$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft File: GhottiJwSYYNHLb7OB0DX3zd_nk.mft (raw, json) Hash identifier: jOhYkCjQAzGD+ywyh1PC3kxVhABUt37awoi3DMZ9cUw= Subject key identifier: D9:D0:4A:F5:B5:DE:15:E9:2F:C5:EE:BD:01:6F:58:C2:90:85:02:6F Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Certificate serial: 0840 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft Manifest number: 082E Signing time: Fri 18 Jul 2025 21:03:33 +0000 Manifest this update: Fri 18 Jul 2025 21:03:32 +0000 Manifest next update: Fri 25 Jul 2025 21:03:32 +0000 Files and hashes: 1: GhottiJwSYYNHLb7OB0DX3zd_nk.crl (hash: /e+J//u6UlW/ssoHGIC+PlDAlUji4PbJBpMaJaC2LQw=) 2: 9067F6746F3211EF8F5EFB20C4F9AE02.roa (hash: 4M65KGjZx3n4TcnEBrSY9PlP+MFh9MlbhpJEgtId4vg=) 3: 9F555EDC433611EB89B8BE60C4F9AE02.roa (hash: Ul+h5yFKxdc27JWdtAgjP/Idl7HvtMFjlARFh9uJLQs=) 4: B2E74042602811EF90548827C4F9AE02.roa (hash: 5CfU6Ey+EqR6j3v3qr6f+yrfJbdI9IE9e5KRkCXxOtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2112 (0x840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Validity Not Before: Jul 18 21:03:32 2025 GMT Not After : Jul 25 21:03:32 2025 GMT Subject: CN=687ab6a4-8e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:e4:4f:71:74:d8:7a:87:79:e8:61:38:73: c8:68:2f:4e:d5:c8:42:65:2f:3f:e7:b8:07:3c:f1: a4:68:4b:c5:95:16:21:ef:b7:2c:4d:cd:fc:c6:ff: 2a:37:a7:fc:c9:9a:3d:33:65:4f:c3:78:22:8d:cd: 68:90:c2:f8:f2:89:ae:7b:29:9d:a5:12:de:6c:eb: 57:e6:76:8d:dd:e6:e2:36:30:69:a7:07:77:0a:f3: cd:ce:52:47:f1:a1:b4:25:1b:1f:46:5d:22:f6:48: 8f:52:77:bf:dd:ac:5b:45:38:39:59:40:a8:43:32: 97:68:d1:3f:a5:45:e3:86:fb:aa:bb:c8:44:49:6f: 2e:bf:1d:3c:2d:5f:93:b8:08:48:21:6c:ee:d1:be: c2:35:79:ae:00:6c:00:91:d3:68:be:e3:a5:16:42: a6:53:00:16:45:eb:fb:55:37:a5:0a:ab:7c:fb:9d: aa:04:d2:d3:34:cc:8a:8d:cb:15:ae:cc:a3:aa:e7: 72:b5:fd:b8:fa:7b:bb:91:e7:0d:01:44:f0:48:88: 37:b5:dd:31:2c:f4:02:2d:6a:08:18:c0:07:e6:32: 64:39:18:97:0b:6f:7d:3e:80:96:a1:42:97:f4:f5: a7:6f:22:af:ec:36:98:b0:65:eb:9c:1d:32:8f:d1: 51:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D0:4A:F5:B5:DE:15:E9:2F:C5:EE:BD:01:6F:58:C2:90:85:02:6F X509v3 Authority Key Identifier: keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0c:23:99:86:51:26:85:31:b0:c3:25:35:8c:e0:42:2c:0e: 70:fa:e7:f8:e8:9d:4e:84:1a:58:85:26:69:96:64:72:75:25: 32:05:9e:5c:6d:03:93:f3:cb:1f:28:9a:b2:e6:6f:68:53:97: fa:15:34:23:35:ba:83:95:06:94:3e:d1:9d:36:19:d9:a0:6b: 2f:41:8f:cb:ac:67:38:aa:6a:c2:a7:1d:02:8e:6e:41:79:30: 6a:14:15:78:26:b3:45:f3:4e:cb:a4:35:93:95:4c:c5:2f:64: 09:c4:31:94:d9:84:b7:06:57:b9:ff:0c:d8:56:73:90:4c:7b: b0:8f:57:27:7e:a9:39:11:fb:f0:18:31:ea:73:b6:54:43:47: 23:54:fc:92:1b:f5:7e:e8:88:e5:31:b9:bd:37:2a:40:f4:c4: 96:ec:50:d0:4c:db:2a:78:ff:4a:b2:28:3a:2a:d9:bf:a5:d4: 91:ca:5b:80:be:67:8e:72:ff:e4:a6:47:84:b1:95:96:7e:6d: 7a:4a:5d:ba:5e:57:b3:ab:35:cb:5c:ed:b6:43:1a:76:79:be: 5b:13:85:27:f7:b5:cb:28:6f:b7:bd:d8:a2:cc:cf:3c:32:0c: a4:d7:52:f6:85:3a:1c:db:3b:4a:8e:af:01:e6:3e:61:ad:31: 32:72:61:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MzMxMTAvBgNVBAUTKDFBMUEyREI2MjI3MDQ5ODYwRDFDQjZGQjM4MUQwMzVG N0NEREZFNzkwHhcNMjUwNzE4MjEwMzMyWhcNMjUwNzI1MjEwMzMyWjAYMRYwFAYD VQQDEw02ODdhYjZhNC04ZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrLkT3F02HqHeehhOHPIaC9O1chCZS8/57gHPPGkaEvFlRYh77csTc38xv8q N6f8yZo9M2VPw3gijc1okML48omueymdpRLebOtX5naN3ebiNjBppwd3CvPNzlJH 8aG0JRsfRl0i9kiPUne/3axbRTg5WUCoQzKXaNE/pUXjhvuqu8hESW8uvx08LV+T uAhIIWzu0b7CNXmuAGwAkdNovuOlFkKmUwAWRev7VTelCqt8+52qBNLTNMyKjcsV rsyjqudytf24+nu7kecNAUTwSIg3td0xLPQCLWoIGMAH5jJkORiXC299PoCWoUKX 9PWnbyKv7DaYsGXrnB0yj9FR9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnQSvW1 3hXpL8XuvQFvWMKQhQJvMB8GA1UdIwQYMBaAFBoaLbYicEmGDRy2+zgdA1983f55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkzMy9GRDk1MjFCMkRD NTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZWU5ITGI3T0IwRFgzemRf bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dob3R0aUp3U1lZTkhMYjdPQjBEWDN6ZF9uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkzMy9GRDk1MjFCMkRDNTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZ WU5ITGI3T0IwRFgzemRfbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7DCOZhlEmhTGwwyU1jOBCLA5w+uf46J1OhBpYhSZplmRydSUyBZ5c bQOT88sfKJqy5m9oU5f6FTQjNbqDlQaUPtGdNhnZoGsvQY/LrGc4qmrCpx0Cjm5B eTBqFBV4JrNF807LpDWTlUzFL2QJxDGU2YS3Ble5/wzYVnOQTHuwj1cnfqk5Efvw GDHqc7ZUQ0cjVPySG/V+6IjlMbm9NypA9MSW7FDQTNsqeP9Ksig6Ktm/pdSRyluA vmeOcv/kpkeEsZWWfm16Sl26XlezqzXLXO22Qxp2eb5bE4Un97XLKG+3vdiizM88 Mgyk11L2hToc2ztKjq8B5j5hrTEycmF8 -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:28 2025 by rpki-client