
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
File: GhottiJwSYYNHLb7OB0DX3zd_nk.mft (raw, json)
Hash identifier: Fi5KXc3tqfgGXyenwMi2DooRjXEv6c2uTpjARSnixZk=
Subject key identifier: 8A:E9:60:82:9E:35:33:5C:5D:B7:73:CA:69:89:B9:A4:A1:99:5E:20
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial: 08FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
Manifest number: 08E1
Signing time: Fri 12 Jun 2026 20:26:22 +0000
Manifest this update: Fri 12 Jun 2026 20:26:22 +0000
Manifest next update: Fri 19 Jun 2026 20:26:22 +0000
Files and hashes: 1: GhottiJwSYYNHLb7OB0DX3zd_nk.crl (hash: n8vTw5MMGF/0WjLj31L/pO24s1fPdcYancsaw8jPF0o=)
2: B2E74042602811EF90548827C4F9AE02.roa (hash: oTkK2i8CrxhUFMPdA2ToXRh9tqOM2ExbKiaxoXzOYoA=)
3: EA0592C233BC11F18E15C13BAA833773.roa (hash: 0hJANdnST2Bxr7dBtneDjlXCF8SapdC+A0SzQCXlilg=)
4: 9067F6746F3211EF8F5EFB20C4F9AE02.roa (hash: aZVjwOBzEzdNCEW5XvUhfqb5dAMw3PX/S+WhGKoCahs=)
5: 8AF33E36160E11F195136F2C2B3D8C67.roa (hash: 3Qf43LejVMYObXq2xEMUis8BZYPMSWI0XFlk5JiZduA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302 (0x8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Validity
Not Before: Jun 12 20:26:22 2026 GMT
Not After : Jun 19 20:26:22 2026 GMT
Subject: CN=6a2c6b6e-18f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:2e:a2:9e:be:b3:02:72:ec:e3:3a:9f:12:
0a:02:20:d5:a4:5b:da:d6:8d:74:c4:02:df:5b:56:
30:12:0f:b3:f2:20:04:44:16:77:38:41:d3:ef:30:
8a:aa:4b:f8:0c:8a:15:e4:6e:bd:47:c9:38:31:28:
b0:c4:13:28:b1:1c:60:ae:93:ae:1e:9b:22:cb:d5:
61:80:2f:00:02:ae:dd:89:ac:95:96:ac:74:4d:14:
17:1f:bb:23:3d:0d:96:6a:28:d4:1e:0d:47:be:01:
1f:23:12:b5:ae:08:88:32:45:7b:ee:eb:23:8e:cc:
74:fd:ce:01:6a:32:9d:80:9b:ae:79:77:82:59:87:
40:e9:d9:7b:e2:c6:83:fc:0a:21:73:9b:4f:8b:13:
a5:41:fd:14:14:2a:c4:ee:80:d2:eb:ed:be:fa:53:
c9:ba:6a:17:a8:77:ea:a3:cb:4b:89:28:65:ae:27:
23:d4:85:ed:a2:ac:09:44:d0:00:89:55:50:ea:28:
38:cb:96:25:bf:7d:c4:8a:0a:a2:28:5c:23:52:29:
64:71:e4:b6:6e:61:a2:99:27:fe:6a:00:67:29:ca:
d2:d6:37:ce:b2:8f:17:42:5a:b2:89:cb:7f:b6:14:
90:09:ae:2f:02:8d:22:2a:cc:5e:27:06:2b:6c:77:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:60:82:9E:35:33:5C:5D:B7:73:CA:69:89:B9:A4:A1:99:5E:20
X509v3 Authority Key Identifier:
keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cf:ea:d2:c2:bd:ec:39:eb:d0:bc:78:86:d0:00:3c:c3:a1:
eb:79:46:b1:86:b0:d6:39:88:d3:ac:cf:59:2c:e9:d6:cf:ee:
5b:f7:68:1c:38:25:be:18:6b:68:02:94:fb:c5:7d:ff:45:f9:
4b:3e:95:0e:10:7a:32:99:41:5b:97:57:71:3c:8f:f9:d6:d0:
ec:1e:74:cf:84:ec:1c:e0:80:f6:82:d5:d5:63:71:7c:d9:7c:
2d:b9:12:d5:5c:56:6a:2a:b6:0d:8d:ed:6f:c5:8b:af:9a:cb:
7a:af:54:3e:59:4d:b5:04:57:8f:eb:dd:63:b6:80:7c:f0:a2:
73:1c:d8:e2:1e:5f:c8:26:71:6e:9f:74:a2:d7:e2:c4:ce:cc:
3c:8c:be:77:c7:53:2e:1a:da:42:41:35:e5:96:a7:37:34:78:
12:d5:ad:6b:88:7c:e1:cb:6d:30:21:f5:35:aa:f5:95:a8:c5:
17:89:d7:c1:4d:c2:0b:d1:22:8d:45:03:37:07:75:6d:0f:f5:
a2:7d:2f:45:66:42:31:e7:c7:f4:5c:4f:18:15:3a:d2:c9:4e:
05:64:14:d0:ad:2d:e2:fc:be:41:ad:cb:ab:eb:f6:bc:7d:e9:
e4:f9:9c:70:c3:0d:6c:49:31:7c:4b:23:14:d8:a3:8e:d8:40:
7f:e6:eb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:02 2026 by rpki-client