$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: ti1/A23vBCHTnewDbN0uibwbbYynKleEWeeuSDXknaU= Subject key identifier: 8C:BB:5E:9D:73:91:00:C9:BF:47:64:DD:07:8D:74:31:A5:0B:F2:CE Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: EB Signing time: Mon 11 May 2026 06:34:08 +0000 Manifest this update: Mon 11 May 2026 06:34:07 +0000 Manifest next update: Mon 18 May 2026 06:34:07 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: GjfSoZc2qBNyC3fwJrCxYZHPW3i8dnb8uitoSaXJd04=) 2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: v6FRtsNu3PHrktspFs/DWFM1NxVkPvD0FdLuMbgMmRo=) 3: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: Z0jvFP5BjglIoDohYkPG+7O5fRwbkWtepTYds7vg4QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: May 11 06:34:07 2026 GMT Not After : May 18 06:34:07 2026 GMT Subject: CN=6a01785f-3bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f6:d0:67:e9:30:a9:b3:13:cd:3e:6c:24:ff: b9:b4:ff:ad:e8:a2:0c:ed:0b:87:3d:0e:96:f7:2f: ea:91:13:db:ea:12:fb:f4:6a:bd:55:e6:86:c3:c1: 40:24:00:99:0e:c0:d7:e0:15:3d:8f:58:ba:7c:e8: 2a:5c:fc:71:c3:0e:13:ea:73:a7:76:34:5a:7e:73: cf:ee:2c:30:96:b6:4e:6a:5c:b4:23:62:a5:40:39: 9d:aa:34:a3:41:ab:fc:c4:ed:69:60:2a:87:0e:fe: 9e:65:3e:ac:46:e1:0b:9e:95:09:46:72:a5:fa:a2: 32:05:02:81:6d:d4:b6:f3:a3:6e:54:88:69:24:dd: c1:8e:3b:4d:ca:3f:5d:3f:88:4e:7e:ee:32:98:2a: 9a:de:60:85:05:a0:9c:fe:1b:06:20:71:4c:6f:61: c1:03:b2:41:83:f2:d9:c2:ee:70:7a:b5:aa:4a:69: 2f:0d:07:69:d7:82:b1:2a:3d:fc:ca:74:b6:df:3e: 03:47:12:65:fc:cb:81:4e:69:c9:5d:4a:2c:0f:f0: a5:ad:ab:be:78:fb:ed:34:76:c8:96:f7:35:53:61: 93:86:c6:15:97:9e:77:d0:94:93:f1:c8:06:d1:c2: 5c:d9:02:1f:03:a4:b5:b5:5a:99:ed:aa:be:de:02: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BB:5E:9D:73:91:00:C9:BF:47:64:DD:07:8D:74:31:A5:0B:F2:CE X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f3:f9:d5:9b:96:28:23:d8:a6:18:c1:1e:cb:e0:2d:cb:c7: f8:56:48:d1:7d:76:a1:78:5f:d9:64:a4:dc:e6:2f:e1:c6:39: 0a:9b:d7:60:5e:f6:2f:b2:f3:52:1d:50:69:e1:81:59:3e:3b: 2c:ac:8c:94:00:ab:dc:28:ee:99:b6:96:8f:e8:68:95:ef:28: f4:94:2c:a9:a9:76:e9:95:44:f4:55:e0:0b:79:04:53:95:0c: 1e:36:31:d6:34:19:b0:42:97:24:c1:14:20:41:6f:10:d0:9a: 2d:5b:2c:ed:2d:22:02:8c:70:bc:b4:0f:3c:29:6c:eb:5d:9b: 7b:ed:f6:2a:63:82:cc:e5:f0:9d:9c:18:58:ca:d0:f1:43:1e: e9:39:66:3b:41:57:96:cb:60:af:37:1b:03:eb:f9:76:ce:02: 07:4b:a3:0d:d4:a6:bf:ea:b5:51:a5:68:e0:9f:76:23:a4:9c: 50:e5:7d:67:57:33:cc:29:0f:72:c4:69:6c:44:cb:b0:07:53: 53:eb:89:95:52:bb:f7:c1:b1:e3:47:5e:cf:7e:eb:2e:f9:b8: a0:75:74:0d:31:1c:d3:cf:9b:28:3e:8f:eb:52:e1:2e:e7:5f: 07:6b:ef:ea:07:cf:93:3d:f7:d5:e4:7c:2f:75:a8:03:1b:d8: a7:03:e1:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4QjUxMTAvBgNVBAUTKENEQkZBMEE2RDA2MUUxRkU3MDM0QjQwRjJFRTJFNEI1 M0RFOEZERTEwHhcNMjYwNTExMDYzNDA3WhcNMjYwNTE4MDYzNDA3WjAYMRYwFAYD VQQDEw02YTAxNzg1Zi0zYmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vbQZ+kwqbMTzT5sJP+5tP+t6KIM7QuHPQ6W9y/qkRPb6hL79Gq9VeaGw8FA JACZDsDX4BU9j1i6fOgqXPxxww4T6nOndjRafnPP7iwwlrZOaly0I2KlQDmdqjSj Qav8xO1pYCqHDv6eZT6sRuELnpUJRnKl+qIyBQKBbdS286NuVIhpJN3BjjtNyj9d P4hOfu4ymCqa3mCFBaCc/hsGIHFMb2HBA7JBg/LZwu5werWqSmkvDQdp14KxKj38 ynS23z4DRxJl/MuBTmnJXUosD/Clrau+ePvtNHbIlvc1U2GThsYVl5530JST8cgG 0cJc2QIfA6S1tVqZ7aq+3gIrswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIy7Xp1z kQDJv0dk3QeNdDGlC/LOMB8GA1UdIwQYMBaAFM2/oKbQYeH+cDS0Dy7i5LU96P3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThCNS85NkQ4MjM4QUVD MDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRmNXdOTFFQTHVMa3RUM29f ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThCNS85NkQ4MjM4QUVDMDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRm NXdOTFFQTHVMa3RUM29fZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa/P51ZuWKCPYphjBHsvgLcvH+FZI0X12oXhf2WSk3OYv4cY5CpvXYF72L7Lz Uh1QaeGBWT47LKyMlACr3CjumbaWj+hole8o9JQsqal26ZVE9FXgC3kEU5UMHjYx 1jQZsEKXJMEUIEFvENCaLVss7S0iAoxwvLQPPCls612be+32KmOCzOXwnZwYWMrQ 8UMe6TlmO0FXlstgrzcbA+v5ds4CB0ujDdSmv+q1UaVo4J92I6ScUOV9Z1czzCkP csRpbETLsAdTU+uJlVK798Gx40dez37rLvm4oHV0DTEc08+bKD6P61LhLudfB2vv 6gfPkz331eR8L3WoAxvYpwPhIw== -----END CERTIFICATE-----Generated at Wed May 13 05:00:31 2026 by rpki-client