$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: 0LEM9F92LPMDGim3URzGGVPMNSLloz7S/PA/601gYOc= Subject key identifier: 96:7E:34:D2:D1:5A:CF:DF:5C:B6:86:09:55:2A:C8:57:C5:73:8E:6B Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 012F Signing time: Wed 23 Sep 2026 05:28:59 +0000 Manifest this update: Wed 23 Sep 2026 05:28:58 +0000 Manifest next update: Wed 30 Sep 2026 05:28:58 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: daPCl0Ig54qqJZ64uWuVJvCkkhfVp8V8kSv3d22BArc=) 2: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: Z0jvFP5BjglIoDohYkPG+7O5fRwbkWtepTYds7vg4QI=) 3: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: v6FRtsNu3PHrktspFs/DWFM1NxVkPvD0FdLuMbgMmRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Sep 23 05:28:58 2026 GMT Not After : Sep 30 05:28:58 2026 GMT Subject: CN=6ab3639b-541c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:a4:5a:24:ae:ed:75:98:0d:bb:e3:15:44: 67:0d:97:e7:f0:67:87:87:73:53:59:8d:a7:19:2c: 06:b8:4d:e1:51:56:1b:18:73:5b:b4:ac:2e:ef:39: df:78:4a:a3:a8:fa:94:d3:a1:ad:fa:b5:47:62:f7: dc:c9:d7:fc:a7:d7:38:c1:de:31:61:d0:4b:d4:93: 95:0f:79:33:10:74:01:0c:66:d9:47:d9:87:e0:88: 93:d2:9b:f4:4d:8e:24:90:d0:68:64:1c:30:11:f7: ed:43:da:85:46:dd:96:5f:16:b3:11:a9:b7:02:8c: 67:23:3c:87:1e:fb:82:08:c7:70:df:76:4f:78:8e: 59:d0:21:e6:c3:71:10:88:b4:24:6a:ad:7c:a0:62: ea:2f:1d:c7:67:a1:33:92:cb:4b:3d:88:be:ab:3d: 6e:70:e1:e9:5d:b3:11:92:34:ac:23:ce:f4:c5:6d: d5:4e:90:8d:c5:e6:5a:9f:02:06:24:bc:2a:4c:01: b1:29:ea:a6:e6:87:6e:71:6c:14:be:7b:fe:b2:d1: 9c:dc:5a:20:b8:22:30:d8:90:d2:ad:8f:3d:b4:4b: 16:71:20:aa:36:ea:32:13:2a:b3:6d:26:ab:2e:75: 71:1d:09:b2:3a:25:79:6a:ba:7b:c4:73:cf:3c:c3: 36:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7E:34:D2:D1:5A:CF:DF:5C:B6:86:09:55:2A:C8:57:C5:73:8E:6B X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:ac:f7:e1:1b:62:6d:56:0c:dc:51:18:1c:77:d1:83:b5:9a: d6:a6:a9:74:6e:43:7e:ab:a5:b6:ad:2e:c4:65:5b:97:49:54: 9e:14:96:f8:a8:a4:75:d3:5a:5b:4a:97:da:3f:ec:3b:f9:fd: cd:2f:85:c4:e9:21:59:b8:46:89:c8:46:f9:ec:2a:1a:06:9a: 8e:12:e2:e1:65:01:d2:01:e3:03:e0:f5:64:ad:ec:ef:59:25: 50:25:31:59:fd:38:13:c8:69:4d:18:6c:6a:6e:eb:97:91:72: f5:24:94:6a:b3:bc:67:f8:7f:ed:1b:d8:9c:02:37:bd:ea:d0: 6b:e9:cb:7d:56:53:fe:b4:69:0e:5f:70:2b:80:6f:b6:70:48: 75:6f:d0:a8:ba:55:d4:c8:cd:16:dc:2b:6f:0c:08:44:9b:fe: ee:50:23:50:ab:c2:7f:9a:15:8e:13:8d:e4:d7:05:89:07:57: 02:08:ed:1a:71:ff:27:d1:18:58:43:09:e6:57:6d:44:3d:9c: 54:8f:ba:8a:55:47:03:11:e5:9b:f0:e5:06:f7:62:cf:52:a0: 31:3b:a2:27:04:a7:e9:0e:6f:eb:38:54:39:a6:15:71:d5:c3: f3:42:e9:36:46:09:88:ad:db:0b:05:f0:29:20:49:48:53:eb: c5:be:13:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4QjUxMTAvBgNVBAUTKENEQkZBMEE2RDA2MUUxRkU3MDM0QjQwRjJFRTJFNEI1 M0RFOEZERTEwHhcNMjYwOTIzMDUyODU4WhcNMjYwOTMwMDUyODU4WjAYMRYwFAYD VQQDEw02YWIzNjM5Yi01NDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGekWiSu7XWYDbvjFURnDZfn8GeHh3NTWY2nGSwGuE3hUVYbGHNbtKwu7znf eEqjqPqU06Gt+rVHYvfcydf8p9c4wd4xYdBL1JOVD3kzEHQBDGbZR9mH4IiT0pv0 TY4kkNBoZBwwEfftQ9qFRt2WXxazEam3AoxnIzyHHvuCCMdw33ZPeI5Z0CHmw3EQ iLQkaq18oGLqLx3HZ6EzkstLPYi+qz1ucOHpXbMRkjSsI870xW3VTpCNxeZanwIG JLwqTAGxKeqm5oducWwUvnv+stGc3FoguCIw2JDSrY89tEsWcSCqNuoyEyqzbSar LnVxHQmyOiV5arp7xHPPPMM2fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZ+NNLR Ws/fXLaGCVUqyFfFc45rMB8GA1UdIwQYMBaAFM2/oKbQYeH+cDS0Dy7i5LU96P3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThCNS85NkQ4MjM4QUVD MDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRmNXdOTFFQTHVMa3RUM29f ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThCNS85NkQ4MjM4QUVDMDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRm NXdOTFFQTHVMa3RUM29fZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJqz34RtibVYM3FEYHHfRg7Wa1qapdG5Dfqultq0uxGVbl0lUnhSW+KikddNa W0qX2j/sO/n9zS+FxOkhWbhGichG+ewqGgaajhLi4WUB0gHjA+D1ZK3s71klUCUx Wf04E8hpTRhsam7rl5Fy9SSUarO8Z/h/7RvYnAI3verQa+nLfVZT/rRpDl9wK4Bv tnBIdW/QqLpV1MjNFtwrbwwIRJv+7lAjUKvCf5oVjhON5NcFiQdXAgjtGnH/J9EY WEMJ5ldtRD2cVI+6ilVHAxHlm/DlBvdiz1KgMTuiJwSn6Q5v6zhUOaYVcdXD80Lp NkYJiK3bCwXwKSBJSFPrxb4TZg== -----END CERTIFICATE-----Generated at Wed Sep 23 12:50:46 2026 by rpki-client