$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft File: GhottiJwSYYNHLb7OB0DX3zd_nk.mft (raw, json) Hash identifier: Mk7ZCOs8tPawo4sUPQ1brR7mKU30TaqNhnasxt9rjkE= Subject key identifier: 92:8A:8D:CB:26:60:41:DD:BB:08:CF:73:16:84:F2:51:A3:9B:33:44 Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Certificate serial: 0912 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft Manifest number: 08F5 Signing time: Wed 22 Jul 2026 20:50:12 +0000 Manifest this update: Wed 22 Jul 2026 20:50:11 +0000 Manifest next update: Wed 29 Jul 2026 20:50:11 +0000 Files and hashes: 1: GhottiJwSYYNHLb7OB0DX3zd_nk.crl (hash: qKXUU9+gDbYb3gb+4pf7hnl9fGidLcfvzFDHZIKv+Mk=) 2: 8AF33E36160E11F195136F2C2B3D8C67.roa (hash: 3Qf43LejVMYObXq2xEMUis8BZYPMSWI0XFlk5JiZduA=) 3: 9067F6746F3211EF8F5EFB20C4F9AE02.roa (hash: aZVjwOBzEzdNCEW5XvUhfqb5dAMw3PX/S+WhGKoCahs=) 4: EA0592C233BC11F18E15C13BAA833773.roa (hash: 0hJANdnST2Bxr7dBtneDjlXCF8SapdC+A0SzQCXlilg=) 5: B2E74042602811EF90548827C4F9AE02.roa (hash: oTkK2i8CrxhUFMPdA2ToXRh9tqOM2ExbKiaxoXzOYoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2322 (0x912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Validity Not Before: Jul 22 20:50:11 2026 GMT Not After : Jul 29 20:50:11 2026 GMT Subject: CN=6a612d03-9ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:3f:b3:ba:91:c1:bb:66:a5:c0:9b:fa:5d: ba:34:75:02:bf:45:b1:32:cd:4e:5e:fe:d6:0f:9f: 93:62:54:04:45:60:8a:75:23:ac:33:7f:83:c4:8f: 57:42:4a:c4:16:ab:7d:1c:ae:9a:69:22:c3:57:9f: 1b:c9:56:8b:b9:04:56:7a:bb:e0:21:d6:36:a3:d7: d2:d5:79:ca:07:71:29:3a:c6:58:be:5e:d7:55:b8: d1:e6:04:a7:15:33:d0:c8:a6:c5:e6:2a:c4:f8:c6: 74:30:7a:fc:b8:77:d1:08:15:e0:e8:e5:c3:d7:bf: 05:bc:94:af:22:09:38:80:bb:6d:c2:95:b8:8e:5f: cb:90:1f:1f:56:6a:90:64:f6:8a:8e:20:f9:d0:3c: 0b:b2:10:96:4e:0f:43:f2:be:d4:38:d9:c0:80:d5: fc:83:97:a2:d8:e7:b4:e9:e3:6c:4d:f3:6a:0e:e0: 8a:08:09:63:05:48:54:0c:5f:3b:44:39:52:f7:6e: ac:60:20:d8:3b:3d:2d:fd:64:65:bb:5e:43:73:69: 87:04:7b:ee:8e:c8:bd:c2:25:45:ba:6e:50:c5:5c: 34:50:c0:f1:1e:46:a8:24:a7:11:0e:a1:a9:85:e8: d8:2b:71:6b:73:49:78:9f:d8:d9:c1:0e:7d:3f:40: d8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8A:8D:CB:26:60:41:DD:BB:08:CF:73:16:84:F2:51:A3:9B:33:44 X509v3 Authority Key Identifier: keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:62:2c:ec:df:5e:3c:dd:43:d7:ba:53:cd:c9:b0:09:f4:fe: 62:3d:b2:8e:1d:57:06:35:23:c3:a2:fc:df:2e:79:80:0c:cb: 82:6e:27:27:65:a1:23:07:50:85:01:03:be:3d:32:dc:55:84: ff:41:bd:2b:ca:20:7d:a7:63:de:0f:6a:d1:b8:87:8b:6b:9e: ca:86:39:80:cf:9d:f3:38:cd:9d:06:2b:b2:61:0b:9e:3f:74: 63:0e:6f:7d:d7:83:be:bf:58:e5:4f:f6:8f:e7:a1:79:04:d5: 68:3a:4e:c0:bf:89:3d:80:e6:fe:d0:8b:88:5b:fb:6a:07:12: f1:55:ff:18:4a:9b:2b:8d:c1:38:6e:61:48:ca:43:ee:9d:91: 9e:f3:6f:c7:6b:fc:45:14:21:16:83:5a:43:7f:b1:25:28:19: 7f:f7:17:84:fc:01:fd:6a:0d:41:05:87:91:26:8f:ed:d3:01: f3:53:5c:76:9e:a1:d8:e7:a1:5d:2f:e7:35:46:bc:26:35:4c: 5e:c3:b8:85:9c:9e:95:8f:3c:d0:2f:fd:62:76:75:31:4c:f8: 56:13:bf:49:c3:f6:97:b5:46:f0:4c:b1:de:a0:f5:ab:c9:bf: 31:b5:b5:81:32:e0:6a:73:3a:17:a0:85:a0:f2:55:73:be:32: fb:5d:46:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MzMxMTAvBgNVBAUTKDFBMUEyREI2MjI3MDQ5ODYwRDFDQjZGQjM4MUQwMzVG N0NEREZFNzkwHhcNMjYwNzIyMjA1MDExWhcNMjYwNzI5MjA1MDExWjAYMRYwFAYD VQQDEw02YTYxMmQwMy05ZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxF8/s7qRwbtmpcCb+l26NHUCv0WxMs1OXv7WD5+TYlQERWCKdSOsM3+DxI9X QkrEFqt9HK6aaSLDV58byVaLuQRWervgIdY2o9fS1XnKB3EpOsZYvl7XVbjR5gSn FTPQyKbF5irE+MZ0MHr8uHfRCBXg6OXD178FvJSvIgk4gLttwpW4jl/LkB8fVmqQ ZPaKjiD50DwLshCWTg9D8r7UONnAgNX8g5ei2Oe06eNsTfNqDuCKCAljBUhUDF87 RDlS926sYCDYOz0t/WRlu15Dc2mHBHvujsi9wiVFum5QxVw0UMDxHkaoJKcRDqGp hejYK3Frc0l4n9jZwQ59P0DYxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKKjcsm YEHduwjPcxaE8lGjmzNEMB8GA1UdIwQYMBaAFBoaLbYicEmGDRy2+zgdA1983f55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkzMy9GRDk1MjFCMkRD NTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZWU5ITGI3T0IwRFgzemRf bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dob3R0aUp3U1lZTkhMYjdPQjBEWDN6ZF9uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkzMy9GRDk1MjFCMkRDNTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZ WU5ITGI3T0IwRFgzemRfbmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARWIs7N9ePN1D17pTzcmwCfT+Yj2yjh1XBjUjw6L83y55gAzLgm4nJ2WhIwdQ hQEDvj0y3FWE/0G9K8ogfadj3g9q0biHi2ueyoY5gM+d8zjNnQYrsmELnj90Yw5v fdeDvr9Y5U/2j+eheQTVaDpOwL+JPYDm/tCLiFv7agcS8VX/GEqbK43BOG5hSMpD 7p2RnvNvx2v8RRQhFoNaQ3+xJSgZf/cXhPwB/WoNQQWHkSaP7dMB81Ncdp6h2Oeh XS/nNUa8JjVMXsO4hZyelY880C/9YnZ1MUz4VhO/ScP2l7VG8Eyx3qD1q8m/MbW1 gTLganM6F6CFoPJVc74y+11GJQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:23 2026 by rpki-client