
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
File: GhottiJwSYYNHLb7OB0DX3zd_nk.mft (raw, json)
Hash identifier: xIG7/NQ0wZb/9Gn7Bc/1Kux3MwCJRKhwqTXUlIp7GUY=
Subject key identifier: 5D:C9:0B:19:17:73:2A:31:AC:94:E7:BE:AB:B1:3F:2E:54:4C:D0:02
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial: 08B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
Manifest number: 089F
Signing time: Wed 18 Feb 2026 20:02:11 +0000
Manifest this update: Wed 18 Feb 2026 20:02:10 +0000
Manifest next update: Wed 25 Feb 2026 20:02:10 +0000
Files and hashes: 1: GhottiJwSYYNHLb7OB0DX3zd_nk.crl (hash: a3reYNFex4nOpICeMy5i6nc5r//2yxusDg2T+ZTlrus=)
2: B2E74042602811EF90548827C4F9AE02.roa (hash: BvCqMScG09pGK+LZUbihhOFZxqUcMb0S5ZcrEfWSJgU=)
3: 9067F6746F3211EF8F5EFB20C4F9AE02.roa (hash: RqZ70A3hEEaJCi1AIYIvzKrDKMGhuHpCuqVixNHeLHs=)
4: 9F555EDC433611EB89B8BE60C4F9AE02.roa (hash: rEovmytiKNNVpD6gPGRI9HANLC4RwJ5LENxvCh8CzI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2228 (0x8b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Validity
Not Before: Feb 18 20:02:10 2026 GMT
Not After : Feb 25 20:02:10 2026 GMT
Subject: CN=69961ac3-9500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:0c:df:19:25:14:69:0d:2f:03:aa:e3:77:
c6:41:07:61:d0:4b:7e:c6:9e:32:c8:c7:a7:b0:c9:
35:78:ec:b4:00:a0:38:03:51:9f:30:f5:ed:38:9f:
a4:58:ba:07:c8:8a:61:40:a3:5e:17:68:b5:8b:ed:
6d:5e:60:52:7f:73:86:cd:b1:6d:60:2e:ff:59:f8:
c7:e9:62:c9:28:a5:59:c4:d8:4c:9e:22:44:04:be:
fe:28:0e:94:cb:ef:62:95:1e:cc:62:d4:bd:51:84:
41:68:d1:64:30:fd:19:5d:98:34:d1:cf:56:8a:03:
e2:5a:37:5e:47:9c:fa:19:53:ea:57:f4:30:f7:75:
01:17:bc:43:ec:8c:ea:5e:1d:3e:07:49:61:b1:c8:
70:c2:08:77:96:34:76:8d:28:e2:ec:a3:51:53:a8:
d9:46:ac:ec:3b:ac:19:b6:f4:ee:47:d9:69:0a:26:
4a:bf:0e:ed:fa:30:82:89:e1:cb:37:b8:b6:91:65:
33:90:21:5f:21:70:47:b7:72:88:30:40:82:a8:31:
2e:55:85:05:50:73:33:0f:a1:bd:e6:5b:a9:54:43:
ef:c6:b6:db:26:bc:d7:4e:00:ed:ab:98:df:b6:54:
1f:26:1c:60:29:58:c2:7b:5b:84:f5:8c:d3:36:65:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C9:0B:19:17:73:2A:31:AC:94:E7:BE:AB:B1:3F:2E:54:4C:D0:02
X509v3 Authority Key Identifier:
keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:82:97:30:44:b2:68:af:b8:ca:9a:4c:aa:d8:52:0b:69:10:
84:5b:73:5d:2b:9b:32:54:8d:14:a3:9e:4f:cf:96:a5:af:65:
cf:3e:95:d0:97:0e:75:8e:32:0a:b4:94:12:32:98:a9:0f:67:
a4:47:f0:5b:c7:ef:f8:94:82:2b:d7:15:66:56:ae:af:5e:eb:
a8:94:4b:f0:0b:8a:e5:0e:22:74:7c:cf:c4:c0:f0:a5:49:eb:
80:81:ca:e0:26:ee:1c:5f:a6:10:95:61:ea:00:14:df:c8:9c:
d5:41:bf:ee:db:c5:8f:53:00:a0:c4:d9:3d:a8:16:9c:f6:05:
33:ff:88:4f:ce:c3:8c:3a:e4:6a:31:ec:df:a5:79:7a:d0:1b:
81:c8:85:46:e4:43:f5:8b:82:7d:8a:09:6e:f9:b2:ca:b8:03:
72:df:a3:e1:0e:6b:3e:c6:6e:95:1d:99:76:41:f8:d9:35:f1:
ca:5a:26:b5:3f:2b:39:3f:1c:21:6e:88:8a:f9:26:66:3e:54:
29:37:67:68:13:68:18:bd:ec:5b:8b:99:a8:5f:d8:14:b9:9f:
ae:99:79:18:5b:74:94:4f:0a:e8:97:54:8a:e7:c6:12:1b:bf:
29:02:1e:7d:fc:2c:2d:52:39:9f:3a:55:fd:af:d0:99:8a:14:
0f:df:33:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:27:44 2026 by rpki-client