$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: CbKuKF0vuC6XXgove4nu1TUR2Ph6pl1DB2b7KBwntYc= Subject key identifier: 9F:81:F0:72:17:6C:50:4E:B6:69:BE:EA:04:0C:62:11:5A:15:8F:67 Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: F0 Signing time: Thu 21 May 2026 06:29:55 +0000 Manifest this update: Thu 21 May 2026 06:29:54 +0000 Manifest next update: Thu 28 May 2026 06:29:54 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: CdJh88pGUpqrVAQaKwSF3Rz4fsvY0hg/qvUQXkbxZhQ=) 2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: v6FRtsNu3PHrktspFs/DWFM1NxVkPvD0FdLuMbgMmRo=) 3: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: Z0jvFP5BjglIoDohYkPG+7O5fRwbkWtepTYds7vg4QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: May 21 06:29:54 2026 GMT Not After : May 28 06:29:54 2026 GMT Subject: CN=6a0ea663-2075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:18:ee:cc:d0:ba:05:bb:a9:2f:c6:54:00:c4: aa:43:1a:63:9c:7e:e3:08:6d:01:f7:2a:b1:24:75: bc:88:d6:9f:31:a0:43:0c:52:13:89:b7:19:3d:fd: bd:b9:41:fb:1d:e7:7e:a6:4e:99:50:6b:2d:e9:7a: cc:bf:50:d9:37:0b:90:a5:6a:3a:64:c5:db:67:15: 73:ed:1e:5e:a8:2f:48:52:ed:ad:91:b7:8c:0c:89: 8b:12:ab:e9:7e:0a:91:21:9f:d8:84:29:0b:f4:cf: f8:ad:a6:74:f2:33:3d:3b:55:cb:e6:8c:ef:e5:48: 8b:4d:c6:fd:c2:12:df:25:f2:0f:ad:91:4f:2f:4f: 93:76:9e:86:b8:d5:6c:8e:4b:a5:4c:f1:e3:16:78: 49:50:d9:d1:05:21:78:cf:26:06:81:42:0c:47:2b: 03:18:92:e3:fa:fa:01:d4:c5:7c:27:17:b3:22:d9: e9:ba:9e:22:20:42:47:c2:8f:70:7c:7c:65:7f:99: be:02:25:a3:35:70:29:47:87:47:cf:cc:6a:1d:6a: b9:1b:3a:47:5c:b6:43:e7:9f:5a:61:bc:07:6a:f0: fb:38:d3:ce:37:96:f2:35:fb:91:ec:96:73:7e:48: 69:47:f0:1d:93:8a:db:49:01:9e:00:cb:d6:17:d7: 5c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:81:F0:72:17:6C:50:4E:B6:69:BE:EA:04:0C:62:11:5A:15:8F:67 X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:bc:2c:4b:b6:2f:ca:25:98:35:e2:ea:09:9a:84:3b:08:5d: 20:3d:23:ef:ef:1f:17:be:29:5b:54:cf:58:ac:1c:08:d7:7b: 67:1b:65:a3:cc:74:24:02:1b:cb:21:55:39:52:d3:a2:79:45: 23:a6:28:0d:ae:42:19:e4:d5:6c:c4:01:e3:a8:a6:51:9a:b8: 70:9e:0a:ee:44:96:6a:b2:4f:27:b3:7a:31:a6:fa:f7:6b:c3: c1:03:8d:8a:da:12:ef:0e:ef:38:04:e9:39:c3:d8:51:7d:34: a8:0f:23:91:77:e6:a3:9b:76:ae:73:92:ae:6a:b3:f3:d4:4a: 50:6f:34:dd:fa:4c:b1:5a:f2:87:03:cb:4d:6b:b6:f2:59:0e: 6a:86:bd:47:bd:b4:e8:d4:75:2b:75:b2:68:e5:a1:9d:98:a1: 6f:cb:1f:8c:37:48:80:f2:53:bb:10:e6:5d:d7:9a:1f:6c:b0: 69:55:ac:31:53:1c:35:97:8e:1b:6e:f4:54:03:f7:6e:fe:c2: 64:bd:e4:65:e0:f2:31:42:35:f3:b5:f9:72:00:73:02:88:43: 56:e6:73:11:c9:07:78:6e:3b:4e:94:4c:48:06:88:47:bc:10: ed:2b:66:3d:e0:64:51:ff:42:33:d3:a5:7f:d7:ef:03:14:fd: 22:5f:eb:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4QjUxMTAvBgNVBAUTKENEQkZBMEE2RDA2MUUxRkU3MDM0QjQwRjJFRTJFNEI1 M0RFOEZERTEwHhcNMjYwNTIxMDYyOTU0WhcNMjYwNTI4MDYyOTU0WjAYMRYwFAYD VQQDEw02YTBlYTY2My0yMDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RjuzNC6BbupL8ZUAMSqQxpjnH7jCG0B9yqxJHW8iNafMaBDDFITibcZPf29 uUH7Hed+pk6ZUGst6XrMv1DZNwuQpWo6ZMXbZxVz7R5eqC9IUu2tkbeMDImLEqvp fgqRIZ/YhCkL9M/4raZ08jM9O1XL5ozv5UiLTcb9whLfJfIPrZFPL0+Tdp6GuNVs jkulTPHjFnhJUNnRBSF4zyYGgUIMRysDGJLj+voB1MV8JxezItnpup4iIEJHwo9w fHxlf5m+AiWjNXApR4dHz8xqHWq5GzpHXLZD559aYbwHavD7ONPON5byNfuR7JZz fkhpR/Adk4rbSQGeAMvWF9dcpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+B8HIX bFBOtmm+6gQMYhFaFY9nMB8GA1UdIwQYMBaAFM2/oKbQYeH+cDS0Dy7i5LU96P3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThCNS85NkQ4MjM4QUVD MDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRmNXdOTFFQTHVMa3RUM29f ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThCNS85NkQ4MjM4QUVDMDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRm NXdOTFFQTHVMa3RUM29fZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOrwsS7YvyiWYNeLqCZqEOwhdID0j7+8fF74pW1TPWKwcCNd7Zxtlo8x0JAIb yyFVOVLTonlFI6YoDa5CGeTVbMQB46imUZq4cJ4K7kSWarJPJ7N6Mab692vDwQON itoS7w7vOATpOcPYUX00qA8jkXfmo5t2rnOSrmqz89RKUG803fpMsVryhwPLTWu2 8lkOaoa9R7206NR1K3WyaOWhnZihb8sfjDdIgPJTuxDmXdeaH2ywaVWsMVMcNZeO G270VAP3bv7CZL3kZeDyMUI187X5cgBzAohDVuZzEckHeG47TpRMSAaIR7wQ7Stm PeBkUf9CM9Olf9fvAxT9Il/r2g== -----END CERTIFICATE-----Generated at Thu May 21 11:59:26 2026 by rpki-client