$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: fmdV4slnHJ1HelhpKLmxdLo4M/dE6FWghiEVBO3I4go= Subject key identifier: 81:75:98:A8:20:EE:9C:7C:8C:24:3D:65:3E:CD:4B:B2:8F:ED:0B:7B Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 0125 Signing time: Thu 03 Sep 2026 05:57:33 +0000 Manifest this update: Thu 03 Sep 2026 05:57:32 +0000 Manifest next update: Thu 10 Sep 2026 05:57:32 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: m1mAPpIe3iUrat8/vpDAASkIR6A97ShU4mzeJLwvNr0=) 2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: v6FRtsNu3PHrktspFs/DWFM1NxVkPvD0FdLuMbgMmRo=) 3: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: Z0jvFP5BjglIoDohYkPG+7O5fRwbkWtepTYds7vg4QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 05:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Sep 3 05:57:32 2026 GMT Not After : Sep 10 05:57:32 2026 GMT Subject: CN=6a990c4d-1f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:39:90:cc:aa:e4:f2:23:6e:03:89:f6:81:d8: 8e:b6:3f:5c:c7:86:ce:42:dd:a5:af:af:b3:ed:47: 1f:19:b3:dc:93:e5:8f:c2:e0:2b:a9:6e:ed:00:fb: 16:a2:ce:f7:ff:32:55:16:45:d0:1f:9c:c0:f0:e4: b7:f9:d7:6f:6f:c4:e1:09:8d:ee:e1:ae:6a:e3:fd: c6:f7:50:2b:05:6b:4a:0f:71:6d:e5:e5:ce:ba:3d: 1d:e4:26:56:91:05:0a:ad:56:b2:71:3d:da:a5:ef: c2:70:70:c8:05:8b:9d:42:2e:85:03:ac:b6:61:9a: 51:b5:42:aa:0c:ea:d6:ef:d4:06:8f:c9:46:97:b8: 61:36:5b:e9:4b:51:c7:65:1c:81:d1:87:72:31:25: 01:d2:ba:27:b3:e2:23:9a:02:4a:16:99:fb:31:42: 76:13:c2:77:de:e8:67:8d:79:5a:00:0c:e4:66:5f: 1b:98:56:37:59:83:de:16:46:3d:47:f2:e2:78:d2: ec:68:33:ae:5e:78:b1:7a:b3:04:c5:aa:59:4a:a9: b5:03:f2:2f:54:62:41:2b:16:db:b1:df:22:8c:fb: bd:22:6c:7a:56:cf:d2:b3:e8:5a:2c:23:9b:dc:84: 4e:58:0f:db:79:36:48:76:f7:b0:d9:f4:c2:3b:51: 79:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:75:98:A8:20:EE:9C:7C:8C:24:3D:65:3E:CD:4B:B2:8F:ED:0B:7B X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9e:91:c0:93:4d:d2:a9:93:4c:11:b2:ee:5a:8b:0d:51:6a: 44:26:54:a7:a4:d2:3d:ff:f3:53:ab:37:5a:59:44:fa:ae:a7: 21:eb:62:e2:d1:3c:9d:4e:e1:89:86:9c:21:20:61:dd:f9:e1: 2f:dc:45:b4:c9:06:67:75:dc:04:db:b0:05:37:22:49:52:13: a2:a0:6d:6c:ec:63:6c:eb:5d:08:48:19:15:8f:0b:94:7b:fe: 06:1d:55:c9:72:4d:ec:84:97:a8:ca:20:63:0d:a6:ba:48:01: a0:09:58:02:c2:94:5d:55:ae:d1:0b:48:da:7e:dc:91:0f:79: 20:92:7a:df:22:c3:9f:f6:f2:98:84:66:5a:69:9f:77:95:a3: 10:c5:2c:85:da:1a:95:b0:5e:56:57:08:09:c5:fe:5e:a0:98: 3d:0c:12:d9:3d:77:59:f3:bb:8f:46:66:25:ae:24:6a:af:83: fe:00:0c:2f:00:1e:e2:25:95:35:92:5b:a7:aa:d1:69:9b:e9: cd:eb:fa:2a:ec:f2:99:7a:90:93:51:2d:57:29:21:b9:d5:ae: 24:e4:16:08:3d:d2:85:f9:36:74:04:8b:e9:eb:ea:49:df:0c: 6f:9e:05:01:c8:40:5f:63:6b:5a:9e:03:eb:c2:1e:e5:68:0d: eb:db:da:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4QjUxMTAvBgNVBAUTKENEQkZBMEE2RDA2MUUxRkU3MDM0QjQwRjJFRTJFNEI1 M0RFOEZERTEwHhcNMjYwOTAzMDU1NzMyWhcNMjYwOTEwMDU1NzMyWjAYMRYwFAYD VQQDEw02YTk5MGM0ZC0xZjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TmQzKrk8iNuA4n2gdiOtj9cx4bOQt2lr6+z7UcfGbPck+WPwuArqW7tAPsW os73/zJVFkXQH5zA8OS3+ddvb8ThCY3u4a5q4/3G91ArBWtKD3Ft5eXOuj0d5CZW kQUKrVaycT3ape/CcHDIBYudQi6FA6y2YZpRtUKqDOrW79QGj8lGl7hhNlvpS1HH ZRyB0YdyMSUB0rons+IjmgJKFpn7MUJ2E8J33uhnjXlaAAzkZl8bmFY3WYPeFkY9 R/LieNLsaDOuXnixerMExapZSqm1A/IvVGJBKxbbsd8ijPu9Imx6Vs/Ss+haLCOb 3IROWA/beTZIdvew2fTCO1F5gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIF1mKgg 7px8jCQ9ZT7NS7KP7Qt7MB8GA1UdIwQYMBaAFM2/oKbQYeH+cDS0Dy7i5LU96P3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThCNS85NkQ4MjM4QUVD MDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRmNXdOTFFQTHVMa3RUM29f ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThCNS85NkQ4MjM4QUVDMDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRm NXdOTFFQTHVMa3RUM29fZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFJ6RwJNN0qmTTBGy7lqLDVFqRCZUp6TSPf/zU6s3WllE+q6nIeti4tE8nU7h iYacISBh3fnhL9xFtMkGZ3XcBNuwBTciSVIToqBtbOxjbOtdCEgZFY8LlHv+Bh1V yXJN7ISXqMogYw2mukgBoAlYAsKUXVWu0QtI2n7ckQ95IJJ63yLDn/bymIRmWmmf d5WjEMUshdoalbBeVlcICcX+XqCYPQwS2T13WfO7j0ZmJa4kaq+D/gAMLwAe4iWV NZJbp6rRaZvpzev6KuzymXqQk1EtVykhudWuJOQWCD3Shfk2dASL6evqSd8Mb54F AchAX2NrWp4D68Ie5WgN69vaxg== -----END CERTIFICATE-----Generated at Sat Sep 5 04:25:43 2026 by rpki-client