$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: 6b0g1H6b/fGoW26RyjmzCEF81HZA4UU4gOJBJUM1ox8= Subject key identifier: 9B:75:86:8A:91:93:E8:1C:03:D1:A1:DD:AC:D2:F0:ED:AE:51:1C:83 Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 010E Signing time: Tue 21 Jul 2026 07:39:00 +0000 Manifest this update: Tue 21 Jul 2026 07:38:59 +0000 Manifest next update: Tue 28 Jul 2026 07:38:59 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: vpyuOgnzfDLpo8xJNgb031juMdL4JGl9tJMWk4HcIJ0=) 2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: v6FRtsNu3PHrktspFs/DWFM1NxVkPvD0FdLuMbgMmRo=) 3: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: Z0jvFP5BjglIoDohYkPG+7O5fRwbkWtepTYds7vg4QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 07:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Jul 21 07:38:59 2026 GMT Not After : Jul 28 07:38:59 2026 GMT Subject: CN=6a5f2214-d0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:0d:63:9c:54:68:f8:8f:fe:3f:45:1b:18: fe:90:81:9c:d8:4f:d3:24:c1:7e:68:9e:fd:88:4c: d5:4e:0e:a4:04:88:66:63:7f:e0:6f:9f:d3:b5:8f: 9f:9d:cb:76:e5:07:ca:c0:46:1b:ce:df:59:10:5c: b8:fc:ec:1d:1b:0c:8d:7b:72:3c:22:b5:ae:98:f6: e1:e0:f5:05:34:8c:9a:91:7d:c5:f3:da:2f:29:84: e8:42:ca:e7:45:9f:8f:d7:bb:9c:e6:c9:46:c2:74: 2f:4d:21:21:10:73:19:4c:5d:e3:b1:eb:a0:0b:25: 0f:f5:19:a8:b3:de:c6:e1:7b:5c:b1:8b:5f:58:7f: 7a:96:d5:cf:6a:12:32:1f:cc:05:7a:62:ed:63:21: cb:6b:a1:bc:00:36:0e:22:20:97:48:ce:b5:2f:f2: 92:fb:86:3b:01:54:b5:1f:f2:39:2e:cd:60:85:d0: 68:89:71:99:e2:07:72:44:10:d3:b7:ef:88:30:a2: 62:9b:a1:23:b6:e2:11:af:7c:c4:35:7b:e1:a0:68: 88:10:1b:8c:08:3f:62:bb:bb:ff:ee:21:b2:38:69: ee:ae:7a:e0:8e:44:a7:11:a2:8f:cf:cd:ab:4b:a7: 2e:b6:29:dd:27:af:35:57:a7:1c:cb:f6:b1:bc:67: a4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:75:86:8A:91:93:E8:1C:03:D1:A1:DD:AC:D2:F0:ED:AE:51:1C:83 X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0f:9d:11:56:fd:3c:d0:7c:12:7b:f2:ad:0f:4a:c1:b0:f8: 59:c8:4b:0c:90:9a:d6:f5:ee:6e:4d:c5:67:cd:6e:97:ee:8c: 19:23:b5:df:65:e1:26:64:47:18:4b:7e:0c:cc:26:a1:2c:59: 33:5b:02:2b:e7:01:03:6f:ea:3c:16:e3:14:53:bc:f0:7c:41: 4c:35:f4:87:c1:36:f9:60:80:42:18:e8:ca:11:6f:60:ca:0a: d0:12:e2:62:c5:9e:fb:a9:91:42:41:74:ea:73:ab:2b:4f:fc: 07:b0:9c:ea:4f:22:97:cc:50:d3:a1:3d:e7:ac:ac:51:73:05: 7e:3e:94:ba:9c:d7:77:55:74:ef:20:4e:bd:c1:83:a5:85:c9: 0a:60:44:c9:d3:bf:e6:65:af:0f:55:25:21:35:31:d4:db:e4: ae:87:26:04:12:b1:b2:67:59:21:37:83:57:dc:4e:d9:e3:9f: 11:89:26:bd:a5:15:16:d0:5d:6d:00:86:56:1b:f7:91:db:75: b3:42:18:ee:91:a7:99:6f:62:ec:a3:75:14:05:65:4e:04:cc: af:b4:fd:f4:f6:88:54:eb:a7:d1:08:0e:5e:e9:1c:a6:c4:fe: 26:02:6a:0a:5f:c1:09:78:74:ec:4c:12:49:cf:74:10:82:98: e8:24:a2:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4QjUxMTAvBgNVBAUTKENEQkZBMEE2RDA2MUUxRkU3MDM0QjQwRjJFRTJFNEI1 M0RFOEZERTEwHhcNMjYwNzIxMDczODU5WhcNMjYwNzI4MDczODU5WjAYMRYwFAYD VQQDEw02YTVmMjIxNC1kMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6INY5xUaPiP/j9FGxj+kIGc2E/TJMF+aJ79iEzVTg6kBIhmY3/gb5/TtY+f nct25QfKwEYbzt9ZEFy4/OwdGwyNe3I8IrWumPbh4PUFNIyakX3F89ovKYToQsrn RZ+P17uc5slGwnQvTSEhEHMZTF3jseugCyUP9Rmos97G4XtcsYtfWH96ltXPahIy H8wFemLtYyHLa6G8ADYOIiCXSM61L/KS+4Y7AVS1H/I5Ls1ghdBoiXGZ4gdyRBDT t++IMKJim6EjtuIRr3zENXvhoGiIEBuMCD9iu7v/7iGyOGnurnrgjkSnEaKPz82r S6cutindJ681V6ccy/axvGekrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJt1hoqR k+gcA9Gh3azS8O2uURyDMB8GA1UdIwQYMBaAFM2/oKbQYeH+cDS0Dy7i5LU96P3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThCNS85NkQ4MjM4QUVD MDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRmNXdOTFFQTHVMa3RUM29f ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThCNS85NkQ4MjM4QUVDMDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRm NXdOTFFQTHVMa3RUM29fZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKw+dEVb9PNB8EnvyrQ9KwbD4WchLDJCa1vXubk3FZ81ul+6MGSO132XhJmRH GEt+DMwmoSxZM1sCK+cBA2/qPBbjFFO88HxBTDX0h8E2+WCAQhjoyhFvYMoK0BLi YsWe+6mRQkF06nOrK0/8B7Cc6k8il8xQ06E956ysUXMFfj6UupzXd1V07yBOvcGD pYXJCmBEydO/5mWvD1UlITUx1NvkrocmBBKxsmdZITeDV9xO2eOfEYkmvaUVFtBd bQCGVhv3kdt1s0IY7pGnmW9i7KN1FAVlTgTMr7T99PaIVOun0QgOXukcpsT+JgJq Cl/BCXh07EwSSc90EIKY6CSi4w== -----END CERTIFICATE-----Generated at Tue Jul 21 12:21:27 2026 by rpki-client