$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json) Hash identifier: KR5Uy/12DzCc5PN+IFssXgifN70JLV/Fi54GwqqoSy4= Subject key identifier: 22:DD:63:67:4E:1B:B2:43:3C:F6:4C:1D:7B:28:BD:FA:2E:02:D4:D1 Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Certificate serial: 0BB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft Manifest number: 0B9A Signing time: Thu 24 Jul 2025 19:11:54 +0000 Manifest this update: Thu 24 Jul 2025 19:11:54 +0000 Manifest next update: Thu 31 Jul 2025 19:11:54 +0000 Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: Df3XLWpicAQfejeftTsSKAIiCJBO4WnOs1xnNO+CZNA=) 2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: WohY8W0xB97fJlzc0NXwUcNoZJQ/eR2hTSMO+u9osbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 19:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2999 (0xbb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Validity Not Before: Jul 24 19:11:54 2025 GMT Not After : Jul 31 19:11:54 2025 GMT Subject: CN=6882857a-fcec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:d5:e6:be:67:75:c3:26:18:07:7e:28:d1: fe:84:97:5d:e6:8f:5e:91:48:af:42:71:f8:b5:cd: dc:60:a2:6a:87:3b:11:e8:2f:13:62:ee:67:ee:1d: 86:90:7b:29:c4:93:82:ab:ba:06:d5:08:08:a1:58: 76:6a:31:cb:1f:2a:22:60:9b:e0:be:2d:14:0b:e4: 64:e0:81:65:30:cc:2b:5b:fb:13:1c:5f:97:4b:46: 61:a3:80:00:34:fa:77:7d:5e:10:86:25:8d:98:30: 6a:f9:81:a4:03:49:5d:99:89:cc:54:2f:45:36:34: 0c:dc:34:b7:66:55:d4:6e:ee:0c:1f:25:07:43:45: e4:4f:32:94:4f:bc:1a:82:d0:e8:42:57:6f:17:bb: 8a:db:1d:00:a5:75:c1:a9:7d:6c:4b:bb:ea:bb:54: 82:1a:98:8b:63:78:65:49:45:00:3d:c0:7e:4c:d3: fb:eb:55:ce:c7:7d:85:1e:8e:2e:bf:71:b4:62:e9: db:21:b1:a5:ca:e6:89:a2:8b:74:0a:52:b2:62:69: 21:15:f7:98:b5:5c:eb:3c:42:e5:78:75:f6:d7:96: da:99:f4:3d:39:ad:ea:20:91:68:02:5e:9a:31:af: fe:52:53:8b:da:49:b7:55:88:27:7d:27:b4:54:e7: 52:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DD:63:67:4E:1B:B2:43:3C:F6:4C:1D:7B:28:BD:FA:2E:02:D4:D1 X509v3 Authority Key Identifier: keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f2:6c:81:e3:dd:62:9c:53:a8:6c:ec:6e:41:31:f6:9c:12: d9:99:bb:2c:94:2f:bd:43:36:d6:30:6d:84:b6:71:64:6c:4e: 2f:2e:19:1b:0d:48:f3:58:8f:77:ac:80:01:28:62:88:ff:29: c1:26:7a:91:63:13:f9:ff:8d:b6:84:f2:b9:0f:94:35:09:c1: 29:f9:2b:c1:5e:a6:20:e6:ca:1b:da:31:59:e8:bb:f2:02:a1: a7:5a:f6:7a:d4:31:4a:7a:63:4b:12:9a:bc:ce:33:e9:0c:da: de:9d:57:35:57:cf:d3:b6:6b:f2:e6:42:72:51:43:40:3f:ae: 5c:b8:d3:61:9b:dd:cc:41:2f:cc:0d:ff:9f:42:38:b4:f0:f7: 9d:f3:0e:d6:39:bf:1e:24:70:ce:fe:d2:96:ce:73:f9:bd:31: 74:4c:12:a0:39:18:24:d2:62:55:f9:a8:db:a1:85:23:73:6b: 98:20:1e:99:4b:df:c3:24:f8:82:71:87:6e:3c:02:bd:d5:09: e1:b6:a5:3b:5b:98:13:1c:89:a6:3f:c5:f5:b6:18:e0:91:1d: e0:0a:d1:8c:71:2a:91:5a:e7:92:c7:fc:b2:b3:f5:56:26:a0: ed:16:04:55:4f:6d:67:9e:00:c3:29:80:84:12:32:8a:bf:3b: 71:36:c2:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFQjExMTAvBgNVBAUTKEMyODg3OUZFQzEwQ0U5MjlDMUNGMkU1Qjk3ODg2RjFE N0VBMTdDNUEwHhcNMjUwNzI0MTkxMTU0WhcNMjUwNzMxMTkxMTU0WjAYMRYwFAYD VQQDEw02ODgyODU3YS1mY2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZLV5r5ndcMmGAd+KNH+hJdd5o9ekUivQnH4tc3cYKJqhzsR6C8TYu5n7h2G kHspxJOCq7oG1QgIoVh2ajHLHyoiYJvgvi0UC+Rk4IFlMMwrW/sTHF+XS0Zho4AA NPp3fV4QhiWNmDBq+YGkA0ldmYnMVC9FNjQM3DS3ZlXUbu4MHyUHQ0XkTzKUT7wa gtDoQldvF7uK2x0ApXXBqX1sS7vqu1SCGpiLY3hlSUUAPcB+TNP761XOx32FHo4u v3G0YunbIbGlyuaJoot0ClKyYmkhFfeYtVzrPELleHX215bamfQ9Oa3qIJFoAl6a Ma/+UlOL2km3VYgnfSe0VOdSwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLdY2dO G7JDPPZMHXsovfouAtTRMB8GA1UdIwQYMBaAFMKIef7BDOkpwc8uW5eIbx1+oXxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkVCMS80QzVGNzIwODMx RjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZTbkJ6eTVibDRodkhYNmhm Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvaDVfc0VNNlNuQnp5NWJsNGh2SFg2aGZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkVCMS80QzVGNzIwODMxRjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZT bkJ6eTVibDRodkhYNmhmRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO8myB491inFOobOxuQTH2nBLZmbsslC+9QzbWMG2EtnFkbE4vLhkb DUjzWI93rIABKGKI/ynBJnqRYxP5/422hPK5D5Q1CcEp+SvBXqYg5sob2jFZ6Lvy AqGnWvZ61DFKemNLEpq8zjPpDNrenVc1V8/Ttmvy5kJyUUNAP65cuNNhm93MQS/M Df+fQji08Ped8w7WOb8eJHDO/tKWznP5vTF0TBKgORgk0mJV+ajboYUjc2uYIB6Z S9/DJPiCcYduPAK91QnhtqU7W5gTHImmP8X1thjgkR3gCtGMcSqRWueSx/yys/VW JqDtFgRVT21nngDDKYCEEjKKvztxNsJh -----END CERTIFICATE-----Generated at Sat Jul 26 01:59:07 2025 by rpki-client