$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json) Hash identifier: Mw30K/ZRcoyaSQt24jTDtQcyt2c/ySwM38VgaBuwWxY= Subject key identifier: E8:25:C3:2A:6A:33:48:AE:E7:D6:33:44:21:EC:1F:51:A4:08:FC:EC Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Certificate serial: 0BC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft Manifest number: 0BA9 Signing time: Fri 22 Aug 2025 19:09:16 +0000 Manifest this update: Fri 22 Aug 2025 19:09:16 +0000 Manifest next update: Fri 29 Aug 2025 19:09:16 +0000 Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: a2/2NsJ68zrB9BeczfPydPGWvo1g2N5XFskeJkl1/vY=) 2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: WohY8W0xB97fJlzc0NXwUcNoZJQ/eR2hTSMO+u9osbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3014 (0xbc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Validity Not Before: Aug 22 19:09:16 2025 GMT Not After : Aug 29 19:09:16 2025 GMT Subject: CN=68a8c05c-bf49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:ab:67:6d:7d:f1:c1:2d:31:f5:a4:9b:59: 96:9b:a5:d7:e6:10:37:17:2e:79:4c:fc:24:97:5b: 63:c4:cc:06:ed:e4:c7:89:8a:19:71:64:97:43:13: 90:c6:93:ca:10:39:7b:c3:1a:82:18:65:2a:85:2a: d8:a6:be:8c:88:47:db:a9:67:7f:5f:e7:0e:7b:df: 9a:96:74:03:79:8a:46:9f:da:23:8c:22:9c:21:4c: 3d:5c:19:97:5f:d6:8e:3a:1f:4c:9b:f7:89:a7:eb: a7:45:2f:81:c3:a7:46:1f:81:f0:d4:ef:2a:64:3b: 17:ff:dd:e5:83:8e:9e:68:74:cc:76:d4:8b:af:cf: de:da:13:77:ff:ec:f6:99:bd:5f:0c:47:e7:bf:f4: 1c:87:4e:99:28:20:32:20:fa:de:d4:e9:0c:ae:ac: c1:bd:8c:1a:43:82:51:14:aa:9e:22:f4:c0:20:12: 29:c9:96:68:a9:a2:31:40:7e:82:c5:ff:4a:58:0e: 75:1a:ee:10:ac:70:59:c8:d9:1e:bf:19:7f:df:9d: 20:63:af:76:6c:6b:3e:14:6e:90:d1:47:ea:31:d2: a5:86:dc:ce:f1:f9:04:26:a5:b6:7c:3f:ad:96:3b: e0:c7:6e:ca:59:80:0a:91:42:b0:a9:ab:37:88:81: 97:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:25:C3:2A:6A:33:48:AE:E7:D6:33:44:21:EC:1F:51:A4:08:FC:EC X509v3 Authority Key Identifier: keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:2b:3e:03:2b:e9:68:80:8c:b8:54:59:a9:4b:73:d2:bb:d8: 4d:63:79:23:e5:c4:57:c1:5d:0a:78:5e:67:39:80:db:3d:27: 01:73:9c:f7:c0:d4:46:5a:4e:c5:53:7c:89:64:32:5c:b1:20: b8:d2:7a:a2:24:60:7f:11:56:f2:58:41:df:0b:2b:fe:97:1e: 9f:e8:c2:a3:51:ca:f6:53:02:e4:54:62:a8:66:58:98:a4:0f: e1:ff:66:38:a2:ee:66:6c:0d:a7:fd:40:a3:80:a4:20:c6:39: 5b:0e:9b:c5:35:9f:2a:3a:6f:7a:40:22:f6:5a:d9:35:7f:71: 65:bd:6f:6b:a7:1d:de:0e:b9:60:cd:1a:ff:a5:29:a4:96:5f: 92:39:80:0f:c1:53:04:9c:74:b2:f7:38:3a:01:da:83:0d:45: ed:0a:f0:d1:b2:6f:10:ef:c5:23:50:7c:73:99:13:86:6c:bf: 5e:5f:71:94:c8:69:49:d5:e2:a4:7d:c2:f9:fe:a3:38:1b:63: 00:cd:a2:8c:d5:1c:d2:44:62:58:73:a5:2f:70:1e:86:9d:03: 0e:ac:b7:9b:f1:93:71:18:82:48:7f:0d:a8:b3:d3:2b:a0:30: e5:7f:ca:ef:54:f5:9c:40:58:c4:34:9d:7f:52:11:c7:83:8e: ac:04:24:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFQjExMTAvBgNVBAUTKEMyODg3OUZFQzEwQ0U5MjlDMUNGMkU1Qjk3ODg2RjFE N0VBMTdDNUEwHhcNMjUwODIyMTkwOTE2WhcNMjUwODI5MTkwOTE2WjAYMRYwFAYD VQQDEw02OGE4YzA1Yy1iZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3qrZ2198cEtMfWkm1mWm6XX5hA3Fy55TPwkl1tjxMwG7eTHiYoZcWSXQxOQ xpPKEDl7wxqCGGUqhSrYpr6MiEfbqWd/X+cOe9+alnQDeYpGn9ojjCKcIUw9XBmX X9aOOh9Mm/eJp+unRS+Bw6dGH4Hw1O8qZDsX/93lg46eaHTMdtSLr8/e2hN3/+z2 mb1fDEfnv/Qch06ZKCAyIPre1OkMrqzBvYwaQ4JRFKqeIvTAIBIpyZZoqaIxQH6C xf9KWA51Gu4QrHBZyNkevxl/350gY692bGs+FG6Q0UfqMdKlhtzO8fkEJqW2fD+t ljvgx27KWYAKkUKwqas3iIGXPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOglwypq M0iu59YzRCHsH1GkCPzsMB8GA1UdIwQYMBaAFMKIef7BDOkpwc8uW5eIbx1+oXxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkVCMS80QzVGNzIwODMx RjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZTbkJ6eTVibDRodkhYNmhm Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvaDVfc0VNNlNuQnp5NWJsNGh2SFg2aGZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkVCMS80QzVGNzIwODMxRjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZT bkJ6eTVibDRodkhYNmhmRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIKz4DK+logIy4VFmpS3PSu9hNY3kj5cRXwV0KeF5nOYDbPScBc5z3 wNRGWk7FU3yJZDJcsSC40nqiJGB/EVbyWEHfCyv+lx6f6MKjUcr2UwLkVGKoZliY pA/h/2Y4ou5mbA2n/UCjgKQgxjlbDpvFNZ8qOm96QCL2Wtk1f3FlvW9rpx3eDrlg zRr/pSmkll+SOYAPwVMEnHSy9zg6AdqDDUXtCvDRsm8Q78UjUHxzmROGbL9eX3GU yGlJ1eKkfcL5/qM4G2MAzaKM1RzSRGJYc6UvcB6GnQMOrLeb8ZNxGIJIfw2os9Mr oDDlf8rvVPWcQFjENJ1/UhHHg46sBCTM -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:58 2025 by rpki-client