$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: 6B86Bc1a2Y1aeWXpLoon5MRzxbPFDpCpMDQfkPU/RWo= Subject key identifier: 3B:DB:4D:3B:84:73:00:8C:8A:84:B9:D2:5E:31:FD:14:68:ED:68:8A Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 61 Signing time: Sat 23 Aug 2025 07:18:25 +0000 Manifest this update: Sat 23 Aug 2025 07:18:25 +0000 Manifest next update: Sat 30 Aug 2025 07:18:25 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: DQ4x8Lf7YbObp9Dv3yGO2guTFKK4xIW4sumw1wzZk38=) 2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Aug 23 07:18:25 2025 GMT Not After : Aug 30 07:18:25 2025 GMT Subject: CN=68a96b41-0b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:7e:7f:7b:6c:ce:cd:99:cd:ce:ed:77:12: 7c:a8:b1:b3:ca:ba:45:20:16:d6:f9:90:7a:38:2f: 9b:9e:52:1f:a6:5f:41:15:e4:85:8f:fd:3d:a1:1b: 91:d4:a1:da:0f:b7:37:dc:40:e0:26:6d:7b:f0:a3: 43:ce:08:4c:2e:81:8a:3e:5b:da:cd:d7:fb:9d:86: 04:59:76:bf:74:ef:96:f0:b9:1a:a6:a4:2d:f2:8f: 72:fc:b1:bb:01:59:d1:05:fa:d9:22:2b:90:13:af: b3:4b:92:bc:a4:86:16:36:e8:86:34:b7:fa:98:37: b0:da:3f:07:36:35:72:3c:e5:7a:e0:2d:19:c0:09: 7e:01:f8:6a:ab:ce:46:37:58:a7:bd:35:e7:9b:a7: 13:65:41:f1:f4:14:e0:7f:a2:52:b8:19:41:e8:de: 7c:ea:17:f1:78:31:1c:30:1f:af:c4:05:05:7b:8d: cc:2c:9c:3b:2e:c1:67:6e:18:d3:7d:db:98:c9:31: 89:11:d5:32:a0:40:37:63:de:52:de:8a:e1:aa:bf: f9:4f:9c:59:9a:16:50:cb:12:42:d6:16:bc:fd:50: a7:ed:e1:eb:26:fd:b2:4c:62:3d:10:3c:e2:1f:54: 70:27:63:ca:98:c9:ab:85:25:db:cc:f6:c1:c8:2b: 47:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DB:4D:3B:84:73:00:8C:8A:84:B9:D2:5E:31:FD:14:68:ED:68:8A X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e4:4f:4a:3c:5f:a8:60:00:6f:45:03:f3:17:dc:9d:5d:b0: 0f:68:36:87:9a:e5:29:c7:62:4f:98:54:64:41:e1:dc:4c:07: 13:4c:c8:12:ae:9f:55:d7:2a:d6:c2:3b:57:cd:9b:de:bb:86: 93:c8:0f:9e:ca:88:1e:4d:a5:ec:b2:60:e6:6e:ec:cb:6c:91: bd:be:f6:17:e3:99:e8:c4:8b:a4:bd:06:9f:56:69:31:ed:1b: 0e:70:f7:b9:4f:cd:47:53:b4:72:c5:70:4e:cf:50:ef:89:32: d5:fc:4f:7a:e2:1e:14:cd:02:58:0c:a9:00:70:ed:6b:59:8d: da:5c:ce:2a:ef:52:31:46:4e:2b:8c:4d:6b:23:6d:da:dd:bd: 96:4c:36:e9:15:dd:d5:b4:7a:e2:cf:a9:da:c2:27:31:6a:9a: 01:68:e4:f1:92:b4:72:2e:e8:37:87:99:87:40:e7:14:1a:37: 1e:e9:3a:75:cd:4c:e0:38:da:a9:d5:98:ae:43:2f:8d:c2:d0: d6:98:1b:51:90:bb:29:2f:b4:48:7d:66:60:98:c0:3a:c6:33: 6c:7b:5f:0c:c6:6c:ba:34:5d:f3:a5:b9:1b:b4:08:bd:6f:af: 5c:be:0b:b2:6d:2d:0a:a8:86:2b:dc:d9:ce:34:5d:8c:b0:6a: 67:b5:d3:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OThCNTExMC8GA1UEBRMoQ0RCRkEwQTZEMDYxRTFGRTcwMzRCNDBGMkVFMkU0QjUz REU4RkRFMTAeFw0yNTA4MjMwNzE4MjVaFw0yNTA4MzAwNzE4MjVaMBgxFjAUBgNV BAMTDTY4YTk2YjQxLTBiODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4in5/e2zOzZnNzu13EnyosbPKukUgFtb5kHo4L5ueUh+mX0EV5IWP/T2hG5HU odoPtzfcQOAmbXvwo0POCEwugYo+W9rN1/udhgRZdr9075bwuRqmpC3yj3L8sbsB WdEF+tkiK5ATr7NLkrykhhY26IY0t/qYN7DaPwc2NXI85XrgLRnACX4B+GqrzkY3 WKe9NeebpxNlQfH0FOB/olK4GUHo3nzqF/F4MRwwH6/EBQV7jcwsnDsuwWduGNN9 25jJMYkR1TKgQDdj3lLeiuGqv/lPnFmaFlDLEkLWFrz9UKft4esm/bJMYj0QPOIf VHAnY8qYyauFJdvM9sHIK0cBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO9tNO4Rz AIyKhLnSXjH9FGjtaIowHwYDVR0jBBgwFoAUzb+gptBh4f5wNLQPLuLktT3o/eEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5OEI1Lzk2RDgyMzhBRUMw MDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19l RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemItZ3B0Qmg0ZjV3TkxRUEx1TGt0VDNvX2VFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 OEI1Lzk2RDgyMzhBRUMwMDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1 d05MUVBMdUxrdFQzb19lRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE3kT0o8X6hgAG9FA/MX3J1dsA9oNoea5SnHYk+YVGRB4dxMBxNMyBKu n1XXKtbCO1fNm967hpPID57KiB5NpeyyYOZu7Mtskb2+9hfjmejEi6S9Bp9WaTHt Gw5w97lPzUdTtHLFcE7PUO+JMtX8T3riHhTNAlgMqQBw7WtZjdpczirvUjFGTiuM TWsjbdrdvZZMNukV3dW0euLPqdrCJzFqmgFo5PGStHIu6DeHmYdA5xQaNx7pOnXN TOA42qnVmK5DL43C0NaYG1GQuykvtEh9ZmCYwDrGM2x7XwzGbLo0XfOluRu0CL1v r1y+C7JtLQqohivc2c40XYywame10zI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:59:41 2025 by rpki-client