$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json) Hash identifier: mS0dYZZ8Vhvqhx1KXW6Y0+7b6PZEOSjDy0n07/ksqQQ= Subject key identifier: E8:BE:34:6A:9D:8B:92:28:46:FB:46:DD:28:CE:15:A1:DE:53:7E:93 Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Certificate serial: 0B9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft Manifest number: 0B7E Signing time: Fri 30 May 2025 19:17:44 +0000 Manifest this update: Fri 30 May 2025 19:17:43 +0000 Manifest next update: Fri 06 Jun 2025 19:17:43 +0000 Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: OtzyUO+QdiPwzIWYLPLnyIKA++GV/zIPFSKrxnOAQoE=) 2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: WohY8W0xB97fJlzc0NXwUcNoZJQ/eR2hTSMO+u9osbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2971 (0xb9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Validity Not Before: May 30 19:17:43 2025 GMT Not After : Jun 6 19:17:43 2025 GMT Subject: CN=683a0458-ddc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:4d:3b:bb:99:19:8b:4d:7a:87:29:cb:aa: 33:83:93:b4:66:6b:8c:f6:bf:64:48:50:4f:10:7a: f5:9f:f3:d9:28:93:80:a8:51:0e:cc:18:a0:29:7f: 52:5b:ba:f4:99:09:19:8f:d5:3e:ea:37:28:0a:94: b2:4a:50:ac:2e:69:4e:df:e0:b5:a7:75:99:0e:ae: 70:f8:6e:ff:cb:76:87:08:03:bc:d0:5f:a9:fc:62: 11:75:60:2d:e5:eb:13:46:53:83:9e:34:69:8b:fc: b9:78:23:4a:7c:ff:53:84:00:5d:52:d2:af:1c:3e: d7:59:ce:ca:c4:1f:c5:11:54:16:20:3c:b9:6f:9f: ba:64:4b:88:67:81:ba:78:a5:d0:0e:ed:d9:44:69: f7:7d:10:bc:89:15:6c:26:4d:67:c9:1c:11:0c:1c: 1e:5f:72:b8:b7:68:95:16:d1:fe:10:e9:d9:16:a3: b2:36:f1:0c:1f:24:54:59:66:04:8f:0d:e0:d3:67: b3:c7:21:4d:6a:df:b1:e8:5b:f5:9e:22:12:63:17: 80:56:04:62:d6:58:b4:8a:e9:5d:d5:3a:f7:2b:cd: 3b:b9:56:61:5d:30:3d:bf:5d:74:74:4a:47:36:12: 51:c3:ba:e6:2d:a8:54:0f:eb:67:a1:64:a9:5f:81: 21:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BE:34:6A:9D:8B:92:28:46:FB:46:DD:28:CE:15:A1:DE:53:7E:93 X509v3 Authority Key Identifier: keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:45:e4:96:92:6f:ea:05:f7:74:77:04:1c:bf:a8:9e:f8:a3: d4:a0:56:70:2e:18:6b:7e:2d:34:c8:1a:e4:66:86:53:3e:34: 8a:43:ce:41:74:ae:2c:9d:d8:41:73:c4:79:50:45:aa:3a:6a: 80:49:eb:ea:24:93:8d:97:c4:3e:f7:78:aa:6d:70:1f:5a:28: ac:34:3d:87:6f:b9:8d:9b:2c:41:c5:c9:4f:c7:24:49:75:15: 9b:1f:ed:fe:ab:75:50:d6:41:b6:57:16:c6:7d:75:cc:79:0e: b0:19:1f:b3:db:2a:a9:23:ec:cf:19:4b:9d:cd:8c:dc:92:7c: 37:78:50:8d:44:6e:e0:2c:17:58:d3:24:b2:83:cf:aa:ca:aa: c1:91:d7:4d:04:ca:ca:d5:ad:43:28:70:dd:93:e2:46:db:29: c7:4d:13:0d:b0:1e:a2:7c:41:c7:d0:3b:5a:29:95:c1:01:38: 54:bd:4d:55:23:2c:7d:62:c7:da:5f:34:25:ed:76:40:c4:ea: 61:4e:cc:5a:17:57:19:8b:dd:09:0a:9c:13:c4:51:05:2a:1f: 53:f2:43:c3:8b:a9:07:b6:35:10:06:6f:7a:a9:b2:24:94:a0: 2c:9b:37:0d:98:e2:b1:80:e6:61:6f:ca:72:87:48:12:02:b7: 5b:fa:b7:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFQjExMTAvBgNVBAUTKEMyODg3OUZFQzEwQ0U5MjlDMUNGMkU1Qjk3ODg2RjFE N0VBMTdDNUEwHhcNMjUwNTMwMTkxNzQzWhcNMjUwNjA2MTkxNzQzWjAYMRYwFAYD VQQDEw02ODNhMDQ1OC1kZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTlNO7uZGYtNeocpy6ozg5O0ZmuM9r9kSFBPEHr1n/PZKJOAqFEOzBigKX9S W7r0mQkZj9U+6jcoCpSySlCsLmlO3+C1p3WZDq5w+G7/y3aHCAO80F+p/GIRdWAt 5esTRlODnjRpi/y5eCNKfP9ThABdUtKvHD7XWc7KxB/FEVQWIDy5b5+6ZEuIZ4G6 eKXQDu3ZRGn3fRC8iRVsJk1nyRwRDBweX3K4t2iVFtH+EOnZFqOyNvEMHyRUWWYE jw3g02ezxyFNat+x6Fv1niISYxeAVgRi1li0iuld1Tr3K807uVZhXTA9v110dEpH NhJRw7rmLahUD+tnoWSpX4EhmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOi+NGqd i5IoRvtG3SjOFaHeU36TMB8GA1UdIwQYMBaAFMKIef7BDOkpwc8uW5eIbx1+oXxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkVCMS80QzVGNzIwODMx RjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZTbkJ6eTVibDRodkhYNmhm Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvaDVfc0VNNlNuQnp5NWJsNGh2SFg2aGZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkVCMS80QzVGNzIwODMxRjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZT bkJ6eTVibDRodkhYNmhmRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABReSWkm/qBfd0dwQcv6ie+KPUoFZwLhhrfi00yBrkZoZTPjSKQ85B dK4sndhBc8R5UEWqOmqASevqJJONl8Q+93iqbXAfWiisND2Hb7mNmyxBxclPxyRJ dRWbH+3+q3VQ1kG2VxbGfXXMeQ6wGR+z2yqpI+zPGUudzYzcknw3eFCNRG7gLBdY 0ySyg8+qyqrBkddNBMrK1a1DKHDdk+JG2ynHTRMNsB6ifEHH0DtaKZXBAThUvU1V Iyx9YsfaXzQl7XZAxOphTsxaF1cZi90JCpwTxFEFKh9T8kPDi6kHtjUQBm96qbIk lKAsmzcNmOKxgOZhb8pyh0gSArdb+rdZ -----END CERTIFICATE-----Generated at Sat May 31 17:26:13 2025 by rpki-client