$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft File: GhottiJwSYYNHLb7OB0DX3zd_nk.mft (raw, json) Hash identifier: f9YRfwJDER6qU7ehonenGK2LbwShEOUaZLY01bGbQmw= Subject key identifier: 80:9C:B2:86:FA:2D:8B:C5:F9:F2:ED:4D:EF:6C:B7:8D:3F:33:3D:31 Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Certificate serial: 094C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft Manifest number: 0929 Signing time: Sat 24 Oct 2026 20:14:54 +0000 Manifest this update: Sat 24 Oct 2026 20:14:53 +0000 Manifest next update: Sat 31 Oct 2026 20:14:53 +0000 Files and hashes: 1: GhottiJwSYYNHLb7OB0DX3zd_nk.crl (hash: NiMUlpIwT6LG7EKD3FrKFuWr4rQ/ky5RpPiWwfWvzXo=) 2: 8AF33E36160E11F195136F2C2B3D8C67.roa (hash: Z9Sj3tjoXvHAguDjXbALg3NY/Nd04X4OP7AAtAJAUtM=) 3: 30ACE9D4C39911F19B59CD854911F970.roa (hash: 3DTmAl/GFMo1DZfYOneD/DU70QPj2jXHGw0paIbb8CY=) 4: EA0592C233BC11F18E15C13BAA833773.roa (hash: 2AmxTaI/ONNfaNj+T4TkXoaKMlxkde4cQ2NUWgbtWWM=) 5: B2E74042602811EF90548827C4F9AE02.roa (hash: j6SYkO3HZhEL2LK5lIazKp9zU4gcdGwtc5skzDjxN2o=) 6: 1D7B0544C39911F186A509344911F970.roa (hash: jtT5H+wXxPuwmDZD8Y3YfUWj6W+wzzGw0C7crTdmcwA=) 7: 9067F6746F3211EF8F5EFB20C4F9AE02.roa (hash: MSf7GXo8HNr6AIyrtXoXOUvwEs7jVEwkq9jkXz+jKko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 20:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2380 (0x94c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Validity Not Before: Oct 24 20:14:53 2026 GMT Not After : Oct 31 20:14:53 2026 GMT Subject: CN=6add11be-ede8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:98:f8:8f:8c:33:39:9e:61:9e:08:cb:d6: b0:33:5b:c6:62:46:75:68:6e:25:93:41:9a:b5:06: 2a:26:70:6f:8f:62:30:52:17:6e:23:ac:a1:20:60: c3:9d:04:9e:9e:1d:11:d4:2e:f0:9c:82:cc:88:80: 4d:79:73:69:fc:0c:ee:f6:c8:00:bf:a8:ec:03:69: 04:a3:39:6b:ee:08:71:38:82:b5:e8:05:f1:3d:be: 81:66:3b:d6:27:c3:bd:62:ed:cb:d9:6f:e8:b7:31: 00:5e:12:fa:d5:e7:8a:5e:1b:db:dc:fc:35:35:02: 69:06:29:01:d5:c3:b2:c0:17:55:a7:59:29:12:89: a5:32:7c:ae:c0:f5:60:e4:3b:3a:79:8a:c8:26:30: e1:0b:9e:74:07:3e:7f:a3:a5:be:da:89:9f:d6:44: 4b:fe:d5:9d:0f:eb:df:23:a6:5e:0f:ab:3c:79:f9: 14:72:97:c4:cb:40:94:06:ff:1e:a8:06:01:1f:af: 51:6c:b6:4c:c1:cd:f1:b9:18:01:d6:79:68:7a:db: 15:61:44:7d:69:33:11:9c:76:07:e0:81:40:1f:ca: 9b:9a:07:5a:b9:75:54:fa:3b:42:31:a0:13:eb:4a: 30:be:c8:6e:11:05:5c:01:c4:0c:28:31:e0:d4:44: b3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9C:B2:86:FA:2D:8B:C5:F9:F2:ED:4D:EF:6C:B7:8D:3F:33:3D:31 X509v3 Authority Key Identifier: keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:76:a7:a0:38:5a:bb:79:0e:2c:42:0c:94:ab:89:6f:48:38: 64:90:a8:64:d5:c9:c0:c9:50:7c:79:3e:f3:d1:ed:85:05:66: 74:29:77:81:82:ab:75:e4:9c:2b:c1:17:76:cd:b8:10:15:57: d0:e8:05:51:64:d5:95:e0:38:a4:ad:e4:65:05:6f:55:4f:34: 81:4c:d1:19:ca:76:22:44:77:67:6b:14:a9:ad:e9:b3:0d:7b: 35:12:c9:bb:1a:9c:db:16:86:c8:67:95:3e:4c:37:46:45:c4: 5e:82:50:a7:f3:b0:60:59:ff:9b:88:68:78:7c:f5:c7:34:6a: e3:82:d5:d2:7f:92:07:89:e7:9d:1c:f2:2f:3d:8d:80:ae:36: 2e:af:47:fc:99:76:45:cd:22:7b:2e:39:43:cb:e3:eb:e4:5b: c4:00:19:12:6b:20:86:64:74:ba:97:58:ae:55:32:a4:37:5f: 50:f0:60:65:82:de:c5:b8:6e:88:f1:c9:d6:22:d5:55:91:42: db:db:fa:f4:6b:d5:7e:d9:e3:7a:59:fe:2f:8f:d6:37:f4:f8: 57:42:b8:88:25:42:97:92:6b:d2:9f:2e:f7:e3:ec:b3:ac:ab: 1e:62:a8:03:14:18:71:5d:4a:18:2e:69:b9:ea:1c:ac:8f:53: c6:1d:a9:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MzMxMTAvBgNVBAUTKDFBMUEyREI2MjI3MDQ5ODYwRDFDQjZGQjM4MUQwMzVG N0NEREZFNzkwHhcNMjYxMDI0MjAxNDUzWhcNMjYxMDMxMjAxNDUzWjAYMRYwFAYD VQQDEw02YWRkMTFiZS1lZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuN2Y+I+MMzmeYZ4Iy9awM1vGYkZ1aG4lk0GatQYqJnBvj2IwUhduI6yhIGDD nQSenh0R1C7wnILMiIBNeXNp/Azu9sgAv6jsA2kEozlr7ghxOIK16AXxPb6BZjvW J8O9Yu3L2W/otzEAXhL61eeKXhvb3Pw1NQJpBikB1cOywBdVp1kpEomlMnyuwPVg 5Ds6eYrIJjDhC550Bz5/o6W+2omf1kRL/tWdD+vfI6ZeD6s8efkUcpfEy0CUBv8e qAYBH69RbLZMwc3xuRgB1nloetsVYUR9aTMRnHYH4IFAH8qbmgdauXVU+jtCMaAT 60owvshuEQVcAcQMKDHg1ESzswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFICcsob6 LYvF+fLtTe9st40/Mz0xMB8GA1UdIwQYMBaAFBoaLbYicEmGDRy2+zgdA1983f55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkzMy9GRDk1MjFCMkRD NTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZWU5ITGI3T0IwRFgzemRf bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dob3R0aUp3U1lZTkhMYjdPQjBEWDN6ZF9uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkzMy9GRDk1MjFCMkRDNTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZ WU5ITGI3T0IwRFgzemRfbmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIHanoDhau3kOLEIMlKuJb0g4ZJCoZNXJwMlQfHk+89HthQVmdCl3gYKrdeSc K8EXds24EBVX0OgFUWTVleA4pK3kZQVvVU80gUzRGcp2IkR3Z2sUqa3psw17NRLJ uxqc2xaGyGeVPkw3RkXEXoJQp/OwYFn/m4hoeHz1xzRq44LV0n+SB4nnnRzyLz2N gK42Lq9H/Jl2Rc0iey45Q8vj6+RbxAAZEmsghmR0updYrlUypDdfUPBgZYLexbhu iPHJ1iLVVZFC29v69GvVftnjeln+L4/WN/T4V0K4iCVCl5Jr0p8u9+Pss6yrHmKo AxQYcV1KGC5pueocrI9Txh2pQw== -----END CERTIFICATE-----Generated at Sun Oct 25 14:24:51 2026 by rpki-client