$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json) Hash identifier: DS9YWwHHcPJtq67I9plASn/B9+Z+jjwFmEp6GHRMnkg= Subject key identifier: F3:9F:1C:EF:5B:3D:36:EA:20:DB:91:3A:B4:BF:FF:21:3A:7A:0F:B3 Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Certificate serial: 0B80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft Manifest number: 0B63 Signing time: Fri 04 Apr 2025 19:15:01 +0000 Manifest this update: Fri 04 Apr 2025 19:15:01 +0000 Manifest next update: Fri 11 Apr 2025 19:15:01 +0000 Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: jjv2j2b2s7gmeP/+2/OdQ/5HvkyMA9TnRJ+b2Hnbfy8=) 2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: WohY8W0xB97fJlzc0NXwUcNoZJQ/eR2hTSMO+u9osbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2944 (0xb80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6EB1 Validity Not Before: Apr 4 19:15:01 2025 GMT Not After : Apr 11 19:15:01 2025 GMT Subject: CN=67f02fb5-8280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:98:d0:03:18:40:3b:e0:86:0b:dd:0e:4b:38: 8e:cd:4c:6a:b8:b6:b0:48:ff:aa:3e:86:a3:de:10: 02:bb:1a:90:d9:fa:9c:b4:58:9d:9c:5f:3f:c7:a5: 27:03:ea:1e:54:e8:09:dd:7b:7a:f6:d1:3b:92:85: 42:6c:33:a8:41:87:92:61:3a:ce:c0:99:4c:cb:e4: d5:e1:e2:e8:1d:1b:40:f4:e3:9c:ad:05:d5:64:ac: 70:9f:e5:58:98:fa:4e:8b:d4:93:52:7c:ce:00:b9: 4c:73:15:46:ac:96:50:1a:68:05:c6:d3:e6:30:00: 41:24:f4:89:30:4b:e3:ee:8f:ed:86:93:dd:84:95: b8:86:93:6f:c4:04:f5:10:be:ea:24:74:a3:26:89: c4:1b:63:4d:ea:26:ff:72:49:a9:e1:fd:22:aa:49: 0a:af:a6:6e:aa:40:32:79:eb:0d:ad:64:e5:a3:49: 88:58:fc:74:14:c0:c2:b0:5b:d1:af:11:04:5c:fd: c4:48:54:db:06:c1:1f:e0:4a:e6:49:a9:4a:b0:4e: 14:01:67:65:36:79:48:db:cd:e4:f1:a1:7f:79:41: 9a:56:46:96:b7:e9:e8:ac:0a:19:ba:df:21:27:d5: 2c:e1:29:a4:97:0a:57:56:47:d3:bf:26:6b:e5:9a: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9F:1C:EF:5B:3D:36:EA:20:DB:91:3A:B4:BF:FF:21:3A:7A:0F:B3 X509v3 Authority Key Identifier: keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:62:79:54:67:e3:6f:05:62:f1:88:61:05:9c:92:40:23:c4: 80:90:a6:3e:7a:d5:85:bb:be:a3:bd:d8:06:e5:79:6d:c4:dd: 72:4b:b4:97:68:fe:11:bb:5d:56:ab:5d:8f:03:25:61:d3:24: c5:6a:8c:42:83:e1:db:15:be:06:b5:a3:bc:0a:26:1c:f3:b3: ec:fc:de:a4:66:1a:90:dc:b5:25:74:10:3d:ec:1f:53:03:6a: d8:f0:f9:d6:6d:f8:3b:e8:bb:32:75:ec:ec:47:4c:71:a5:3f: 14:43:5d:4f:b5:70:1b:7b:ca:e0:b9:77:32:d4:f2:61:74:5c: 3d:62:03:7d:56:97:09:0c:b6:71:79:65:6d:70:46:63:49:a6: 93:86:73:f3:ba:7a:55:92:fc:0e:eb:03:41:e2:74:b5:c4:54: 31:37:14:74:7b:37:85:62:cc:cf:83:01:42:ef:73:0f:55:5f: 68:4d:fa:7c:f3:2f:e4:85:f1:7a:95:24:8f:06:b6:cb:ef:fc: bc:f2:b7:0a:67:11:e3:77:8c:97:cc:08:e5:20:0d:fe:43:e0: 6d:11:45:5d:de:95:20:e3:70:a4:86:ea:c3:eb:99:46:86:a7: 01:3b:9a:44:21:92:65:a2:03:67:57:17:09:6d:10:32:aa:d6: b7:b5:d5:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFQjExMTAvBgNVBAUTKEMyODg3OUZFQzEwQ0U5MjlDMUNGMkU1Qjk3ODg2RjFE N0VBMTdDNUEwHhcNMjUwNDA0MTkxNTAxWhcNMjUwNDExMTkxNTAxWjAYMRYwFAYD VQQDEw02N2YwMmZiNS04MjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JjQAxhAO+CGC90OSziOzUxquLawSP+qPoaj3hACuxqQ2fqctFidnF8/x6Un A+oeVOgJ3Xt69tE7koVCbDOoQYeSYTrOwJlMy+TV4eLoHRtA9OOcrQXVZKxwn+VY mPpOi9STUnzOALlMcxVGrJZQGmgFxtPmMABBJPSJMEvj7o/thpPdhJW4hpNvxAT1 EL7qJHSjJonEG2NN6ib/ckmp4f0iqkkKr6ZuqkAyeesNrWTlo0mIWPx0FMDCsFvR rxEEXP3ESFTbBsEf4ErmSalKsE4UAWdlNnlI283k8aF/eUGaVkaWt+norAoZut8h J9Us4SmklwpXVkfTvyZr5ZrMoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOfHO9b PTbqINuROrS//yE6eg+zMB8GA1UdIwQYMBaAFMKIef7BDOkpwc8uW5eIbx1+oXxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkVCMS80QzVGNzIwODMx RjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZTbkJ6eTVibDRodkhYNmhm Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvaDVfc0VNNlNuQnp5NWJsNGh2SFg2aGZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkVCMS80QzVGNzIwODMxRjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZT bkJ6eTVibDRodkhYNmhmRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoYnlUZ+NvBWLxiGEFnJJAI8SAkKY+etWFu76jvdgG5XltxN1yS7SX aP4Ru11Wq12PAyVh0yTFaoxCg+HbFb4GtaO8CiYc87Ps/N6kZhqQ3LUldBA97B9T A2rY8PnWbfg76LsydezsR0xxpT8UQ11PtXAbe8rguXcy1PJhdFw9YgN9VpcJDLZx eWVtcEZjSaaThnPzunpVkvwO6wNB4nS1xFQxNxR0ezeFYszPgwFC73MPVV9oTfp8 8y/khfF6lSSPBrbL7/y88rcKZxHjd4yXzAjlIA3+Q+BtEUVd3pUg43CkhurD65lG hqcBO5pEIZJlogNnVxcJbRAyqta3tdVK -----END CERTIFICATE-----Generated at Fri Apr 4 22:14:55 2025 by rpki-client