$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: sJkmHj/PylhZFbBTSRVfHwO8ZDSA1fYRfOXiejXJNbE= Subject key identifier: BF:74:44:CF:22:B8:14:B2:13:D8:06:AD:7C:2A:66:30:28:FB:F8:BC Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 58 Signing time: Tue 05 Aug 2025 07:47:15 +0000 Manifest this update: Tue 05 Aug 2025 07:47:14 +0000 Manifest next update: Tue 12 Aug 2025 07:47:14 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: dsTdJ2F0nCr2tiza8rpWUkE54E4vcLtp/kV10fysU7Y=) 2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Aug 5 07:47:14 2025 GMT Not After : Aug 12 07:47:14 2025 GMT Subject: CN=6891b703-b4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f2:b3:ee:c3:3b:73:37:67:b2:a7:9b:e8:d0: 03:9e:9c:8a:83:de:4d:5b:f8:4f:fc:33:48:2a:72: 15:58:b5:9f:5f:d9:ac:ed:78:9d:24:e1:ae:ce:22: e5:c6:54:67:fd:bd:fd:6e:09:64:3a:c9:6d:43:1f: ac:0e:e4:df:fc:b8:da:89:f4:d6:03:4b:2d:d6:a1: f1:d0:4e:aa:e0:8a:ed:42:31:34:6b:42:ec:8c:28: 3b:43:1e:b1:b8:98:69:86:6a:fd:be:45:12:1f:a2: b2:38:e7:37:0a:df:c7:16:eb:eb:07:02:fe:f6:a7: 8b:57:01:66:a5:91:59:c0:d4:73:07:9a:ec:08:c8: 89:b6:40:6d:31:1c:ce:5b:3d:77:82:f6:f3:1a:3f: 9a:1f:51:1c:cf:cf:65:91:90:35:a7:eb:79:68:8c: 84:31:95:bd:e6:4b:2f:66:4f:2b:b7:51:8e:63:e9: b2:4f:b5:07:fe:d8:ce:1b:e8:dc:bc:0a:f1:ec:92: 31:71:89:f1:c9:8a:02:29:fb:fc:6c:45:95:cb:cc: 6d:ee:9f:8a:d8:4e:8b:dc:4f:2c:0c:51:d1:6f:f4: 5d:50:f6:e7:46:03:6d:8c:9b:6a:79:ad:a1:c2:9f: 1d:53:52:1e:5e:76:f1:0a:63:1f:7f:70:b1:0e:76: 69:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:74:44:CF:22:B8:14:B2:13:D8:06:AD:7C:2A:66:30:28:FB:F8:BC X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:6f:00:8f:cd:a9:af:14:70:dd:df:d9:4e:b9:6b:f1:e8:4d: 15:c1:2f:f3:ff:39:f6:5d:d9:f1:a6:26:86:4f:61:fb:57:b4: 06:27:ad:fd:2f:68:5f:c4:31:bf:55:32:97:8c:90:08:0d:54: 28:33:f9:82:59:0a:02:46:16:cd:e4:6c:27:44:36:de:cc:f0: 26:aa:51:f5:bf:3c:82:bc:98:3b:b2:c4:57:26:2e:24:68:b3: 6e:13:a2:d4:03:a8:18:67:91:e2:b7:3e:a3:db:53:eb:5d:82: 72:47:06:f2:b0:36:0b:61:3d:01:26:96:b0:e1:86:39:a7:03: b0:1e:9d:5b:63:8a:0c:14:04:df:3e:47:0e:9f:24:c9:94:50: bb:1c:0b:f4:43:ea:a8:3b:c3:de:d8:d9:85:a7:bb:9c:74:88: db:16:7b:14:22:c6:da:fb:a3:ab:f0:90:a3:f2:c0:19:9e:d4: 47:c6:62:63:20:8a:d4:75:76:80:35:1b:8a:d6:72:64:f3:61: 8e:b3:b1:e8:55:b9:89:6d:2d:f2:05:e7:8b:9c:51:6d:fb:0e: 0b:c8:ea:4f:54:b8:9d:22:53:f8:87:7d:54:d9:7f:c4:4e:b9: 0d:6a:84:d6:ec:c6:a0:2d:6b:de:f8:fe:20:ed:1b:44:ad:5e: 19:bb:60:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OThCNTExMC8GA1UEBRMoQ0RCRkEwQTZEMDYxRTFGRTcwMzRCNDBGMkVFMkU0QjUz REU4RkRFMTAeFw0yNTA4MDUwNzQ3MTRaFw0yNTA4MTIwNzQ3MTRaMBgxFjAUBgNV BAMTDTY4OTFiNzAzLWI0YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc8rPuwztzN2eyp5vo0AOenIqD3k1b+E/8M0gqchVYtZ9f2azteJ0k4a7OIuXG VGf9vf1uCWQ6yW1DH6wO5N/8uNqJ9NYDSy3WofHQTqrgiu1CMTRrQuyMKDtDHrG4 mGmGav2+RRIforI45zcK38cW6+sHAv72p4tXAWalkVnA1HMHmuwIyIm2QG0xHM5b PXeC9vMaP5ofURzPz2WRkDWn63lojIQxlb3mSy9mTyu3UY5j6bJPtQf+2M4b6Ny8 CvHskjFxifHJigIp+/xsRZXLzG3un4rYTovcTywMUdFv9F1Q9udGA22Mm2p5raHC nx1TUh5edvEKYx9/cLEOdmmJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv3REzyK4 FLIT2AatfCpmMCj7+LwwHwYDVR0jBBgwFoAUzb+gptBh4f5wNLQPLuLktT3o/eEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5OEI1Lzk2RDgyMzhBRUMw MDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19l RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemItZ3B0Qmg0ZjV3TkxRUEx1TGt0VDNvX2VFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 OEI1Lzk2RDgyMzhBRUMwMDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1 d05MUVBMdUxrdFQzb19lRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEBvAI/Nqa8UcN3f2U65a/HoTRXBL/P/OfZd2fGmJoZPYftXtAYnrf0v aF/EMb9VMpeMkAgNVCgz+YJZCgJGFs3kbCdENt7M8CaqUfW/PIK8mDuyxFcmLiRo s24TotQDqBhnkeK3PqPbU+tdgnJHBvKwNgthPQEmlrDhhjmnA7AenVtjigwUBN8+ Rw6fJMmUULscC/RD6qg7w97Y2YWnu5x0iNsWexQixtr7o6vwkKPywBme1EfGYmMg itR1doA1G4rWcmTzYY6zsehVuYltLfIF54ucUW37DgvI6k9UuJ0iU/iHfVTZf8RO uQ1qhNbsxqAta974/iDtG0StXhm7YKU= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:31 2025 by rpki-client