
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
File: GhottiJwSYYNHLb7OB0DX3zd_nk.mft (raw, json)
Hash identifier: 7Rja9N5OBF8EHj8lJCwhk6Eb03AYz3BWY/0p0mgFWLA=
Subject key identifier: 61:0A:77:53:2E:A5:07:9C:9D:D8:8B:EA:84:EC:62:09:2F:2C:DB:85
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial: 0929
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
Manifest number: 090C
Signing time: Fri 04 Sep 2026 20:11:23 +0000
Manifest this update: Fri 04 Sep 2026 20:11:22 +0000
Manifest next update: Fri 11 Sep 2026 20:11:22 +0000
Files and hashes: 1: GhottiJwSYYNHLb7OB0DX3zd_nk.crl (hash: ssN1iKpsDyLckwSqYcEeoQQw/jbhrwyNJsQo+NIUlPk=)
2: EA0592C233BC11F18E15C13BAA833773.roa (hash: 0hJANdnST2Bxr7dBtneDjlXCF8SapdC+A0SzQCXlilg=)
3: 8AF33E36160E11F195136F2C2B3D8C67.roa (hash: 3Qf43LejVMYObXq2xEMUis8BZYPMSWI0XFlk5JiZduA=)
4: 9067F6746F3211EF8F5EFB20C4F9AE02.roa (hash: aZVjwOBzEzdNCEW5XvUhfqb5dAMw3PX/S+WhGKoCahs=)
5: B2E74042602811EF90548827C4F9AE02.roa (hash: oTkK2i8CrxhUFMPdA2ToXRh9tqOM2ExbKiaxoXzOYoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345 (0x929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Validity
Not Before: Sep 4 20:11:22 2026 GMT
Not After : Sep 11 20:11:22 2026 GMT
Subject: CN=6a9b25ea-c349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:91:df:36:80:d7:5f:6a:28:97:7a:cc:66:
16:bc:ff:6e:45:4f:b0:f6:88:3e:b8:61:07:4f:01:
f8:61:25:ea:75:c8:1d:de:38:f1:c3:b5:d6:98:32:
90:d6:d8:95:3a:94:19:54:d3:2a:a0:6e:e5:cc:8c:
96:52:6f:5c:43:eb:21:c6:7e:07:8f:25:1c:aa:e5:
21:26:6e:4b:c7:07:64:7f:44:2a:96:d2:23:45:43:
d9:03:0d:c0:09:65:08:d5:cc:69:fc:6c:2a:e2:5c:
91:a4:79:47:24:a6:7d:e4:5e:cc:f3:27:24:06:a0:
c0:d1:32:d1:17:e8:d0:80:6e:6a:35:1a:dd:20:8c:
45:0e:0b:ad:a8:11:88:35:a9:1c:29:d4:67:ab:3d:
69:f3:d6:55:28:da:0a:21:e5:7e:a1:27:25:82:a7:
39:08:b3:7f:8e:f1:af:c1:9e:2d:34:53:86:91:f5:
db:47:e2:4f:61:8b:80:6f:71:cb:e9:1f:02:bb:42:
9c:99:f0:4a:07:90:ea:e6:59:0d:12:4f:31:a6:c7:
bb:b4:c1:35:85:68:88:3e:03:40:66:bd:00:d0:5d:
f4:19:84:c4:21:52:51:4e:b4:0a:ad:ad:c2:b2:e3:
48:6c:f4:f3:79:12:06:68:b8:d9:2c:36:23:fb:4a:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0A:77:53:2E:A5:07:9C:9D:D8:8B:EA:84:EC:62:09:2F:2C:DB:85
X509v3 Authority Key Identifier:
keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:a6:ad:7a:ba:23:7f:19:fa:39:a7:35:86:90:0d:82:07:14:
a8:7a:53:56:9f:3a:cd:c8:04:f4:49:ad:dd:71:3a:90:4b:4d:
70:28:08:80:b2:97:a9:27:41:d8:44:ce:04:05:18:8c:c1:fe:
76:f4:ed:76:cf:13:4a:bc:b9:ab:b6:45:42:0a:f3:79:08:89:
65:1b:b7:04:a6:d3:6d:a1:eb:72:16:f7:d0:47:09:d9:b7:c0:
ec:46:9d:f8:d6:ad:14:50:27:92:0c:81:72:84:05:e0:b6:ab:
64:d8:27:c6:67:3f:a1:d0:c9:c4:09:68:98:b3:c8:61:e4:b3:
91:30:37:35:42:67:c8:5e:b8:c7:78:86:65:5d:fa:07:d1:a3:
30:31:f8:be:22:1d:82:77:4d:80:d8:ef:41:b4:32:01:d3:d4:
81:a3:e8:99:7a:e0:79:a7:a3:4e:3f:08:19:f3:8d:4b:d1:6d:
07:56:9e:be:18:eb:c6:1a:8c:28:7e:77:39:99:a8:d0:07:e9:
e1:a0:49:55:89:02:0d:bb:88:48:ca:62:cc:a1:e6:9a:ef:0d:
c8:8f:a1:e4:af:91:aa:27:4d:7c:31:23:ce:04:30:4e:e7:13:
23:73:25:6d:e3:cf:31:af:b2:ff:c6:ca:44:a3:a8:a4:f1:31:
4c:cd:c6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 19:09:36 2026 by rpki-client