Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
File:                     GhottiJwSYYNHLb7OB0DX3zd_nk.mft (raw, json)
Hash identifier:          t4Od0p2TAdo4uLQXG1ENCaBVOkq6nuR8oLj7A23AxZI=
Subject key identifier:   E2:F4:87:BD:4A:F7:DF:A3:BD:7C:E1:48:47:CB:6C:48:91:78:84:75
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Certificate issuer:       /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial:       0938
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
Manifest number:          0917
Signing time:             Tue 22 Sep 2026 20:05:37 +0000
Manifest this update:     Tue 22 Sep 2026 20:05:36 +0000
Manifest next update:     Tue 29 Sep 2026 20:05:36 +0000
Files and hashes:         1: GhottiJwSYYNHLb7OB0DX3zd_nk.crl (hash: KWAHu40aSr2FHm/nc5TgPXVQqNk67261h9WzLV8MUDU=)
                          2: 9067F6746F3211EF8F5EFB20C4F9AE02.roa (hash: MSf7GXo8HNr6AIyrtXoXOUvwEs7jVEwkq9jkXz+jKko=)
                          3: 8AF33E36160E11F195136F2C2B3D8C67.roa (hash: Z9Sj3tjoXvHAguDjXbALg3NY/Nd04X4OP7AAtAJAUtM=)
                          4: B2E74042602811EF90548827C4F9AE02.roa (hash: j6SYkO3HZhEL2LK5lIazKp9zU4gcdGwtc5skzDjxN2o=)
                          5: EA0592C233BC11F18E15C13BAA833773.roa (hash: 2AmxTaI/ONNfaNj+T4TkXoaKMlxkde4cQ2NUWgbtWWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
                          rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2360 (0x938)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
        Validity
            Not Before: Sep 22 20:05:36 2026 GMT
            Not After : Sep 29 20:05:36 2026 GMT
        Subject: CN=6ab2df91-76eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:2d:9e:82:01:cd:11:9e:b4:10:4f:20:fb:
                    0d:78:ae:99:17:29:7e:a3:62:cc:f1:c5:b5:fd:4e:
                    a1:24:45:33:9e:ca:09:c8:41:ae:75:a1:ca:2e:90:
                    d5:0d:f5:8f:19:63:22:e9:c7:22:2b:f1:00:4c:e7:
                    79:fa:c2:3d:bf:eb:ba:31:45:3e:fb:4d:c2:43:bc:
                    6d:1a:e2:06:de:8d:d3:a9:20:b8:23:37:c9:bf:5f:
                    d3:fb:ca:58:d3:ca:9c:f6:49:79:6f:95:db:cf:56:
                    a6:1c:d7:a8:95:c8:76:21:74:e4:f3:50:87:49:dd:
                    9a:0d:f8:dd:2d:f0:39:ac:ea:a7:72:9b:4b:f3:9e:
                    96:84:7b:95:01:2e:49:4f:68:98:64:34:ef:31:cf:
                    ac:07:1a:1d:8e:c5:79:1d:6a:28:12:de:22:f3:b8:
                    b0:9f:2a:bf:da:7d:32:ac:fa:65:57:c4:84:45:ca:
                    3a:d3:7b:a0:a8:05:e3:f2:bd:b9:af:60:72:70:35:
                    e2:93:27:1f:cd:c9:41:9a:99:a3:cc:48:21:ed:ce:
                    dd:a3:9d:19:d6:3d:42:11:e5:85:b0:a6:e1:bf:08:
                    47:55:11:d0:fe:66:04:36:97:cb:fd:f8:4a:08:3e:
                    c5:52:dd:4b:78:48:7c:80:19:a1:e4:18:6e:6b:18:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F4:87:BD:4A:F7:DF:A3:BD:7C:E1:48:47:CB:6C:48:91:78:84:75
            X509v3 Authority Key Identifier:
                keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:95:4e:9c:46:7b:b0:f1:2e:82:c3:68:1a:52:ca:83:94:91:
         62:36:c8:a4:e6:db:7d:b1:72:80:cb:4a:8b:ae:8d:56:32:10:
         f5:81:e0:17:91:43:47:76:65:ac:d2:54:b6:4e:3b:1f:7d:bd:
         85:f1:70:35:f9:57:79:95:d6:73:4d:02:d7:04:c4:01:de:9b:
         ff:97:ac:45:79:f5:1b:e2:ec:f1:cb:fb:f8:4f:6f:a9:92:f6:
         2f:40:f4:a2:a2:ee:14:12:cd:00:44:0e:5f:98:a6:cf:cf:a3:
         0e:f4:18:bb:50:b8:ad:52:dd:15:cf:26:5c:58:c1:c8:e6:a8:
         6d:e0:63:9e:d4:78:d9:40:67:42:06:95:04:7f:c9:b4:a2:f8:
         89:af:bc:de:69:69:1e:66:6f:b8:8a:27:63:53:61:bf:11:a2:
         13:d6:09:b5:c3:a0:82:4d:02:fc:47:27:b7:69:29:3e:9d:5d:
         0d:fb:a9:78:86:3a:1f:44:1a:89:20:1d:95:c9:8e:5c:7d:c3:
         33:74:de:25:c3:9e:28:a8:ad:d2:31:89:a0:f0:39:93:49:b3:
         5c:41:29:a1:34:b9:94:52:fc:e9:cc:84:69:fe:92:e7:3e:43:
         76:39:84:a7:cc:eb:74:99:a2:2a:51:a5:02:98:9f:85:40:57:
         de:75:60:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:51:55 2026 by rpki-client