
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
File: GhottiJwSYYNHLb7OB0DX3zd_nk.mft (raw, json)
Hash identifier: 4DPJ3XabXig4b4OJWzb3rxJDDRDASparcUEh3kzzLFA=
Subject key identifier: 41:4B:C8:3E:D0:8A:F1:A3:A1:30:99:E7:1C:22:8D:0B:92:CA:CC:47
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial: 0939
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
Manifest number: 0918
Signing time: Thu 24 Sep 2026 20:13:37 +0000
Manifest this update: Thu 24 Sep 2026 20:13:37 +0000
Manifest next update: Thu 01 Oct 2026 20:13:37 +0000
Files and hashes: 1: GhottiJwSYYNHLb7OB0DX3zd_nk.crl (hash: jDoLjUMVZkBFZ08MhMYmVzL27aEIYZ/QFlEgx/ukXbc=)
2: B2E74042602811EF90548827C4F9AE02.roa (hash: j6SYkO3HZhEL2LK5lIazKp9zU4gcdGwtc5skzDjxN2o=)
3: 8AF33E36160E11F195136F2C2B3D8C67.roa (hash: Z9Sj3tjoXvHAguDjXbALg3NY/Nd04X4OP7AAtAJAUtM=)
4: 9067F6746F3211EF8F5EFB20C4F9AE02.roa (hash: MSf7GXo8HNr6AIyrtXoXOUvwEs7jVEwkq9jkXz+jKko=)
5: EA0592C233BC11F18E15C13BAA833773.roa (hash: 2AmxTaI/ONNfaNj+T4TkXoaKMlxkde4cQ2NUWgbtWWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2361 (0x939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Validity
Not Before: Sep 24 20:13:37 2026 GMT
Not After : Oct 1 20:13:37 2026 GMT
Subject: CN=6ab58471-b3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:5d:25:b2:16:85:d8:4e:12:e8:64:7a:08:
9c:7b:ed:85:95:26:f0:ae:a9:8e:30:9e:37:4e:e6:
07:4f:16:12:22:21:43:cb:ce:90:65:77:b6:52:62:
c8:8d:ab:fe:35:0a:cb:b3:dc:e9:85:80:19:b6:ed:
22:ce:78:da:ae:f2:42:fe:94:90:49:4f:d0:ec:e9:
e5:e1:bc:0d:ac:94:5d:96:75:23:c6:42:98:68:19:
31:58:d5:79:f2:70:37:3d:44:79:06:3a:66:b2:57:
e3:a3:15:8c:4f:c1:e3:a4:b6:eb:4d:d1:ad:a7:0b:
06:d8:8a:78:8c:cd:73:df:22:02:ea:0a:88:e7:cd:
1e:c1:07:79:2f:68:e1:2a:e9:94:8f:67:05:3b:33:
d4:4d:7c:6a:48:38:97:ad:12:55:1e:70:1f:60:a8:
b8:1d:eb:45:df:98:37:c7:f4:48:5c:f0:51:9c:a6:
4b:b2:e0:11:4d:f7:ba:3b:48:ec:90:e2:8e:52:09:
b1:45:6b:60:5a:35:d4:10:ac:ca:ab:30:ea:ba:a4:
16:df:eb:11:cb:77:e2:f7:74:c5:04:51:4f:a6:5f:
f7:f2:fd:93:5e:bd:56:82:f6:27:d0:9e:87:64:0e:
6a:d2:96:9e:2d:e0:05:6e:35:1a:b9:23:0e:fa:3e:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4B:C8:3E:D0:8A:F1:A3:A1:30:99:E7:1C:22:8D:0B:92:CA:CC:47
X509v3 Authority Key Identifier:
keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a1:46:2a:ae:68:0c:53:5d:cc:71:9a:30:9a:73:11:55:91:
6d:b1:3f:03:d1:ae:a0:2c:17:1f:81:f7:b4:97:4d:e7:77:1d:
dd:a2:c3:e1:7e:19:81:8d:07:2f:ca:17:29:0d:2d:db:e8:cb:
e8:9e:a1:6b:2b:ef:b7:70:cb:5e:1c:d9:7a:bb:65:4e:bd:14:
2d:96:23:60:34:49:41:5a:ee:66:08:33:9b:33:5a:b3:10:e1:
9b:f7:8a:90:f4:aa:aa:97:82:94:43:0a:c3:ee:e3:e2:f3:71:
59:18:05:e9:fe:0d:b5:8c:81:70:02:ba:cf:27:8e:9d:ad:66:
84:aa:19:84:f4:21:e6:5d:ee:60:19:28:94:17:10:92:43:7f:
01:bd:3b:1f:a8:b4:77:a1:c6:42:46:c1:f5:ac:01:15:94:a4:
61:1a:c6:99:24:43:ad:8d:3e:e7:7b:35:57:38:0b:1c:d0:25:
13:55:2e:f9:95:fd:6b:a8:09:ca:25:46:cd:97:44:9b:dd:23:
53:ae:55:5f:84:4f:b1:f4:20:3d:50:d5:62:73:de:d9:76:03:
41:45:76:06:84:81:60:27:f7:32:b3:7d:c5:a9:78:f5:cc:8e:
73:80:af:8c:d8:82:99:04:1e:3e:b2:83:c1:2a:50:bc:25:64:
c8:44:b0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:00:50 2026 by rpki-client