$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft File: GhottiJwSYYNHLb7OB0DX3zd_nk.mft (raw, json) Hash identifier: QeMf5tSfji7C/2D4TD6hjATb2xkVEYF+MwyWtKXVTUY= Subject key identifier: 76:1A:43:50:0A:7E:32:AF:DF:21:DB:1E:54:09:5C:58:66:57:BF:01 Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Certificate serial: 08EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft Manifest number: 08D1 Signing time: Tue 12 May 2026 20:30:25 +0000 Manifest this update: Tue 12 May 2026 20:30:25 +0000 Manifest next update: Tue 19 May 2026 20:30:25 +0000 Files and hashes: 1: GhottiJwSYYNHLb7OB0DX3zd_nk.crl (hash: rbcJZtUGOrA7ZWsde9HRU+L/qVueCCXVSiIZjtN6giU=) 2: 9067F6746F3211EF8F5EFB20C4F9AE02.roa (hash: aZVjwOBzEzdNCEW5XvUhfqb5dAMw3PX/S+WhGKoCahs=) 3: EA0592C233BC11F18E15C13BAA833773.roa (hash: 0hJANdnST2Bxr7dBtneDjlXCF8SapdC+A0SzQCXlilg=) 4: B2E74042602811EF90548827C4F9AE02.roa (hash: oTkK2i8CrxhUFMPdA2ToXRh9tqOM2ExbKiaxoXzOYoA=) 5: 8AF33E36160E11F195136F2C2B3D8C67.roa (hash: 3Qf43LejVMYObXq2xEMUis8BZYPMSWI0XFlk5JiZduA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Validity Not Before: May 12 20:30:25 2026 GMT Not After : May 19 20:30:25 2026 GMT Subject: CN=6a038de1-8c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:05:73:3e:a7:34:eb:d0:e3:c9:f7:95:ed: 8a:9c:30:d5:7f:f3:67:d7:35:cb:8d:37:79:6f:92: f4:68:d7:e8:9a:51:65:59:1f:f4:e3:09:35:e3:dd: fa:58:70:bc:1d:43:b8:cc:54:19:fe:d0:bc:d0:17: 2e:4a:16:ec:e7:40:f7:b6:71:7b:38:ca:08:e5:f6: 74:30:f3:1c:ea:67:f9:3f:b0:3b:a3:90:df:28:5b: 14:68:a4:db:87:30:94:fc:56:0c:35:8c:00:32:ad: d1:f9:d2:c5:35:79:b6:9c:29:85:48:08:a3:6b:b4: 8d:24:ef:96:d4:56:55:81:6e:ab:08:a1:c7:a4:8c: 93:68:ad:85:0f:3b:9b:fb:82:85:dd:89:8c:ea:c2: e0:3b:14:5e:c6:39:b1:bf:8a:29:d7:a5:ae:2d:d4: 11:ee:ed:5b:82:6f:b6:02:77:82:73:b6:40:e6:1f: 22:2a:01:cb:b2:e4:6f:87:ad:1d:c6:40:6c:5e:e7: f5:e9:c6:2e:cd:76:52:6f:92:32:d2:25:b3:99:0c: 20:b9:b4:8c:91:26:da:c0:f0:02:0d:57:e6:26:8d: 95:8b:bc:58:10:1e:e7:03:d4:21:83:c2:2f:b9:66: 2a:84:99:02:f9:a8:d7:12:e1:89:18:d4:f5:ef:d0: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1A:43:50:0A:7E:32:AF:DF:21:DB:1E:54:09:5C:58:66:57:BF:01 X509v3 Authority Key Identifier: keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ca:dd:20:19:74:2b:c0:d2:25:d8:f7:3e:41:ab:be:84:ab: 7a:fa:90:ee:7a:15:7d:44:12:bc:2a:90:78:96:32:96:ef:32: a8:0a:ac:d1:65:b0:5d:0d:98:bb:0c:ac:ca:da:5a:c3:74:0e: af:67:d9:27:85:1f:33:c6:77:ff:27:29:6d:68:66:8e:ed:07: a8:69:30:96:9c:02:95:71:de:14:40:e1:d5:32:15:05:2c:a5: f7:d1:6a:59:61:fb:bd:77:83:5c:59:05:ee:05:c8:2d:19:b7: 8f:cb:4e:d6:93:b0:4f:d0:df:3f:f1:51:6f:9c:fd:41:6c:5e: c7:fb:6b:d0:26:68:79:70:1a:51:b1:bd:0d:1f:db:7b:9c:fc: e5:5e:64:07:75:7b:cb:96:c0:de:4e:03:ee:b8:fe:49:7e:ce: 22:1e:45:0d:c0:a2:aa:88:46:04:3d:fc:5f:ce:10:ad:8a:1b: 67:26:3a:5b:a9:18:bb:f5:f2:c8:69:59:5b:6f:06:15:d3:99: 4b:9b:75:e3:20:84:1d:d1:78:ff:c1:85:a7:2f:8d:4a:0e:bc: 14:00:79:9d:86:91:d1:2a:59:39:ca:d0:bd:57:3b:d0:4b:47: 05:d9:9c:a5:71:56:ca:b5:2e:08:cc:f2:d5:1a:e8:0f:ec:06: b3:34:c3:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MzMxMTAvBgNVBAUTKDFBMUEyREI2MjI3MDQ5ODYwRDFDQjZGQjM4MUQwMzVG N0NEREZFNzkwHhcNMjYwNTEyMjAzMDI1WhcNMjYwNTE5MjAzMDI1WjAYMRYwFAYD VQQDEw02YTAzOGRlMS04YzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgcFcz6nNOvQ48n3le2KnDDVf/Nn1zXLjTd5b5L0aNfomlFlWR/04wk14936 WHC8HUO4zFQZ/tC80BcuShbs50D3tnF7OMoI5fZ0MPMc6mf5P7A7o5DfKFsUaKTb hzCU/FYMNYwAMq3R+dLFNXm2nCmFSAija7SNJO+W1FZVgW6rCKHHpIyTaK2FDzub +4KF3YmM6sLgOxRexjmxv4op16WuLdQR7u1bgm+2AneCc7ZA5h8iKgHLsuRvh60d xkBsXuf16cYuzXZSb5Iy0iWzmQwgubSMkSbawPACDVfmJo2Vi7xYEB7nA9Qhg8Iv uWYqhJkC+ajXEuGJGNT179DXLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHYaQ1AK fjKv3yHbHlQJXFhmV78BMB8GA1UdIwQYMBaAFBoaLbYicEmGDRy2+zgdA1983f55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkzMy9GRDk1MjFCMkRD NTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZWU5ITGI3T0IwRFgzemRf bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dob3R0aUp3U1lZTkhMYjdPQjBEWDN6ZF9uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkzMy9GRDk1MjFCMkRDNTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZ WU5ITGI3T0IwRFgzemRfbmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhsrdIBl0K8DSJdj3PkGrvoSrevqQ7noVfUQSvCqQeJYylu8yqAqs0WWwXQ2Y uwysytpaw3QOr2fZJ4UfM8Z3/ycpbWhmju0HqGkwlpwClXHeFEDh1TIVBSyl99Fq WWH7vXeDXFkF7gXILRm3j8tO1pOwT9DfP/FRb5z9QWxex/tr0CZoeXAaUbG9DR/b e5z85V5kB3V7y5bA3k4D7rj+SX7OIh5FDcCiqohGBD38X84QrYobZyY6W6kYu/Xy yGlZW28GFdOZS5t14yCEHdF4/8GFpy+NSg68FAB5nYaR0SpZOcrQvVc70EtHBdmc pXFWyrUuCMzy1RroD+wGszTDUg== -----END CERTIFICATE-----Generated at Wed May 13 03:25:27 2026 by rpki-client