$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: gYx2QWXRBj69NH4x8fy4SVKy6auLZ5/fUbcmt2KGuqE= Subject key identifier: 64:CD:DE:7A:FC:23:77:1F:B7:C4:8C:6B:1E:FA:43:06:EB:80:B2:FF Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 2D Signing time: Sun 11 May 2025 06:26:17 +0000 Manifest this update: Sun 11 May 2025 06:26:17 +0000 Manifest next update: Sun 18 May 2025 06:26:17 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: o/AwPPIFtKK6z0OGlL8vmdZa0ieLxiD3y2pMvIQ4K24=) 2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: May 11 06:26:17 2025 GMT Not After : May 18 06:26:17 2025 GMT Subject: CN=68204309-73fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:6f:76:60:c0:df:20:62:2e:76:78:0a:7c: a6:d2:6e:73:e4:1c:b9:c4:08:14:9c:a1:c9:2e:25: e3:72:24:0d:ef:f0:de:20:1e:b9:93:d1:85:3e:f7: 6d:45:a2:92:2c:e2:23:85:e4:b3:37:e5:79:9a:e5: 49:96:56:1d:79:7d:a8:29:32:cb:ea:62:ca:04:62: 42:74:b0:a5:8b:a4:ef:5b:d8:78:be:59:60:e0:53: a7:09:d3:67:01:48:a3:4c:ea:b5:8a:79:f5:46:1e: af:77:7d:da:1b:f8:ed:a6:1a:bb:81:c6:96:de:26: 48:8d:9d:a3:3f:7d:62:ca:05:92:2e:0e:89:1f:a0: c1:11:8d:c8:7c:75:3b:ca:39:be:8d:61:c9:cc:01: 1b:49:5f:7b:d6:38:51:26:79:ef:9a:64:f9:71:f7: 79:3d:47:87:ac:b8:23:75:22:9a:02:e1:e1:b5:4f: 54:1c:11:f5:7a:4e:83:72:61:6e:cf:83:06:f7:58: 9d:c2:20:e4:4d:3e:8d:43:1c:dc:c2:97:f4:2f:ee: 42:27:4d:8b:ae:c3:a0:6b:4d:e7:a7:55:15:7f:d7: ba:6d:6f:14:33:46:19:f9:f6:e3:a0:c4:9b:51:6a: 03:71:8e:1d:aa:f8:c4:4c:d8:61:d2:ef:a1:49:7a: 11:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CD:DE:7A:FC:23:77:1F:B7:C4:8C:6B:1E:FA:43:06:EB:80:B2:FF X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:0c:4e:76:bf:f8:cd:7e:0b:5a:c8:ef:bb:b8:af:af:1a:2d: 63:34:5b:11:52:a7:e5:27:79:29:cd:79:b5:6b:ad:2d:4e:4c: 42:a3:db:7d:61:57:25:c4:4b:49:38:16:30:9b:03:1c:0c:34: e2:d0:53:1e:fb:85:32:c8:71:b9:a6:e9:5b:ac:2b:93:4b:9f: 54:1e:66:5c:c3:ac:8c:80:f7:e0:ff:f7:24:9e:3b:aa:b3:8c: d8:24:1b:b5:eb:15:71:9e:c5:7e:8d:f3:8e:8f:a0:a0:93:49: 96:f5:6b:f5:16:35:49:8a:72:e9:96:62:3d:0e:7e:7f:4e:a0: 35:24:12:af:b6:2b:4c:a3:a1:70:b3:fe:83:0d:49:51:de:56: fb:43:89:75:1d:b8:ae:b9:68:4d:35:5e:5a:d4:61:9b:fc:d3: 17:6f:cc:25:4e:ed:24:e4:36:3f:71:2f:69:16:aa:68:26:6a: 7f:50:a1:c9:0b:8b:ce:43:32:0a:1d:5d:95:5e:38:3e:76:e0: 58:e6:9d:78:60:63:e4:b3:ae:39:83:f1:1a:6c:46:e3:b9:30: 54:ef:e9:75:29:11:cb:9b:fb:63:c1:40:b8:95:db:f3:80:a4: 35:2e:8e:dc:4b:03:49:d7:55:6f:77:46:6c:8f:28:04:aa:64: 4c:2c:c0:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OThCNTExMC8GA1UEBRMoQ0RCRkEwQTZEMDYxRTFGRTcwMzRCNDBGMkVFMkU0QjUz REU4RkRFMTAeFw0yNTA1MTEwNjI2MTdaFw0yNTA1MTgwNjI2MTdaMBgxFjAUBgNV BAMTDTY4MjA0MzA5LTczZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvIm92YMDfIGIudngKfKbSbnPkHLnECBScockuJeNyJA3v8N4gHrmT0YU+921F opIs4iOF5LM35Xma5UmWVh15fagpMsvqYsoEYkJ0sKWLpO9b2Hi+WWDgU6cJ02cB SKNM6rWKefVGHq93fdob+O2mGruBxpbeJkiNnaM/fWLKBZIuDokfoMERjch8dTvK Ob6NYcnMARtJX3vWOFEmee+aZPlx93k9R4esuCN1IpoC4eG1T1QcEfV6ToNyYW7P gwb3WJ3CIORNPo1DHNzCl/Qv7kInTYuuw6BrTeenVRV/17ptbxQzRhn59uOgxJtR agNxjh2q+MRM2GHS76FJehFdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZM3eevwj dx+3xIxrHvpDBuuAsv8wHwYDVR0jBBgwFoAUzb+gptBh4f5wNLQPLuLktT3o/eEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5OEI1Lzk2RDgyMzhBRUMw MDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19l RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemItZ3B0Qmg0ZjV3TkxRUEx1TGt0VDNvX2VFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 OEI1Lzk2RDgyMzhBRUMwMDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1 d05MUVBMdUxrdFQzb19lRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACAMTna/+M1+C1rI77u4r68aLWM0WxFSp+UneSnNebVrrS1OTEKj231h VyXES0k4FjCbAxwMNOLQUx77hTLIcbmm6VusK5NLn1QeZlzDrIyA9+D/9ySeO6qz jNgkG7XrFXGexX6N846PoKCTSZb1a/UWNUmKcumWYj0Ofn9OoDUkEq+2K0yjoXCz /oMNSVHeVvtDiXUduK65aE01XlrUYZv80xdvzCVO7STkNj9xL2kWqmgman9QockL i85DMgodXZVeOD524FjmnXhgY+SzrjmD8RpsRuO5MFTv6XUpEcub+2PBQLiV2/OA pDUujtxLA0nXVW93RmyPKASqZEwswNQ= -----END CERTIFICATE-----Generated at Mon May 12 02:29:34 2025 by rpki-client