$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json) Hash identifier: bbitty4hpRE7ySXU+36YCE13IFUsz1YVPOwoqgxdRHk= Subject key identifier: 0F:38:FA:33:75:4E:02:8E:E1:4D:32:2B:F2:19:D4:46:EA:0C:C9:34 Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Certificate serial: 0BAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft Manifest number: 0B8F Signing time: Wed 02 Jul 2025 19:17:31 +0000 Manifest this update: Wed 02 Jul 2025 19:17:31 +0000 Manifest next update: Wed 09 Jul 2025 19:17:31 +0000 Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: rRgzP/RHRNar15QXrikbbkcfRVyDUU9Bc+YLDRHJ3f0=) 2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: WohY8W0xB97fJlzc0NXwUcNoZJQ/eR2hTSMO+u9osbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2988 (0xbac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Validity Not Before: Jul 2 19:17:31 2025 GMT Not After : Jul 9 19:17:31 2025 GMT Subject: CN=686585cb-93c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:e4:ba:74:a5:b5:2c:c9:1f:b3:10:48:b3: a4:d9:ff:53:86:a5:07:ea:5f:ef:0e:04:85:7f:d8: 5a:0c:12:8e:d9:2b:8b:98:94:08:07:f2:ef:af:50: 9f:a7:aa:25:5c:09:23:3e:08:9a:21:ca:7d:17:66: a4:20:1c:a1:b0:48:76:0a:75:e3:ee:14:6e:31:5e: 30:1d:49:bd:cd:26:1f:0b:27:c0:90:d4:b9:4e:9c: 7a:a5:55:a2:e4:40:71:9f:f8:47:e6:15:78:2b:c1: c3:0a:f2:2a:88:2c:28:c2:15:fd:86:b9:b7:25:40: 2b:01:86:72:b1:b7:a3:d2:dc:1e:53:56:be:3d:7b: f2:b9:1c:4c:7d:a8:be:1d:a7:17:a2:89:c2:60:97: 74:7c:c0:71:6a:5f:79:6c:b7:99:75:fd:3d:7c:94: 7c:ca:f6:66:40:2a:76:fd:1b:68:5d:4d:c7:7a:e3: 6d:73:2c:e6:ae:7e:bf:f5:ec:3f:3c:32:b0:05:fe: a8:4a:12:92:52:d8:a6:f7:ca:00:b5:e5:89:e1:5b: 58:49:89:e0:13:e8:76:bc:f2:e6:c2:c1:32:52:45: 8e:72:ab:94:3d:14:12:c7:b6:94:33:ee:73:59:37: 4f:dd:fe:0d:ce:85:e1:75:6d:08:6d:36:c7:ba:26: 14:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:38:FA:33:75:4E:02:8E:E1:4D:32:2B:F2:19:D4:46:EA:0C:C9:34 X509v3 Authority Key Identifier: keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:09:5c:31:8c:e4:8b:aa:31:c3:86:5a:3d:94:84:ea:96:22: f9:53:46:75:f3:c5:5e:e1:42:05:dd:0a:cf:b3:23:3d:69:d5: 61:a8:1b:92:1e:75:c6:e9:8e:a6:36:28:da:28:33:7b:96:c7: 0f:ef:09:50:55:67:ff:14:5b:b3:8e:9f:88:9b:3e:ba:82:ae: d4:76:b1:ec:84:4a:7f:07:41:a1:87:9a:28:4a:06:1c:aa:73: fc:32:64:08:9a:6d:7e:c1:ea:21:ef:d4:24:f4:88:f2:5c:12: fb:55:a4:b1:a2:33:40:cf:e6:38:31:72:ef:3c:df:aa:5a:7d: 75:fa:94:3b:2e:0c:12:69:07:86:63:42:f5:20:4b:8f:12:b2: 4e:eb:a2:16:68:62:d6:31:19:95:a5:d9:89:fb:73:ff:13:1b: 27:ae:d3:f6:c2:ab:4c:89:36:f2:a4:cb:b2:12:6d:1e:68:9a: 16:85:81:e2:5c:3f:72:cf:84:19:73:9f:ec:89:2a:9f:63:2e: a7:17:3f:2b:44:77:a9:09:89:86:4d:e2:3d:f4:6e:7a:5b:0f: 42:e6:c1:4e:33:05:89:6c:8d:d1:00:83:30:90:84:50:17:13: e1:92:df:a5:e2:66:b7:9f:88:a9:6e:fa:b6:02:7b:01:24:60: dd:32:60:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFQjExMTAvBgNVBAUTKEMyODg3OUZFQzEwQ0U5MjlDMUNGMkU1Qjk3ODg2RjFE N0VBMTdDNUEwHhcNMjUwNzAyMTkxNzMxWhcNMjUwNzA5MTkxNzMxWjAYMRYwFAYD VQQDEw02ODY1ODVjYi05M2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9XkunSltSzJH7MQSLOk2f9ThqUH6l/vDgSFf9haDBKO2SuLmJQIB/Lvr1Cf p6olXAkjPgiaIcp9F2akIByhsEh2CnXj7hRuMV4wHUm9zSYfCyfAkNS5Tpx6pVWi 5EBxn/hH5hV4K8HDCvIqiCwowhX9hrm3JUArAYZysbej0tweU1a+PXvyuRxMfai+ HacXoonCYJd0fMBxal95bLeZdf09fJR8yvZmQCp2/RtoXU3HeuNtcyzmrn6/9ew/ PDKwBf6oShKSUtim98oAteWJ4VtYSYngE+h2vPLmwsEyUkWOcquUPRQSx7aUM+5z WTdP3f4NzoXhdW0IbTbHuiYUFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA84+jN1 TgKO4U0yK/IZ1EbqDMk0MB8GA1UdIwQYMBaAFMKIef7BDOkpwc8uW5eIbx1+oXxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkVCMS80QzVGNzIwODMx RjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZTbkJ6eTVibDRodkhYNmhm Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvaDVfc0VNNlNuQnp5NWJsNGh2SFg2aGZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkVCMS80QzVGNzIwODMxRjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZT bkJ6eTVibDRodkhYNmhmRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsCVwxjOSLqjHDhlo9lITqliL5U0Z188Ve4UIF3QrPsyM9adVhqBuS HnXG6Y6mNijaKDN7lscP7wlQVWf/FFuzjp+Imz66gq7UdrHshEp/B0Ghh5ooSgYc qnP8MmQImm1+weoh79Qk9IjyXBL7VaSxojNAz+Y4MXLvPN+qWn11+pQ7LgwSaQeG Y0L1IEuPErJO66IWaGLWMRmVpdmJ+3P/ExsnrtP2wqtMiTbypMuyEm0eaJoWhYHi XD9yz4QZc5/siSqfYy6nFz8rRHepCYmGTeI99G56Ww9C5sFOMwWJbI3RAIMwkIRQ FxPhkt+l4ma3n4ipbvq2AnsBJGDdMmB/ -----END CERTIFICATE-----Generated at Fri Jul 4 14:34:06 2025 by rpki-client