$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: sMU7umK+bl1JY6c9YXtL/cHq1FEPP2GHVPYzFoxWMq0= Subject key identifier: 73:35:B3:07:E7:6F:11:E6:8D:B4:F5:56:3B:75:AF:5C:96:50:1C:DF Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: D3 Signing time: Wed 25 Mar 2026 05:58:08 +0000 Manifest this update: Wed 25 Mar 2026 05:58:08 +0000 Manifest next update: Wed 01 Apr 2026 05:58:08 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: EjfL2NsbHeXCOdFPmmkbUEKgNHl78JOOYZRvKTVeV+g=) 2: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: Z0jvFP5BjglIoDohYkPG+7O5fRwbkWtepTYds7vg4QI=) 3: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: v6FRtsNu3PHrktspFs/DWFM1NxVkPvD0FdLuMbgMmRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Mar 25 05:58:08 2026 GMT Not After : Apr 1 05:58:08 2026 GMT Subject: CN=69c37970-e91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:16:2b:cd:59:11:07:79:59:d2:66:f6:62:47: ce:68:09:a3:b9:42:c1:78:6a:5d:20:c8:d0:5f:da: 3d:9e:f5:3e:97:83:1a:ba:f0:11:43:39:5c:c1:a1: b4:e5:b2:84:cd:1b:ce:89:d8:65:4b:cd:35:e9:4a: 69:31:1c:7e:86:e7:89:9a:1e:b4:83:6c:26:68:23: f2:a6:33:b0:93:1b:78:a4:e6:83:8d:8b:9a:75:ae: d2:40:3a:a6:f5:89:c3:fe:fd:11:ec:22:d5:aa:54: 51:76:ad:4e:a5:9e:4c:7f:57:57:e5:93:44:25:80: 0f:6e:c8:69:09:07:5a:09:a8:84:a0:a1:26:8f:05: 0b:22:b3:99:dd:f8:b9:89:ee:f1:59:cb:ee:26:ae: 41:ab:71:24:ea:b7:1f:7c:90:f7:fc:c2:32:8b:0e: d2:20:d8:78:36:43:78:1c:ec:87:ee:f4:50:04:a5: 1d:4c:99:2c:64:b9:6f:41:c2:de:b9:ca:62:ca:26: 6d:09:82:5a:ec:09:24:35:73:51:c9:be:ed:b5:90: d4:d5:d8:d2:53:df:70:e6:78:f5:24:29:c5:80:bd: e8:fe:c3:48:1c:46:9c:99:26:29:23:93:8f:6a:aa: 0e:0c:3b:78:f8:4b:30:47:4e:b9:4e:c8:02:69:52: d8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:35:B3:07:E7:6F:11:E6:8D:B4:F5:56:3B:75:AF:5C:96:50:1C:DF X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:fe:ab:61:73:b3:f1:6d:43:73:3f:22:31:5a:3f:d3:03:09: e0:14:b1:1d:79:ab:d0:5f:a6:e2:07:af:bb:c5:c2:a1:40:dd: e3:aa:85:e4:db:86:6f:83:25:28:62:6c:81:24:98:70:db:a1: d0:30:1b:8f:b7:49:b9:b2:fb:5e:db:d3:69:2e:a5:97:27:19: 2f:ab:3b:cd:4c:6a:29:ef:20:cd:4d:a7:8e:0b:14:75:c8:5b: 67:8a:58:fd:96:db:79:73:29:96:64:c9:9f:fd:ae:d0:41:39: 07:04:a7:8e:9a:a7:d6:0d:57:6b:41:57:df:94:fb:50:c8:02: 5e:d1:09:a4:1a:76:da:54:58:f9:0d:9c:76:61:74:c9:4b:4e: ac:0a:92:c2:db:2d:94:b1:69:29:65:71:62:ee:a8:2f:7b:b5: a3:79:59:e6:20:25:e9:1f:c6:29:30:4d:a7:df:81:e2:a3:41: 27:af:59:db:70:e0:cc:85:1e:24:f9:d0:4c:5d:32:a8:83:02: 0a:25:60:dd:da:b8:0a:0e:c9:95:04:45:47:4e:d7:b0:cf:f7: c1:3b:57:d6:ef:57:4b:35:6f:f6:a5:55:6f:80:12:0c:0e:f0: 14:6f:cd:26:7f:69:c8:55:1d:71:88:f9:90:e3:99:66:3d:af: 5a:c0:b0:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4QjUxMTAvBgNVBAUTKENEQkZBMEE2RDA2MUUxRkU3MDM0QjQwRjJFRTJFNEI1 M0RFOEZERTEwHhcNMjYwMzI1MDU1ODA4WhcNMjYwNDAxMDU1ODA4WjAYMRYwFAYD VQQDEw02OWMzNzk3MC1lOTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBYrzVkRB3lZ0mb2YkfOaAmjuULBeGpdIMjQX9o9nvU+l4MauvARQzlcwaG0 5bKEzRvOidhlS8016UppMRx+hueJmh60g2wmaCPypjOwkxt4pOaDjYuada7SQDqm 9YnD/v0R7CLVqlRRdq1OpZ5Mf1dX5ZNEJYAPbshpCQdaCaiEoKEmjwULIrOZ3fi5 ie7xWcvuJq5Bq3Ek6rcffJD3/MIyiw7SINh4NkN4HOyH7vRQBKUdTJksZLlvQcLe ucpiyiZtCYJa7AkkNXNRyb7ttZDU1djSU99w5nj1JCnFgL3o/sNIHEacmSYpI5OP aqoODDt4+EswR065TsgCaVLYswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHM1swfn bxHmjbT1Vjt1r1yWUBzfMB8GA1UdIwQYMBaAFM2/oKbQYeH+cDS0Dy7i5LU96P3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThCNS85NkQ4MjM4QUVD MDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRmNXdOTFFQTHVMa3RUM29f ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThCNS85NkQ4MjM4QUVDMDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRm NXdOTFFQTHVMa3RUM29fZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYP6rYXOz8W1Dcz8iMVo/0wMJ4BSxHXmr0F+m4gevu8XCoUDd46qF5NuGb4Ml KGJsgSSYcNuh0DAbj7dJubL7XtvTaS6llycZL6s7zUxqKe8gzU2njgsUdchbZ4pY /ZbbeXMplmTJn/2u0EE5BwSnjpqn1g1Xa0FX35T7UMgCXtEJpBp22lRY+Q2cdmF0 yUtOrAqSwtstlLFpKWVxYu6oL3u1o3lZ5iAl6R/GKTBNp9+B4qNBJ69Z23DgzIUe JPnQTF0yqIMCCiVg3dq4Cg7JlQRFR07XsM/3wTtX1u9XSzVv9qVVb4ASDA7wFG/N Jn9pyFUdcYj5kOOZZj2vWsCwlw== -----END CERTIFICATE-----Generated at Thu Mar 26 03:31:53 2026 by rpki-client