$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: yTzc64e6C/LqcZ8WLvF5KJg2wEkGy1C9tBOsZt+CVOo= Subject key identifier: DA:0F:2B:5F:9C:83:9D:10:46:17:CE:49:AA:E7:96:A9:CE:AB:84:3E Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 45 Signing time: Sun 29 Jun 2025 06:26:31 +0000 Manifest this update: Sun 29 Jun 2025 06:26:31 +0000 Manifest next update: Sun 06 Jul 2025 06:26:31 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: aOwcsPHvE3bMEGjej8EXh3Ji+eE3m1IcNAi97RhXv+c=) 2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Jun 29 06:26:31 2025 GMT Not After : Jul 6 06:26:31 2025 GMT Subject: CN=6860dc97-52ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:43:03:be:b4:62:74:e2:88:c0:6c:74:4a: 5f:3c:70:76:c3:da:88:3d:53:fe:32:d2:28:fe:a8: 5a:9d:c7:58:51:ec:36:58:ec:c7:c0:45:72:0d:5e: 13:9b:ce:f0:17:0b:64:8b:ee:9a:47:ad:36:02:4b: 4e:4d:28:7a:d9:6b:5f:fb:62:87:cc:e0:e2:58:16: aa:af:3e:55:e9:91:2e:3f:a0:f4:19:47:38:e1:0b: 94:33:fc:34:21:b0:3a:1b:ab:26:4d:d3:63:39:c1: 5a:b5:8c:75:f8:69:4c:35:14:a9:01:3f:c2:d9:bc: a1:7a:b2:65:86:5f:02:fe:ee:c1:cb:47:6e:48:ba: 36:5a:9f:3d:7c:a7:6e:8a:80:64:20:7f:23:1d:c2: 6e:d7:22:d4:bb:6f:29:2c:85:00:2d:5f:5a:c5:54: 0d:6f:65:86:7f:cc:8e:e8:7e:9e:10:80:03:56:86: da:eb:8e:c6:d5:4b:61:0f:94:b1:db:2d:d9:37:36: bc:a7:29:f7:12:5c:21:11:e0:78:21:e5:1f:ca:94: f6:b5:f3:fc:91:b6:0a:93:33:fd:18:96:54:33:27: 45:ee:a5:ed:87:56:fa:95:85:4f:07:30:78:fd:12: c7:c4:46:1f:2d:b4:3e:e3:58:ad:9f:c9:2d:2f:07: d4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0F:2B:5F:9C:83:9D:10:46:17:CE:49:AA:E7:96:A9:CE:AB:84:3E X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:e0:ca:5f:b4:8b:00:66:59:5c:97:4b:77:cf:18:87:96:c9: e8:28:6c:92:bb:dc:cb:4b:24:63:8b:28:ab:2a:97:a3:c6:b5: 61:58:73:b6:20:7a:a3:3f:af:5d:e4:c7:7a:45:51:d5:75:80: 6d:24:a2:2c:89:9e:dc:77:50:2e:cd:93:4a:68:e8:56:f2:8f: 6a:7d:b7:17:3e:ea:b3:2a:50:ed:33:aa:76:0a:40:78:0c:a2: 8d:b0:69:65:3f:62:fd:ea:57:47:46:62:5d:60:34:25:23:2a: cb:9a:1d:86:6e:74:89:24:f7:c6:22:89:1e:bd:98:ac:38:97: 64:eb:49:8f:78:55:f7:63:2e:3d:5b:31:69:b5:87:c4:4c:a5: ee:a2:41:91:be:b9:05:a4:bf:04:4e:14:ac:b1:37:73:73:ad: 53:62:71:6c:d9:d3:18:f7:bd:f0:08:29:90:a7:42:4a:39:31: 19:d3:8f:fc:1c:cf:a0:53:d9:f7:b4:d1:fb:d9:95:5f:de:30: e2:05:28:15:37:95:f0:2a:20:d3:d3:7e:84:6e:10:af:ed:d9: 0b:1f:b8:80:cf:3c:4a:cf:05:9c:77:0f:61:bc:86:f7:42:30: 12:c3:52:a8:54:2c:fb:bf:cb:d0:cf:83:dd:fb:be:ac:d2:ce: c1:90:ff:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OThCNTExMC8GA1UEBRMoQ0RCRkEwQTZEMDYxRTFGRTcwMzRCNDBGMkVFMkU0QjUz REU4RkRFMTAeFw0yNTA2MjkwNjI2MzFaFw0yNTA3MDYwNjI2MzFaMBgxFjAUBgNV BAMTDTY4NjBkYzk3LTUyYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7x0MDvrRidOKIwGx0Sl88cHbD2og9U/4y0ij+qFqdx1hR7DZY7MfARXINXhOb zvAXC2SL7ppHrTYCS05NKHrZa1/7YofM4OJYFqqvPlXpkS4/oPQZRzjhC5Qz/DQh sDobqyZN02M5wVq1jHX4aUw1FKkBP8LZvKF6smWGXwL+7sHLR25IujZanz18p26K gGQgfyMdwm7XItS7bykshQAtX1rFVA1vZYZ/zI7ofp4QgANWhtrrjsbVS2EPlLHb Ldk3NrynKfcSXCER4Hgh5R/KlPa18/yRtgqTM/0YllQzJ0Xupe2HVvqVhU8HMHj9 EsfERh8ttD7jWK2fyS0vB9RFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2g8rX5yD nRBGF85JqueWqc6rhD4wHwYDVR0jBBgwFoAUzb+gptBh4f5wNLQPLuLktT3o/eEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5OEI1Lzk2RDgyMzhBRUMw MDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19l RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemItZ3B0Qmg0ZjV3TkxRUEx1TGt0VDNvX2VFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 OEI1Lzk2RDgyMzhBRUMwMDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1 d05MUVBMdUxrdFQzb19lRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAATgyl+0iwBmWVyXS3fPGIeWyegobJK73MtLJGOLKKsql6PGtWFYc7Yg eqM/r13kx3pFUdV1gG0koiyJntx3UC7Nk0po6Fbyj2p9txc+6rMqUO0zqnYKQHgM oo2waWU/Yv3qV0dGYl1gNCUjKsuaHYZudIkk98YiiR69mKw4l2TrSY94VfdjLj1b MWm1h8RMpe6iQZG+uQWkvwROFKyxN3NzrVNicWzZ0xj3vfAIKZCnQko5MRnTj/wc z6BT2fe00fvZlV/eMOIFKBU3lfAqINPTfoRuEK/t2QsfuIDPPErPBZx3D2G8hvdC MBLDUqhULPu/y9DPg937vqzSzsGQ/xI= -----END CERTIFICATE-----Generated at Tue Jul 1 05:19:28 2025 by rpki-client