$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: VDSKVcMsrggveTK+K7KZTvZJQSeU1b+FjZW/1GvXEbc= Subject key identifier: 1E:A4:D0:5A:0A:13:83:81:71:44:57:ED:F0:B2:EF:2D:7A:A6:73:4C Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 3D Signing time: Fri 13 Jun 2025 06:25:21 +0000 Manifest this update: Fri 13 Jun 2025 06:25:20 +0000 Manifest next update: Fri 20 Jun 2025 06:25:20 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: mfrhP9sM9YwpB6qAo3ArJzSCPrhJn1/Zaf1G3Bh1LpY=) 2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Jun 13 06:25:20 2025 GMT Not After : Jun 20 06:25:20 2025 GMT Subject: CN=684bc451-8b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:6f:41:60:8b:9e:3c:77:b5:39:aa:a9:d3: 50:00:50:44:40:54:9b:f0:76:6a:ad:7c:d3:7a:5e: 09:e6:68:cf:82:a2:1f:f7:da:51:35:e0:61:1d:8a: f9:89:32:a2:78:e2:ed:7b:3e:bf:df:a7:65:66:13: 64:67:af:89:86:07:91:64:13:f0:c4:f5:cd:bc:e4: df:ff:5c:1d:1b:f4:69:74:c7:0e:06:e4:1b:e7:7f: 01:a2:bc:91:ab:e4:4c:b0:31:e2:38:a3:5c:7b:ed: 4e:57:9a:a5:8d:61:80:56:7c:0c:b6:ea:d9:ac:a2: cf:27:10:24:f3:ed:86:2e:e5:cb:c1:88:ea:f1:6f: 11:20:53:ab:0e:07:8c:85:78:3a:1f:06:f2:c6:fc: 19:e6:65:bb:e1:37:09:87:98:f3:8a:4a:e2:8a:e9: 49:26:df:7d:e7:4e:ca:7f:04:86:1a:8e:05:fb:8a: 0a:b0:8a:ef:5f:ce:04:41:4e:45:cb:b8:d1:c4:a0: 0b:b2:c4:8d:a6:9d:76:b2:4d:02:e3:8b:12:79:d3: d6:fc:32:35:9c:16:bc:28:b8:6f:f6:75:3c:b2:ba: ec:b5:a6:85:69:21:9e:08:ce:de:91:84:32:ca:bb: 5c:00:70:d7:51:da:45:c3:e0:c6:d3:ee:eb:e3:d7: 61:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A4:D0:5A:0A:13:83:81:71:44:57:ED:F0:B2:EF:2D:7A:A6:73:4C X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:30:7f:6b:36:9b:d3:ab:d1:4d:dd:ae:a4:74:64:3c:81:60: 1b:70:da:97:15:30:53:9f:37:94:23:47:27:55:85:9f:3e:24: 03:f5:02:c4:fb:12:d4:e2:87:36:20:82:cb:e3:f6:e1:4e:39: 86:5b:17:e3:25:16:9c:c7:c9:c6:c7:34:cd:b6:d8:b1:6c:b3: 86:70:4c:54:59:61:d5:11:7f:b7:f2:61:6b:1e:b9:80:b0:c9: 28:f1:4f:a8:cb:7e:e8:64:44:74:46:ea:dd:ae:2c:e6:e1:49: eb:7a:b5:01:36:5e:67:7b:f5:32:60:29:e3:ee:0a:d2:ab:e0: 28:44:26:07:8b:c4:05:cb:60:be:06:54:58:02:3d:df:ac:6b: f3:ec:b8:26:cf:84:e8:51:ec:27:9c:d3:87:96:32:b5:5d:d9: 35:c7:09:87:6b:a3:77:66:ec:3a:0a:08:0c:a3:03:e6:0d:a9: 5c:24:88:97:a6:1f:f1:35:3f:2e:85:36:50:36:7f:7e:92:e1: 8d:b7:ff:67:45:27:fc:71:95:58:40:99:bc:fc:be:6d:f0:fe: e9:fc:14:83:6a:da:11:c2:58:42:7a:2c:80:75:49:d9:8c:87: 38:97:fe:6c:53:e6:ce:01:38:ca:fd:56:76:80:ab:74:ab:84: 32:eb:1d:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OThCNTExMC8GA1UEBRMoQ0RCRkEwQTZEMDYxRTFGRTcwMzRCNDBGMkVFMkU0QjUz REU4RkRFMTAeFw0yNTA2MTMwNjI1MjBaFw0yNTA2MjAwNjI1MjBaMBgxFjAUBgNV BAMTDTY4NGJjNDUxLThiNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUXm9BYIuePHe1Oaqp01AAUERAVJvwdmqtfNN6XgnmaM+Coh/32lE14GEdivmJ MqJ44u17Pr/fp2VmE2Rnr4mGB5FkE/DE9c285N//XB0b9Gl0xw4G5BvnfwGivJGr 5EywMeI4o1x77U5XmqWNYYBWfAy26tmsos8nECTz7YYu5cvBiOrxbxEgU6sOB4yF eDofBvLG/BnmZbvhNwmHmPOKSuKK6Ukm333nTsp/BIYajgX7igqwiu9fzgRBTkXL uNHEoAuyxI2mnXayTQLjixJ509b8MjWcFrwouG/2dTyyuuy1poVpIZ4Izt6RhDLK u1wAcNdR2kXD4MbT7uvj12HPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHqTQWgoT g4FxRFft8LLvLXqmc0wwHwYDVR0jBBgwFoAUzb+gptBh4f5wNLQPLuLktT3o/eEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5OEI1Lzk2RDgyMzhBRUMw MDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19l RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemItZ3B0Qmg0ZjV3TkxRUEx1TGt0VDNvX2VFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 OEI1Lzk2RDgyMzhBRUMwMDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1 d05MUVBMdUxrdFQzb19lRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACAwf2s2m9Or0U3drqR0ZDyBYBtw2pcVMFOfN5QjRydVhZ8+JAP1AsT7 EtTihzYggsvj9uFOOYZbF+MlFpzHycbHNM222LFss4ZwTFRZYdURf7fyYWseuYCw ySjxT6jLfuhkRHRG6t2uLObhSet6tQE2Xmd79TJgKePuCtKr4ChEJgeLxAXLYL4G VFgCPd+sa/PsuCbPhOhR7Cec04eWMrVd2TXHCYdro3dm7DoKCAyjA+YNqVwkiJem H/E1Py6FNlA2f36S4Y23/2dFJ/xxlVhAmbz8vm3w/un8FINq2hHCWEJ6LIB1SdmM hziX/mxT5s4BOMr9VnaAq3SrhDLrHU8= -----END CERTIFICATE-----Generated at Sat Jun 14 17:21:12 2025 by rpki-client