3: 26:c5:58:81:e3:ee:fb:5c:e0:83:98:5f:5b:13:7a: ac:ff:3d:a9:78:40:7e:d2:64:d3:a7:e0:6a:a6:c7: 03:dc:f9:3b:61:86:1f:9d:b3:40:f5:c0:37:04:8c: 92:e4:bd:a5:97:13:ed:39:f8:a8:1b:e6:af:5e:f1: 46:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C4:A6:B2:2E:0E:43:58:86:D8:57:DB:F0:4E:B2:62:C0:EE:D7:AC X509v3 Authority Key Identifier: keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:c4:a4:0a:51:67:bf:2b:0e:cf:79:5a:f9:82:34:d7:58:07: 58:69:9c:c4:41:d0:16:b2:4c:0f:58:85:48:1e:f6:d9:18:04: e3:eb:6d:5b:0f:d1:5d:13:eb:4f:18:43:71:d9:5e:fc:9d:34: 8f:0a:d2:10:5f:1d:1e:3f:bf:1f:85:cf:76:1b:06:b8:13:77: 02:6b:28:95:5c:68:fd:eb:aa:d4:b8:f0:b6:66:1a:ff:2a:7b: 85:53:9e:6a:b4:ea:79:03:4c:26:43:79:ed:78:0c:2d:1d:6e: b9:15:d7:f0:78:16:62:8e:32:d3:91:96:b7:43:e1:e8:fe:81: 39:7d:d4:df:93:bc:7b:cf:52:b6:cc:c3:46:ca:0b:a4:fe:5f: fd:e9:f6:62:02:fe:59:61:ba:32:6b:97:05:ba:a9:51:2f:19: 9f:51:f6:a6:d4:f8:08:09:05:24:49:fa:00:13:18:72:9c:df: 68:ba:05:8b:03:80:e6:1f:9b:47:8d:38:8e:04:bf:fa:b0:65: e4:32:fe:1f:a6:89:66:98:ea:98:2c:df:13:18:b3:7d:96:06: 26:78:25:91:98:f9:d5:0c:5d:11:0e:dc:e0:5c:e6:06:42:9e: 61:c5:d4:71:57:8a:2c:90:5a:9e:0c:58:89:8c:af:b1:a2:e0: 9b:d6:6c:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFQjExMTAvBgNVBAUTKEMyODg3OUZFQzEwQ0U5MjlDMUNGMkU1Qjk3ODg2RjFE N0VBMTdDNUEwHhcNMjUxMTA0MTkwMzI5WhcNMjUxMTExMTkwMzI5WjAYMRYwFAYD VQQDEw02OTBhNGUwMS0wNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/OfjX+B3fm8OqyDGJ+/9ltVWZQZo2d/j4QpinZuUKrjprcpvUIlMy/d4CgyO xSAmEhcJlRz3fzbXxO4JaAN9cvJ2Nw45nrXiE9X2bcsJ/GLCmsBJLjDxf0qHXh6Y BDHFcO97YTAAytlxU4fwzAa7SbL5man6GIzRJAiZfuMEBbVdwsq2yKq9CKrK+Ffc UDnSofIAib384pkRALTr/ZAU/9FiU6p22L2HO2Trxg9Xg/R6CAjbUdf4UNe3dBLz RfjW7eMmxViB4+77XOCDmF9bE3qs/z2peEB+0mTTp+BqpscD3Pk7YYYfnbNA9cA3 BIyS5L2llxPtOfioG+avXvFGpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPEprIu DkNYhthX2/BOsmLA7tesMB8GA1UdIwQYMBaAFMKIef7BDOkpwc8uW5eIbx1+oXxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkVCMS80QzVGNzIwODMx RjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZTbkJ6eTVibDRodkhYNmhm Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvaDVfc0VNNlNuQnp5NWJsNGh2SFg2aGZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkVCMS80QzVGNzIwODMxRjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZT bkJ6eTVibDRodkhYNmhmRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUxKQKUWe/Kw7PeVr5gjTXWAdYaZzEQdAWskwPWIVIHvbZGATj621b D9FdE+tPGENx2V78nTSPCtIQXx0eP78fhc92Gwa4E3cCayiVXGj966rUuPC2Zhr/ KnuFU55qtOp5A0wmQ3nteAwtHW65FdfweBZijjLTkZa3Q+Ho/oE5fdTfk7x7z1K2 zMNGyguk/l/96fZiAv5ZYboya5cFuqlRLxmfUfam1PgICQUkSfoAExhynN9ougWL A4DmH5tHjTiOBL/6sGXkMv4fpolmmOqYLN8TGLN9lgYmeCWRmPnVDF0RDtzgXOYG Qp5hxdRxV4oskFqeDFiJjK+xouCb1mzS -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:21 2025 by rpki-client