$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: l7J5dKMqQuxwjkWgIwLA/dsH5YtuAz+U9RcEcMRtBYE= Subject key identifier: 33:31:08:F5:8E:85:48:E8:07:A0:8D:16:C5:2A:06:D4:46:39:E8:74 Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 69 Signing time: Fri 05 Sep 2025 07:28:16 +0000 Manifest this update: Fri 05 Sep 2025 07:28:15 +0000 Manifest next update: Fri 12 Sep 2025 07:28:15 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: QQ4fDG+q9mbdUTgZcY+LIZeLiGuEm2YwBNMCF/tO1bI=) 2: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: QOE6RaPByip2qWXTpgbOiN0duUqz1Bsz81bUndnwZ7Y=) 3: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Sep 5 07:28:15 2025 GMT Not After : Sep 12 07:28:15 2025 GMT Subject: CN=68ba9110-6cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:bf:e9:29:65:95:6c:42:1c:41:a0:3f:38: da:42:8e:69:ba:e7:29:fb:37:95:47:e9:94:7f:41: 57:99:82:66:72:40:06:17:bc:c8:95:c8:4e:59:8a: ec:97:4d:eb:3b:f4:6f:90:f1:d8:4f:7a:fd:83:70: 48:63:b0:1b:c0:4e:99:8a:39:70:00:a1:61:bc:54: 72:de:d2:45:52:85:00:b9:73:3f:2b:53:fc:09:17: 45:ec:f4:3b:d5:ef:77:37:a4:7b:72:4d:52:8f:b4: 70:ae:3e:73:4e:5f:95:c0:26:1b:eb:79:45:0e:7c: b2:87:b9:7f:cb:db:cf:d7:32:da:64:57:ab:69:bb: fc:cb:5b:f5:cb:8a:a3:65:44:90:a5:24:1e:7a:71: 00:9f:e8:39:17:4e:80:f6:d5:c3:35:cd:fc:23:ef: 76:81:ae:96:33:27:60:31:da:3b:11:8e:7d:30:0c: f4:41:09:23:1d:4c:30:bc:53:86:ab:d5:4d:7b:19: a7:24:df:8f:d8:e9:04:89:80:e2:b4:db:56:54:d5: 76:f1:fe:9d:45:f6:60:61:8a:af:08:c2:48:72:92: bd:86:ac:63:97:17:ed:b4:f2:57:45:75:f1:33:bf: 42:33:3c:ce:8e:8c:d0:c8:6b:1d:63:eb:2b:cc:c5: ff:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:31:08:F5:8E:85:48:E8:07:A0:8D:16:C5:2A:06:D4:46:39:E8:74 X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:79:c6:62:dd:74:ee:25:37:93:92:a7:b3:d7:eb:08:2e:de: 85:69:d3:05:98:2e:44:24:dd:c4:00:b6:d9:5f:9c:a4:ed:86: 42:cf:d4:09:a7:15:d7:d6:12:af:7d:af:5d:8e:b9:0a:a5:1e: c7:30:22:0f:79:e4:cf:87:aa:35:c2:03:c0:78:01:e9:5f:a8: 4a:f0:33:ca:e6:d7:68:51:ec:d8:d1:fc:3f:40:a4:ec:65:ae: a1:ef:53:49:0f:6a:19:b8:02:f5:d1:fd:05:45:88:71:a1:08: ea:d8:d2:f9:a2:42:7a:ad:2c:61:d1:7d:d5:ff:82:36:43:55: 10:75:d7:c4:5d:88:d6:9d:3c:45:e3:29:02:51:3d:ae:fd:a3: 8b:7a:a7:6f:b4:3d:60:68:29:e9:e9:35:08:97:87:b5:45:4e: 1c:89:2f:eb:6d:8f:fa:8d:1a:be:12:39:1c:a9:12:34:8d:e6: 8f:21:12:e6:f7:21:a4:72:32:1d:c1:ff:fb:3b:d6:68:22:af: 5b:05:5d:f3:82:be:c9:bd:c3:b3:21:66:37:e5:4d:85:e5:0a: 1d:9b:5d:93:27:4f:45:64:a5:2e:c9:20:2b:83:e2:43:36:72: c9:1e:77:c2:b9:4d:b7:19:8d:0f:b2:aa:c6:d3:22:e3:f1:aa: 77:4a:5d:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OThCNTExMC8GA1UEBRMoQ0RCRkEwQTZEMDYxRTFGRTcwMzRCNDBGMkVFMkU0QjUz REU4RkRFMTAeFw0yNTA5MDUwNzI4MTVaFw0yNTA5MTIwNzI4MTVaMBgxFjAUBgNV BAMTDTY4YmE5MTEwLTZjZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvDb/pKWWVbEIcQaA/ONpCjmm65yn7N5VH6ZR/QVeZgmZyQAYXvMiVyE5ZiuyX Tes79G+Q8dhPev2DcEhjsBvATpmKOXAAoWG8VHLe0kVShQC5cz8rU/wJF0Xs9DvV 73c3pHtyTVKPtHCuPnNOX5XAJhvreUUOfLKHuX/L28/XMtpkV6tpu/zLW/XLiqNl RJClJB56cQCf6DkXToD21cM1zfwj73aBrpYzJ2Ax2jsRjn0wDPRBCSMdTDC8U4ar 1U17Gack34/Y6QSJgOK021ZU1Xbx/p1F9mBhiq8Iwkhykr2GrGOXF+208ldFdfEz v0IzPM6OjNDIax1j6yvMxf/1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMzEI9Y6F SOgHoI0WxSoG1EY56HQwHwYDVR0jBBgwFoAUzb+gptBh4f5wNLQPLuLktT3o/eEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5OEI1Lzk2RDgyMzhBRUMw MDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19l RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemItZ3B0Qmg0ZjV3TkxRUEx1TGt0VDNvX2VFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 OEI1Lzk2RDgyMzhBRUMwMDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1 d05MUVBMdUxrdFQzb19lRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJl5xmLddO4lN5OSp7PX6wgu3oVp0wWYLkQk3cQAttlfnKTthkLP1Amn FdfWEq99r12OuQqlHscwIg955M+HqjXCA8B4AelfqErwM8rm12hR7NjR/D9ApOxl rqHvU0kPahm4AvXR/QVFiHGhCOrY0vmiQnqtLGHRfdX/gjZDVRB118RdiNadPEXj KQJRPa79o4t6p2+0PWBoKenpNQiXh7VFThyJL+ttj/qNGr4SORypEjSN5o8hEub3 IaRyMh3B//s71mgir1sFXfOCvsm9w7MhZjflTYXlCh2bXZMnT0VkpS7JICuD4kM2 csked8K5TbcZjQ+yqsbTIuPxqndKXcc= -----END CERTIFICATE-----Generated at Fri Sep 5 11:34:08 2025 by rpki-client