$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: e2VfcIxelI0jIzdWDJde3/9QzV6KjZ4JZ+ESsjmx9DY= Subject key identifier: 16:FA:61:30:89:E0:30:8F:DC:77:F4:72:84:8C:92:9B:BB:6E:CF:70 Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: D9 Signing time: Sun 05 Apr 2026 06:04:12 +0000 Manifest this update: Sun 05 Apr 2026 06:04:12 +0000 Manifest next update: Sun 12 Apr 2026 06:04:12 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: nx6dOXg6CaXvf8JwLjwbfB7oLbeaY6F5rrI6k3TPEWU=) 2: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: Z0jvFP5BjglIoDohYkPG+7O5fRwbkWtepTYds7vg4QI=) 3: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: v6FRtsNu3PHrktspFs/DWFM1NxVkPvD0FdLuMbgMmRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Apr 5 06:04:12 2026 GMT Not After : Apr 12 06:04:12 2026 GMT Subject: CN=69d1fb5c-5b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:f1:cc:06:e3:d0:f7:68:44:48:53:76:d5: 34:47:fe:42:06:a0:23:b9:22:4a:30:95:58:13:d1: b8:c9:39:4b:31:13:c2:00:0e:38:1c:75:9b:3b:d3: 5a:2e:69:e6:ce:6f:8b:33:4d:fe:40:93:4d:45:ba: df:0b:b5:01:70:18:b4:de:f5:f0:d6:84:f1:1b:ba: 6e:12:c8:30:33:02:71:8a:e7:47:00:75:c0:d8:c3: 94:ce:97:56:34:90:e0:ca:60:41:ef:cc:af:fa:a3: fc:55:4a:46:a3:df:f7:b6:b7:30:ff:92:63:d5:33: 6a:8c:46:2d:5d:fe:ba:22:f9:ca:ba:3b:13:b1:77: 10:2f:82:cc:2d:70:4e:93:e5:99:0b:3a:89:51:79: 98:69:b1:70:29:08:9c:1f:f3:14:56:96:ee:72:39: ce:31:c8:ea:44:83:ad:4d:06:7c:88:b4:38:f7:f2: f4:d7:63:52:e3:6e:1b:73:63:e4:22:9e:d1:55:5c: 48:dc:d8:85:25:d6:b6:19:fc:ff:13:db:cc:f9:af: 78:4c:0e:b8:c2:a7:6b:27:75:a5:f6:3c:cb:9c:98: 49:39:6a:31:14:f6:bd:d1:03:1e:b6:c2:22:63:c0: 1a:2c:83:7e:03:7a:f9:1a:31:ee:3b:06:22:d7:49: 17:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FA:61:30:89:E0:30:8F:DC:77:F4:72:84:8C:92:9B:BB:6E:CF:70 X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9f:8b:c7:73:5f:fd:10:1e:9d:d8:29:0b:89:e4:4b:5c:45: 46:8e:6f:7c:30:de:92:15:21:fe:e2:20:3c:b3:1a:c1:e2:df: c6:9a:e4:93:3c:7a:d7:e3:7a:06:77:3a:a7:e3:24:fc:3f:b6: 3f:89:97:86:5d:80:8b:9e:10:d7:40:60:6c:2e:4f:2b:18:98: e6:e1:99:73:94:63:ea:ff:81:7d:8e:c8:3e:69:5b:ba:cd:9f: 9d:cb:5b:d1:51:d4:5d:42:eb:91:9c:02:75:5c:36:40:c1:38: c3:1c:0c:83:3e:e8:2a:50:88:6b:b4:e5:1b:c4:29:ae:c2:1f: f7:cf:e0:28:fd:9a:ae:83:eb:c4:80:f4:e4:6c:87:5d:5f:f9: ea:cc:92:aa:8a:98:a5:94:6e:ee:d1:92:da:50:4a:25:3f:2c: 41:98:24:29:2d:f3:69:85:8e:b9:78:c9:bb:60:b2:6b:14:71: 91:78:be:da:92:52:e3:87:f6:92:55:cd:54:01:3d:03:37:bb: 3a:ac:b8:7d:96:ff:78:f8:b1:f3:b1:a0:81:39:9e:2e:64:34: 90:58:0a:e2:eb:41:54:73:e2:5a:01:17:61:31:ba:a2:2b:ad: 4e:23:e5:03:f9:32:29:ff:67:a7:bd:ba:f0:ad:f2:18:f1:55: 76:cf:67:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4QjUxMTAvBgNVBAUTKENEQkZBMEE2RDA2MUUxRkU3MDM0QjQwRjJFRTJFNEI1 M0RFOEZERTEwHhcNMjYwNDA1MDYwNDEyWhcNMjYwNDEyMDYwNDEyWjAYMRYwFAYD VQQDEw02OWQxZmI1Yy01YjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3nxzAbj0PdoREhTdtU0R/5CBqAjuSJKMJVYE9G4yTlLMRPCAA44HHWbO9Na Lmnmzm+LM03+QJNNRbrfC7UBcBi03vXw1oTxG7puEsgwMwJxiudHAHXA2MOUzpdW NJDgymBB78yv+qP8VUpGo9/3trcw/5Jj1TNqjEYtXf66IvnKujsTsXcQL4LMLXBO k+WZCzqJUXmYabFwKQicH/MUVpbucjnOMcjqRIOtTQZ8iLQ49/L012NS424bc2Pk Ip7RVVxI3NiFJda2Gfz/E9vM+a94TA64wqdrJ3Wl9jzLnJhJOWoxFPa90QMetsIi Y8AaLIN+A3r5GjHuOwYi10kXHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBb6YTCJ 4DCP3Hf0coSMkpu7bs9wMB8GA1UdIwQYMBaAFM2/oKbQYeH+cDS0Dy7i5LU96P3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThCNS85NkQ4MjM4QUVD MDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRmNXdOTFFQTHVMa3RUM29f ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThCNS85NkQ4MjM4QUVDMDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRm NXdOTFFQTHVMa3RUM29fZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa5+Lx3Nf/RAendgpC4nkS1xFRo5vfDDekhUh/uIgPLMaweLfxprkkzx61+N6 Bnc6p+Mk/D+2P4mXhl2Ai54Q10BgbC5PKxiY5uGZc5Rj6v+BfY7IPmlbus2fnctb 0VHUXULrkZwCdVw2QME4wxwMgz7oKlCIa7TlG8QprsIf98/gKP2aroPrxID05GyH XV/56sySqoqYpZRu7tGS2lBKJT8sQZgkKS3zaYWOuXjJu2CyaxRxkXi+2pJS44f2 klXNVAE9Aze7Oqy4fZb/ePix87GggTmeLmQ0kFgK4utBVHPiWgEXYTG6oiutTiPl A/kyKf9np7268K3yGPFVds9n2Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:35 2026 by rpki-client