$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: Ixdec4LkqRxZsKiMlExsORDeJDrut/nYTE124WcSnNw= Subject key identifier: 15:36:15:89:78:7E:3B:89:C1:E8:BF:37:4A:0B:54:D5:17:E9:D6:C6 Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 36 Signing time: Sat 31 May 2025 07:09:51 +0000 Manifest this update: Sat 31 May 2025 07:09:51 +0000 Manifest next update: Sat 07 Jun 2025 07:09:51 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: MZo1Tw09iQ1VSDz8BQHPgcsPpUDtBcZ1AHNXn4YGJ90=) 2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: May 31 07:09:51 2025 GMT Not After : Jun 7 07:09:51 2025 GMT Subject: CN=683aab3f-98e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ea:82:ab:30:68:d4:22:68:e6:5d:c6:9c:16: 48:ac:0d:6d:ef:74:76:bd:bc:5e:d0:eb:b4:86:13: db:2b:8d:70:1e:6e:a3:59:48:28:95:a2:05:1a:f3: 6a:34:b3:28:88:c9:a1:89:0f:4f:a9:dd:74:ac:ec: 78:ce:e0:c5:d1:a9:b0:a9:bf:a6:d3:44:5c:29:a2: 0c:e0:5d:78:4b:7b:7d:84:9a:66:90:b8:20:ea:97: db:3d:9a:36:fa:bf:fa:90:59:34:4e:23:e4:9f:fe: ab:a2:51:20:cf:db:1c:b3:cc:11:65:66:c8:2a:3d: 30:7b:8d:e3:9a:25:03:aa:73:f3:d3:8e:da:f0:87: 3e:79:ed:6e:59:01:fc:74:e4:67:d3:28:6d:fd:4e: 59:e7:af:c9:25:fe:37:f6:df:59:23:70:43:7e:b6: c3:2e:d7:1f:73:5f:4c:8b:ea:6f:83:f8:03:f1:af: dc:da:65:d0:73:44:0a:57:92:83:f8:ac:8f:c4:f1: 2c:b0:c0:2c:83:47:64:35:c9:aa:a2:b4:db:b3:99: 32:be:cd:ce:8d:b2:45:6b:47:3c:4f:0e:7a:c6:59: d2:d2:21:a1:b8:9e:d9:c7:2e:98:5e:d1:ed:aa:b5: c2:03:32:78:c9:5d:20:d8:ee:27:9e:36:61:ff:71: 8b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:36:15:89:78:7E:3B:89:C1:E8:BF:37:4A:0B:54:D5:17:E9:D6:C6 X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:1e:80:ef:51:76:da:32:88:ef:f8:16:99:a1:b0:cb:4f:03: 3e:69:48:7b:c7:ab:c2:28:52:24:97:3b:aa:d1:6f:a1:ce:8b: 05:93:6c:4c:f2:09:2c:06:87:5b:e4:bc:bd:a2:fe:d4:47:3e: d0:70:49:a5:e2:fe:2f:f1:b1:b5:3a:fc:3d:f7:e4:7d:c2:e1: 99:84:45:53:b9:51:02:ec:2b:6e:0d:33:8c:e8:09:95:10:a3: d7:52:4c:15:68:85:47:40:78:16:86:5d:4f:55:89:cd:32:30: 62:e2:ca:07:24:6f:d4:17:c2:1c:49:38:f8:30:bb:52:0d:b1: 24:ad:5c:c9:65:51:aa:41:cf:65:22:df:59:ba:8c:30:8d:10: 4f:dd:65:74:1f:0a:b8:69:10:71:b8:a0:04:78:e4:36:4e:3f: aa:e5:f9:e4:2f:47:d4:13:a1:bb:5b:25:b4:83:db:62:f3:e0: 30:53:f6:98:e7:e6:08:ea:56:7e:e3:e2:a4:1c:b6:d8:92:04: 7b:fa:8c:64:a6:d3:10:20:a6:0c:b0:f3:0d:97:71:bf:fd:53: 00:5c:99:b4:3f:a2:09:8d:dc:0a:94:51:ea:39:13:f3:a7:cf: 2b:75:d5:4d:63:01:11:aa:0d:8c:3a:1b:2d:4a:cb:1a:85:06: 24:d9:55:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OThCNTExMC8GA1UEBRMoQ0RCRkEwQTZEMDYxRTFGRTcwMzRCNDBGMkVFMkU0QjUz REU4RkRFMTAeFw0yNTA1MzEwNzA5NTFaFw0yNTA2MDcwNzA5NTFaMBgxFjAUBgNV BAMTDTY4M2FhYjNmLTk4ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDo6oKrMGjUImjmXcacFkisDW3vdHa9vF7Q67SGE9srjXAebqNZSCiVogUa82o0 syiIyaGJD0+p3XSs7HjO4MXRqbCpv6bTRFwpogzgXXhLe32EmmaQuCDql9s9mjb6 v/qQWTROI+Sf/quiUSDP2xyzzBFlZsgqPTB7jeOaJQOqc/PTjtrwhz557W5ZAfx0 5GfTKG39Tlnnr8kl/jf231kjcEN+tsMu1x9zX0yL6m+D+APxr9zaZdBzRApXkoP4 rI/E8SywwCyDR2Q1yaqitNuzmTK+zc6NskVrRzxPDnrGWdLSIaG4ntnHLphe0e2q tcIDMnjJXSDY7ieeNmH/cYu3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFTYViXh+ O4nB6L83SgtU1Rfp1sYwHwYDVR0jBBgwFoAUzb+gptBh4f5wNLQPLuLktT3o/eEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5OEI1Lzk2RDgyMzhBRUMw MDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19l RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemItZ3B0Qmg0ZjV3TkxRUEx1TGt0VDNvX2VFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 OEI1Lzk2RDgyMzhBRUMwMDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1 d05MUVBMdUxrdFQzb19lRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACEegO9RdtoyiO/4FpmhsMtPAz5pSHvHq8IoUiSXO6rRb6HOiwWTbEzy CSwGh1vkvL2i/tRHPtBwSaXi/i/xsbU6/D335H3C4ZmERVO5UQLsK24NM4zoCZUQ o9dSTBVohUdAeBaGXU9Vic0yMGLiygckb9QXwhxJOPgwu1INsSStXMllUapBz2Ui 31m6jDCNEE/dZXQfCrhpEHG4oAR45DZOP6rl+eQvR9QTobtbJbSD22Lz4DBT9pjn 5gjqVn7j4qQcttiSBHv6jGSm0xAgpgyw8w2Xcb/9UwBcmbQ/ogmN3AqUUeo5E/On zyt11U1jARGqDYw6Gy1KyxqFBiTZVU8= -----END CERTIFICATE-----Generated at Sat May 31 14:43:09 2025 by rpki-client