$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft File: GhottiJwSYYNHLb7OB0DX3zd_nk.mft (raw, json) Hash identifier: Ul/5DpnPSjiMe2yOFwmZNkMBnHSYLqOdKYNXDd/knzo= Subject key identifier: EC:D8:72:2D:B9:59:FF:2D:91:4A:68:F3:BA:ED:C3:85:CD:76:26:21 Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Certificate serial: 0959 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft Manifest number: 0935 Signing time: Sat 14 Nov 2026 20:07:00 +0000 Manifest this update: Sat 14 Nov 2026 20:06:59 +0000 Manifest next update: Sat 21 Nov 2026 20:06:59 +0000 Files and hashes: 1: GhottiJwSYYNHLb7OB0DX3zd_nk.crl (hash: nwLpS6TdFf58GzV+aSU+RFGsbnfP8fZB6tzDAp35O+E=) 2: 30ACE9D4C39911F19B59CD854911F970.roa (hash: 3DTmAl/GFMo1DZfYOneD/DU70QPj2jXHGw0paIbb8CY=) 3: EA0592C233BC11F18E15C13BAA833773.roa (hash: 2AmxTaI/ONNfaNj+T4TkXoaKMlxkde4cQ2NUWgbtWWM=) 4: 8AF33E36160E11F195136F2C2B3D8C67.roa (hash: Z9Sj3tjoXvHAguDjXbALg3NY/Nd04X4OP7AAtAJAUtM=) 5: B2E74042602811EF90548827C4F9AE02.roa (hash: j6SYkO3HZhEL2LK5lIazKp9zU4gcdGwtc5skzDjxN2o=) 6: 1D7B0544C39911F186A509344911F970.roa (hash: jtT5H+wXxPuwmDZD8Y3YfUWj6W+wzzGw0C7crTdmcwA=) 7: 9067F6746F3211EF8F5EFB20C4F9AE02.roa (hash: MSf7GXo8HNr6AIyrtXoXOUvwEs7jVEwkq9jkXz+jKko=) 8: 3DNXim_rxu4Pnd5ugOUjjSvE6Ls.asa (hash: WhNNCHjbJ98rH71QjjRS9IlM7whZEYOPtS0/H+MhUis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2393 (0x959) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Validity Not Before: Nov 14 20:06:59 2026 GMT Not After : Nov 21 20:06:59 2026 GMT Subject: CN=6af8bf64-777b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1a:17:a9:3c:fe:e9:73:bd:e5:af:cf:10:a8: 2c:47:6d:26:e8:f8:49:c0:66:85:bb:fb:56:00:f1: 50:b6:7b:06:eb:be:d7:f9:49:2b:21:29:a7:2f:82: 8d:69:ac:49:60:35:c8:c9:60:7c:4f:43:b0:1c:a4: 71:10:89:a9:8b:96:e0:d9:da:75:74:d2:8d:51:20: d6:ab:10:14:41:84:08:5d:41:76:54:6a:ee:5c:0a: 48:e9:c1:67:df:1e:80:da:d2:f1:6e:ee:73:03:55: 10:73:6f:2f:a6:19:f7:e7:19:db:03:ef:cd:85:d8: ea:04:f5:8c:34:a0:b8:10:e4:70:10:fa:1e:c2:9c: 61:fe:62:cc:49:7c:e3:b3:16:91:7c:b7:fa:b2:36: 01:4c:5d:73:6c:ea:07:b2:2b:09:3c:db:8d:2b:36: ae:ce:9f:dd:70:af:7e:0f:8d:67:fa:3c:03:8c:cb: 25:21:a8:81:9c:64:ca:f6:dd:71:91:2a:65:cc:f3: 7a:bf:86:2f:e7:3f:08:f2:32:4b:f2:72:bb:2c:03: 11:b5:ae:b2:35:9a:81:7b:ff:85:bd:10:88:82:51: ef:c6:64:f0:92:85:7e:45:c5:65:15:e1:f2:c8:10: 7d:d9:92:45:ad:6d:dc:cc:bd:62:48:74:fb:ab:3d: bc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D8:72:2D:B9:59:FF:2D:91:4A:68:F3:BA:ED:C3:85:CD:76:26:21 X509v3 Authority Key Identifier: keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ce:c5:c5:31:e2:3c:01:2c:62:97:4e:48:7d:3a:01:69:35: af:ab:1d:6e:6f:c4:e1:ca:06:de:d7:37:88:ca:ab:fb:ae:5b: f7:47:a1:b5:84:03:f7:ab:97:2f:83:32:f3:5c:8e:7b:3b:57: 02:8e:08:fa:6b:04:a8:74:62:da:38:01:1d:93:06:da:91:16: 9d:79:3d:a7:52:71:45:4c:15:59:ea:ab:c1:14:d0:93:86:39: 29:8a:da:b4:95:0b:55:04:49:cc:23:ea:8b:c4:13:72:eb:4a: c7:14:e4:7c:89:50:f4:a6:5b:b2:60:dd:f3:d3:dd:21:26:4c: 6b:52:1d:e3:a3:a0:25:e9:56:a0:f8:c4:5b:54:ff:d5:e0:e4: 8f:58:8d:c7:8b:a0:bd:dd:05:57:64:c2:d1:6b:f3:17:fe:0b: 2b:82:06:be:a3:3a:3b:32:5e:0b:6f:5e:c7:e6:54:e8:ee:66: 31:6f:21:48:99:07:c3:57:18:06:78:84:06:6b:ac:a4:85:a5: 18:9e:5c:86:d9:ee:01:b4:a5:bd:82:53:a6:75:cc:1d:c4:5f: 5d:ce:8b:30:55:1b:ca:24:57:1f:9d:6a:e8:23:04:e7:21:a6: d2:74:b1:4e:c1:16:a0:0f:9c:37:ea:f1:25:29:72:34:d0:78: e3:de:1c:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MzMxMTAvBgNVBAUTKDFBMUEyREI2MjI3MDQ5ODYwRDFDQjZGQjM4MUQwMzVG N0NEREZFNzkwHhcNMjYxMTE0MjAwNjU5WhcNMjYxMTIxMjAwNjU5WjAYMRYwFAYD VQQDEw02YWY4YmY2NC03NzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkRoXqTz+6XO95a/PEKgsR20m6PhJwGaFu/tWAPFQtnsG677X+UkrISmnL4KN aaxJYDXIyWB8T0OwHKRxEImpi5bg2dp1dNKNUSDWqxAUQYQIXUF2VGruXApI6cFn 3x6A2tLxbu5zA1UQc28vphn35xnbA+/NhdjqBPWMNKC4EORwEPoewpxh/mLMSXzj sxaRfLf6sjYBTF1zbOoHsisJPNuNKzauzp/dcK9+D41n+jwDjMslIaiBnGTK9t1x kSplzPN6v4Yv5z8I8jJL8nK7LAMRta6yNZqBe/+FvRCIglHvxmTwkoV+RcVlFeHy yBB92ZJFrW3czL1iSHT7qz281QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzYci25 Wf8tkUpo87rtw4XNdiYhMB8GA1UdIwQYMBaAFBoaLbYicEmGDRy2+zgdA1983f55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkzMy9GRDk1MjFCMkRD NTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZWU5ITGI3T0IwRFgzemRf bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dob3R0aUp3U1lZTkhMYjdPQjBEWDN6ZF9uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkzMy9GRDk1MjFCMkRDNTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZ WU5ITGI3T0IwRFgzemRfbmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlM7FxTHiPAEsYpdOSH06AWk1r6sdbm/E4coG3tc3iMqr+65b90ehtYQD96uX L4My81yOeztXAo4I+msEqHRi2jgBHZMG2pEWnXk9p1JxRUwVWeqrwRTQk4Y5KYra tJULVQRJzCPqi8QTcutKxxTkfIlQ9KZbsmDd89PdISZMa1Id46OgJelWoPjEW1T/ 1eDkj1iNx4ugvd0FV2TC0WvzF/4LK4IGvqM6OzJeC29ex+ZU6O5mMW8hSJkHw1cY BniEBmuspIWlGJ5chtnuAbSlvYJTpnXMHcRfXc6LMFUbyiRXH51q6CME5yGm0nSx TsEWoA+cN+rxJSlyNNB4494cIQ== -----END CERTIFICATE-----Generated at Sun Nov 15 08:32:01 2026 by rpki-client