
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft
File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json)
Hash identifier: 0svz+x1mu0EbgYWkPpeKdfvE8gk5WCUozZxpaGBph3A=
Subject key identifier: 26:A9:00:79:C5:80:D6:AC:B4:70:72:A6:C6:E0:DB:CB:5C:EF:64:82
Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1
Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft
Manifest number: 010F
Signing time: Thu 23 Jul 2026 07:44:37 +0000
Manifest this update: Thu 23 Jul 2026 07:44:36 +0000
Manifest next update: Thu 30 Jul 2026 07:44:36 +0000
Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: gQhJfd+ulnt47o9yOCbGrAkSz6ZQcfuPoSWdIbzqCKg=)
2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: v6FRtsNu3PHrktspFs/DWFM1NxVkPvD0FdLuMbgMmRo=)
3: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: Z0jvFP5BjglIoDohYkPG+7O5fRwbkWtepTYds7vg4QI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl
rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1
Validity
Not Before: Jul 23 07:44:36 2026 GMT
Not After : Jul 30 07:44:36 2026 GMT
Subject: CN=6a61c665-8ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:0f:e9:ad:8b:9b:f4:a6:a7:9b:95:50:3a:
49:76:e7:cd:05:0d:8c:0d:cd:4e:63:74:3d:01:ff:
a6:ac:e1:0c:ea:f4:1a:c6:f1:01:2a:a4:ad:24:6b:
9d:39:10:b6:10:d2:68:83:ff:e9:c2:1f:ab:25:3a:
29:e7:ce:7f:4d:98:43:45:46:4c:d2:50:1b:02:32:
57:29:85:57:a4:e6:83:79:3a:41:bd:d4:79:92:fb:
ae:4e:2f:ca:cb:1d:16:a0:99:a7:bf:ef:c1:32:fa:
0a:92:a0:de:f1:48:33:04:31:71:91:7e:07:46:ce:
ab:2d:b7:fa:b6:7d:51:46:b5:cc:89:52:c4:20:d7:
b6:13:b3:e0:1f:97:3f:58:cd:16:89:56:03:51:b6:
64:ab:4f:06:6c:fc:52:8c:fc:44:88:94:cb:96:b0:
d0:b9:52:0d:73:42:f9:e5:ce:80:27:ed:3b:f2:ab:
f2:47:99:8c:cf:29:d7:15:d3:f9:95:e9:fc:b0:bf:
d6:5c:76:cb:6a:aa:32:a5:e9:17:55:49:b0:f7:71:
08:02:d0:fb:70:df:a9:9e:45:75:36:71:7f:37:29:
0f:72:1b:c0:9d:c7:0e:52:ff:8a:79:96:2c:b7:d0:
7c:52:28:37:ed:2d:1c:f9:83:21:83:37:b3:f2:06:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A9:00:79:C5:80:D6:AC:B4:70:72:A6:C6:E0:DB:CB:5C:EF:64:82
X509v3 Authority Key Identifier:
keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:be:1c:4c:f9:af:c3:ed:e6:03:cb:00:c8:24:3a:20:03:50:
3b:54:46:ae:83:1f:98:35:38:d7:b8:eb:7d:86:36:6a:27:0f:
f7:d1:74:2a:12:d9:3a:6d:28:70:5f:3c:63:45:32:4b:21:0e:
a1:6b:cf:18:d4:ce:94:48:8c:43:cc:83:5b:3d:26:58:3e:3e:
0b:20:d2:1e:6f:76:03:b4:b9:89:b8:f0:4b:9d:f8:58:aa:bb:
a3:94:58:f8:fa:e7:6b:07:10:d6:2e:1f:06:45:81:35:71:ba:
f9:00:85:58:a9:e4:f5:69:ce:78:66:79:0a:50:56:17:11:f8:
23:98:0b:ac:87:cf:0d:20:34:e0:05:33:ca:03:c2:b7:a0:f8:
bb:a7:f2:a8:80:31:bb:b2:4b:36:72:b1:a9:3d:0a:ed:e9:20:
21:21:3a:c5:63:a7:c0:90:6b:d0:84:7b:15:b2:3d:05:9b:8f:
29:e8:e0:20:47:44:d9:c1:29:8f:0f:7a:82:09:c0:4a:73:0c:
5c:ae:81:50:90:99:a0:52:e9:d0:41:85:24:a5:1c:75:d7:5a:
67:06:4c:27:bb:f3:b2:67:08:bf:6e:f1:0d:36:e9:c5:02:a2:
96:69:0e:be:ae:be:e6:6d:a1:cb:d2:d8:55:7b:6b:c4:fb:a8:
5a:2a:b0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:13 2026 by rpki-client