$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: df3oYLYXQTFkL7EgpFWHWAOfNrP4PgsDCz1s2sPutCg= Subject key identifier: EE:24:A2:F4:F5:27:9E:26:57:B9:A7:46:37:60:C5:E0:7A:18:DF:97 Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: DF Signing time: Fri 17 Apr 2026 06:19:00 +0000 Manifest this update: Fri 17 Apr 2026 06:18:59 +0000 Manifest next update: Fri 24 Apr 2026 06:18:59 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: 0IHiDH3PGZwvHLCZmWMumo6LGMAtw74QPrbZMCdVhHk=) 2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: v6FRtsNu3PHrktspFs/DWFM1NxVkPvD0FdLuMbgMmRo=) 3: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: Z0jvFP5BjglIoDohYkPG+7O5fRwbkWtepTYds7vg4QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Apr 17 06:18:59 2026 GMT Not After : Apr 24 06:18:59 2026 GMT Subject: CN=69e1d0d4-7138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:cc:5a:28:0d:84:19:c6:40:25:e3:42:c5: 25:ce:67:3e:95:e4:d8:08:4f:b0:27:44:b4:0e:7d: 7b:b2:55:7c:84:fc:62:9f:62:d2:76:f3:c8:1d:93: 16:1c:57:93:9a:41:23:86:9f:72:f1:06:b7:93:f5: 77:bb:dc:5a:e9:c5:3a:fb:9c:22:31:30:89:e3:ea: 02:a4:de:40:89:d5:61:96:54:f4:a4:77:ec:3f:58: df:c4:f4:2e:fb:3f:9c:e9:a5:e9:a8:26:97:b4:1b: 5b:02:ec:24:dd:24:e9:b4:fe:6e:e0:d6:a0:1a:94: f6:bf:5c:b5:9c:d4:60:8d:50:b0:a7:a3:a4:91:d6: 69:1d:22:e7:6b:cd:93:4d:12:5d:65:0f:08:59:5f: 15:8d:d6:a7:27:ae:a1:05:79:98:f3:3c:53:1b:48: bd:c1:3f:3d:f7:58:f6:6d:20:1d:82:7e:9a:ef:d4: 66:3c:f3:d5:56:5a:2c:2f:85:88:1b:32:6a:c3:50: 05:3a:59:96:b1:bd:48:43:86:09:91:5e:35:0d:b5: c2:ad:d7:28:38:20:c0:00:91:0e:84:0a:0e:cb:17: 1f:6d:a0:18:a5:c1:73:d4:04:34:1c:17:48:95:1f: 64:fb:05:3f:bf:e5:cc:21:24:40:d2:92:89:3d:63: c3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:24:A2:F4:F5:27:9E:26:57:B9:A7:46:37:60:C5:E0:7A:18:DF:97 X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:60:6a:c0:7a:d0:a9:37:6d:88:3e:b7:31:fb:5a:f8:fd:81: ca:0f:c5:ee:02:63:97:ec:13:79:ad:e8:87:9b:56:e7:7f:13: ec:94:b0:4a:4d:03:66:e7:f2:f3:94:7f:ba:c8:d3:c7:ea:0a: 98:c1:0a:ae:c9:a2:08:cf:27:37:f3:09:d5:66:c0:0f:b3:21: 27:01:d3:fd:97:c9:c7:28:73:81:2e:db:eb:05:1c:a4:d2:8d: 51:40:c8:8c:dd:b2:12:f6:7c:eb:94:20:29:c2:cf:f0:5e:9e: 39:ba:46:a4:92:15:5f:72:8c:78:76:7a:7f:ca:f5:dd:26:19: 6d:59:00:ad:9a:9d:30:d5:cc:a7:1b:2b:d0:b1:07:d9:70:00: e2:c0:ba:f4:5c:7d:19:df:16:41:be:81:37:fe:4b:06:de:8b: 86:51:48:99:0e:9e:06:5a:a1:df:36:a1:d2:74:2b:8f:04:e3: 0f:74:a9:bb:a3:48:c4:bc:04:ab:42:a0:cb:eb:25:db:4f:4c: a4:fc:c2:36:46:dd:b3:f8:38:0c:c6:70:5a:7a:3f:58:37:97: a8:2d:66:66:88:cb:78:89:ae:52:56:9f:76:d1:0c:d9:df:b5: e6:0d:6c:7c:8a:f6:77:44:ed:ce:0f:57:e7:e8:e0:56:88:5b: 90:9b:3b:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4QjUxMTAvBgNVBAUTKENEQkZBMEE2RDA2MUUxRkU3MDM0QjQwRjJFRTJFNEI1 M0RFOEZERTEwHhcNMjYwNDE3MDYxODU5WhcNMjYwNDI0MDYxODU5WjAYMRYwFAYD VQQDEw02OWUxZDBkNC03MTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZnMWigNhBnGQCXjQsUlzmc+leTYCE+wJ0S0Dn17slV8hPxin2LSdvPIHZMW HFeTmkEjhp9y8Qa3k/V3u9xa6cU6+5wiMTCJ4+oCpN5AidVhllT0pHfsP1jfxPQu +z+c6aXpqCaXtBtbAuwk3STptP5u4NagGpT2v1y1nNRgjVCwp6OkkdZpHSLna82T TRJdZQ8IWV8VjdanJ66hBXmY8zxTG0i9wT8991j2bSAdgn6a79RmPPPVVlosL4WI GzJqw1AFOlmWsb1IQ4YJkV41DbXCrdcoOCDAAJEOhAoOyxcfbaAYpcFz1AQ0HBdI lR9k+wU/v+XMISRA0pKJPWPDxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4kovT1 J54mV7mnRjdgxeB6GN+XMB8GA1UdIwQYMBaAFM2/oKbQYeH+cDS0Dy7i5LU96P3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThCNS85NkQ4MjM4QUVD MDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRmNXdOTFFQTHVMa3RUM29f ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThCNS85NkQ4MjM4QUVDMDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRm NXdOTFFQTHVMa3RUM29fZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB2BqwHrQqTdtiD63Mfta+P2Byg/F7gJjl+wTea3oh5tW538T7JSwSk0DZufy 85R/usjTx+oKmMEKrsmiCM8nN/MJ1WbAD7MhJwHT/ZfJxyhzgS7b6wUcpNKNUUDI jN2yEvZ865QgKcLP8F6eObpGpJIVX3KMeHZ6f8r13SYZbVkArZqdMNXMpxsr0LEH 2XAA4sC69Fx9Gd8WQb6BN/5LBt6LhlFImQ6eBlqh3zah0nQrjwTjD3Spu6NIxLwE q0Kgy+sl209MpPzCNkbds/g4DMZwWno/WDeXqC1mZojLeImuUlafdtEM2d+15g1s fIr2d0Ttzg9X5+jgVohbkJs7mQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:57:15 2026 by rpki-client