$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json) Hash identifier: H9GjIAmaZk0CBB3IPPuGvz5Nv39vYx4ZuE5NlZMtWaY= Subject key identifier: 32:3B:F1:E1:BD:0F:85:BF:B6:0F:89:98:FB:52:08:8A:33:11:38:50 Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Certificate serial: 0BBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft Manifest number: 0BA2 Signing time: Fri 08 Aug 2025 19:17:01 +0000 Manifest this update: Fri 08 Aug 2025 19:17:00 +0000 Manifest next update: Fri 15 Aug 2025 19:17:00 +0000 Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: Wn1hVDNv4AERAvlqEsCtDT00crmqVIyKfBQT3YQAOys=) 2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: WohY8W0xB97fJlzc0NXwUcNoZJQ/eR2hTSMO+u9osbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3007 (0xbbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Validity Not Before: Aug 8 19:17:00 2025 GMT Not After : Aug 15 19:17:00 2025 GMT Subject: CN=68964d2c-b064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:63:54:42:58:d8:b3:a2:f6:bc:e2:b0:80: 7e:86:3c:05:3c:d4:f5:e9:d8:a4:e7:8c:39:53:7f: f0:b4:df:76:1f:0c:cc:7c:59:03:5a:fc:fd:2c:13: 58:56:db:f9:46:7b:7e:d4:29:02:bb:e5:9e:70:4d: 27:6c:5e:2e:e8:59:96:27:8d:b3:98:ac:a8:e0:97: c2:14:31:c9:0f:02:06:63:c9:cb:19:c2:73:6b:04: 44:95:f1:84:6a:c2:88:35:42:e0:39:d5:c5:1b:14: 05:77:bf:ed:11:99:07:42:ba:32:03:b9:8e:bb:3e: b6:4d:84:82:5e:b1:f1:89:c1:25:f3:d9:e4:5d:44: d9:45:13:d5:ee:a5:e0:76:90:d9:8f:82:73:d1:28: 2c:8f:15:6f:bb:cb:ca:ce:d3:f0:dd:12:13:3b:2c: 79:b3:f6:18:97:b6:bf:f8:74:ca:30:c8:73:cc:77: 85:e5:21:e0:73:a4:c7:8d:02:e6:7a:f1:c3:e0:74: 01:a4:a2:2a:35:1f:42:fd:12:1b:25:c0:a3:5f:5c: 45:7b:7b:76:ac:7d:4c:a5:bb:19:d2:ae:41:c5:2d: a5:e5:ce:79:5d:c1:a7:69:cd:59:b2:21:95:75:f4: cd:53:7a:92:17:a2:bd:33:69:f3:78:a0:57:0e:1f: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3B:F1:E1:BD:0F:85:BF:B6:0F:89:98:FB:52:08:8A:33:11:38:50 X509v3 Authority Key Identifier: keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:aa:7a:95:57:99:0f:88:d3:c3:2f:15:bd:0f:6f:64:a5:73: a5:29:9d:34:eb:f7:89:1c:9e:0c:10:7b:01:c5:1f:f8:32:4e: 5b:c7:19:e8:1f:c6:e7:55:64:53:ae:38:6c:01:b0:00:03:52: 09:7e:1e:bb:32:5b:20:39:3f:7a:35:67:0c:64:46:66:b7:19: b1:fa:4f:42:7c:75:93:4c:97:99:6a:9e:f9:95:a4:4e:91:a8: 88:2b:90:2d:9d:bb:53:e9:7b:1d:f6:54:95:7e:0d:2b:77:75: 91:c7:af:eb:70:f5:ea:2b:2b:7b:0d:ff:7d:67:bb:81:43:01: a0:97:71:03:07:6f:8d:c1:fe:a0:d6:53:95:52:da:6d:87:19: a8:70:07:f4:43:3e:1d:02:3d:b8:65:c4:c5:fe:bb:e0:00:4f: 3b:02:2c:25:a1:56:a3:41:b7:11:6c:5a:27:f4:26:6c:95:f9: 6f:2b:3a:97:d4:f5:7a:fe:4f:38:e8:e0:51:45:57:21:f9:e5: 74:bd:95:44:01:b3:01:21:8a:77:bd:d3:b6:17:d3:24:e3:d3: 16:6c:a5:df:31:d2:50:a2:0d:1c:4e:63:a7:1d:d9:dc:9b:2c: e6:73:a8:96:75:8b:57:a7:f1:19:41:17:33:f3:29:4a:ca:c2: a5:db:99:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFQjExMTAvBgNVBAUTKEMyODg3OUZFQzEwQ0U5MjlDMUNGMkU1Qjk3ODg2RjFE N0VBMTdDNUEwHhcNMjUwODA4MTkxNzAwWhcNMjUwODE1MTkxNzAwWjAYMRYwFAYD VQQDEw02ODk2NGQyYy1iMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpxjVEJY2LOi9rzisIB+hjwFPNT16dik54w5U3/wtN92HwzMfFkDWvz9LBNY Vtv5Rnt+1CkCu+WecE0nbF4u6FmWJ42zmKyo4JfCFDHJDwIGY8nLGcJzawRElfGE asKINULgOdXFGxQFd7/tEZkHQroyA7mOuz62TYSCXrHxicEl89nkXUTZRRPV7qXg dpDZj4Jz0SgsjxVvu8vKztPw3RITOyx5s/YYl7a/+HTKMMhzzHeF5SHgc6THjQLm evHD4HQBpKIqNR9C/RIbJcCjX1xFe3t2rH1MpbsZ0q5BxS2l5c55XcGnac1ZsiGV dfTNU3qSF6K9M2nzeKBXDh+h8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDI78eG9 D4W/tg+JmPtSCIozEThQMB8GA1UdIwQYMBaAFMKIef7BDOkpwc8uW5eIbx1+oXxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkVCMS80QzVGNzIwODMx RjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZTbkJ6eTVibDRodkhYNmhm Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvaDVfc0VNNlNuQnp5NWJsNGh2SFg2aGZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkVCMS80QzVGNzIwODMxRjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZT bkJ6eTVibDRodkhYNmhmRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQqnqVV5kPiNPDLxW9D29kpXOlKZ006/eJHJ4MEHsBxR/4Mk5bxxno H8bnVWRTrjhsAbAAA1IJfh67MlsgOT96NWcMZEZmtxmx+k9CfHWTTJeZap75laRO kaiIK5AtnbtT6Xsd9lSVfg0rd3WRx6/rcPXqKyt7Df99Z7uBQwGgl3EDB2+Nwf6g 1lOVUtpthxmocAf0Qz4dAj24ZcTF/rvgAE87AiwloVajQbcRbFon9CZslflvKzqX 1PV6/k846OBRRVch+eV0vZVEAbMBIYp3vdO2F9Mk49MWbKXfMdJQog0cTmOnHdnc myzmc6iWdYtXp/EZQRcz8ylKysKl25mB -----END CERTIFICATE-----Generated at Sun Aug 10 18:20:55 2025 by rpki-client