$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: qRkTAN1vUNYXk3jg08YXm2F6l4slMrKrP+Bzn0HWbGo= Subject key identifier: 8B:90:CB:F0:F4:13:F1:43:30:20:9A:21:BB:C9:56:3A:ED:46:FA:2B Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 86 Signing time: Mon 03 Nov 2025 06:38:14 +0000 Manifest this update: Mon 03 Nov 2025 06:38:14 +0000 Manifest next update: Mon 10 Nov 2025 06:38:14 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: c9MuC5lQ5lAGK1+33Tw2lyCS/bnE6WrpkrZrp6CChiY=) 2: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: QOE6RaPByip2qWXTpgbOiN0duUqz1Bsz81bUndnwZ7Y=) 3: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Nov 3 06:38:14 2025 GMT Not After : Nov 10 06:38:14 2025 GMT Subject: CN=69084dd6-d293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cf:35:1f:8e:54:9e:b7:9a:d7:fc:57:c2:8c: ce:63:44:65:1b:29:d6:a8:17:5e:b3:e0:1f:7f:6e: 27:c2:13:c0:99:cf:4e:e7:44:0b:dc:a4:65:0c:53: 24:3c:31:5b:c2:a1:e1:89:d2:c1:bd:9f:bd:1e:36: d0:aa:e6:d4:81:59:fb:7e:53:ac:69:7a:2f:5d:e5: fd:11:9a:04:fa:e3:4f:a1:3d:43:83:f5:ed:83:01: 76:cc:35:5a:31:b0:e1:58:14:97:05:8f:91:fc:6f: 64:78:21:7b:66:96:37:81:5c:62:fd:81:64:3f:7e: 26:2e:32:aa:66:79:d8:8b:33:35:3d:9f:43:6a:65: c8:24:6d:1b:11:fd:2c:b4:4e:d4:4f:2e:b3:17:84: 16:38:50:1d:17:8e:fb:d1:ce:39:9e:0d:5b:c7:b9: 71:f1:fb:3a:be:58:5f:25:28:78:62:2a:f0:07:47: 0d:1e:bb:06:77:5f:8c:95:5f:99:93:ad:55:f2:86: 13:f0:22:2b:d0:4f:d4:3e:55:0f:b5:e6:8a:7c:f5: 78:3a:b6:88:f7:70:4f:fb:69:6c:31:01:b1:67:f4: 46:63:49:71:40:72:7e:18:52:3f:72:d6:92:57:7c: 14:b3:69:b6:25:ca:9d:4d:31:f1:94:54:8c:91:2e: 57:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:90:CB:F0:F4:13:F1:43:30:20:9A:21:BB:C9:56:3A:ED:46:FA:2B X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:2b:dd:94:40:7c:24:f5:a3:38:fb:c9:78:4b:eb:e8:a0:82: 86:21:d5:8b:78:e0:b7:4e:dd:d2:3b:71:b9:26:cf:fa:80:3f: 90:be:00:74:b5:75:4b:43:58:de:0d:ba:46:75:c8:59:ff:6b: 8f:f3:28:1d:38:4d:3a:b0:5a:5e:35:f1:6c:0d:50:1c:d7:40: 1e:41:a9:7c:d5:06:09:6c:3e:9d:eb:d2:e5:df:7d:9f:39:f9: 88:25:a1:f6:c9:66:e2:43:e4:a6:4c:0a:62:20:50:e6:c1:7d: fd:2e:f2:99:aa:41:3b:8f:8b:1b:ab:47:c9:71:65:56:c4:b0: 9c:1e:a4:6d:08:d2:85:b4:c3:86:50:4c:dc:f7:23:0b:36:0e: 15:a7:f3:1c:67:f2:4c:c3:84:3b:6d:47:9b:40:2c:62:e1:d2: 57:a0:6a:83:38:68:6b:27:d0:5d:c0:4b:19:5a:7e:83:40:6b: db:8b:a5:c0:b0:3a:65:1a:54:48:63:87:c7:3c:bc:01:bb:b2: ae:ed:ef:67:71:57:b8:56:9a:5c:6e:d0:8f:fe:c2:fa:ee:d5: 54:3a:6e:0f:f9:e3:e1:3d:2f:96:2c:37:00:c9:06:1a:46:93: 18:65:88:74:03:60:b4:f3:43:09:19:18:dc:ea:6c:35:eb:81: 1f:ed:85:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4QjUxMTAvBgNVBAUTKENEQkZBMEE2RDA2MUUxRkU3MDM0QjQwRjJFRTJFNEI1 M0RFOEZERTEwHhcNMjUxMTAzMDYzODE0WhcNMjUxMTEwMDYzODE0WjAYMRYwFAYD VQQDEw02OTA4NGRkNi1kMjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3c81H45Unrea1/xXwozOY0RlGynWqBdes+Aff24nwhPAmc9O50QL3KRlDFMk PDFbwqHhidLBvZ+9HjbQqubUgVn7flOsaXovXeX9EZoE+uNPoT1Dg/XtgwF2zDVa MbDhWBSXBY+R/G9keCF7ZpY3gVxi/YFkP34mLjKqZnnYizM1PZ9DamXIJG0bEf0s tE7UTy6zF4QWOFAdF4770c45ng1bx7lx8fs6vlhfJSh4YirwB0cNHrsGd1+MlV+Z k61V8oYT8CIr0E/UPlUPteaKfPV4OraI93BP+2lsMQGxZ/RGY0lxQHJ+GFI/ctaS V3wUs2m2JcqdTTHxlFSMkS5XCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuQy/D0 E/FDMCCaIbvJVjrtRvorMB8GA1UdIwQYMBaAFM2/oKbQYeH+cDS0Dy7i5LU96P3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThCNS85NkQ4MjM4QUVD MDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRmNXdOTFFQTHVMa3RUM29f ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThCNS85NkQ4MjM4QUVDMDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRm NXdOTFFQTHVMa3RUM29fZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoK92UQHwk9aM4+8l4S+vooIKGIdWLeOC3Tt3SO3G5Js/6gD+QvgB0 tXVLQ1jeDbpGdchZ/2uP8ygdOE06sFpeNfFsDVAc10AeQal81QYJbD6d69Ll332f OfmIJaH2yWbiQ+SmTApiIFDmwX39LvKZqkE7j4sbq0fJcWVWxLCcHqRtCNKFtMOG UEzc9yMLNg4Vp/McZ/JMw4Q7bUebQCxi4dJXoGqDOGhrJ9BdwEsZWn6DQGvbi6XA sDplGlRIY4fHPLwBu7Ku7e9ncVe4VppcbtCP/sL67tVUOm4P+ePhPS+WLDcAyQYa RpMYZYh0A2C080MJGRjc6mw164Ef7YVX -----END CERTIFICATE-----Generated at Tue Nov 4 21:05:56 2025 by rpki-client