$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: ml6+IUFkpYZICCy+SabLwmVGi+TjRzCPMqzMJgorGiA= Subject key identifier: B1:1D:9B:7D:32:66:8C:A3:48:30:87:5A:03:7D:AC:7C:59:6F:76:CD Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: C5 Signing time: Sun 01 Mar 2026 08:07:50 +0000 Manifest this update: Sun 01 Mar 2026 08:07:49 +0000 Manifest next update: Sun 08 Mar 2026 08:07:49 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: sWJqAoXiNk3022319MAwQWNcMRDMK+/30fUljSC347g=) 2: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: e7rYIU/XpTz58Lcq29fudlIz6AAycfkFxf2JSVpee3o=) 3: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: KZc3kWyqAQjmnnK2FELTDuYJT89OESgBI+F0au91ywI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Mar 1 08:07:49 2026 GMT Not After : Mar 8 08:07:49 2026 GMT Subject: CN=69a3f3d6-4535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:ee:31:d0:1e:ff:fd:79:ef:0a:91:f7:b5: 24:13:7d:37:6b:a9:b3:fb:5e:e3:f1:fa:10:4e:e8: fc:91:c9:ab:36:7c:26:0f:1c:b3:15:63:d7:b5:d3: 59:23:90:82:a3:e3:7d:a8:de:6b:59:da:19:9e:2c: 49:d1:09:df:a6:3e:a5:f7:0a:bd:45:60:28:b4:0e: 59:40:35:b1:6b:f6:8a:cd:a2:4d:5f:21:9d:96:0b: 88:c4:44:7a:f2:05:be:15:95:ce:8b:41:b5:55:69: 33:fc:28:81:88:00:ca:2d:57:ca:9f:5c:b2:69:68: f6:d5:08:e1:5a:8c:58:e2:4a:a4:74:3a:ee:99:14: 97:97:bd:a5:da:19:0b:b2:13:73:23:74:89:f8:d0: ae:b9:4b:61:eb:8d:74:67:84:01:8a:55:c8:53:ca: 8d:e8:a9:85:e1:be:55:4f:42:49:cb:e6:cf:28:b3: fa:22:58:bd:bd:1c:2a:3a:5e:f0:70:c6:ff:52:fa: 96:bf:29:e9:cb:c7:dd:fa:13:a9:5b:32:70:c5:36: ac:3b:ef:80:ca:3d:42:a9:ec:54:ef:75:72:0d:24: 9d:2f:16:4e:61:c9:f3:75:73:35:ee:3c:97:87:07: 23:f2:74:7f:b9:fa:8d:6f:17:0f:61:32:33:d5:d3: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1D:9B:7D:32:66:8C:A3:48:30:87:5A:03:7D:AC:7C:59:6F:76:CD X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2c:03:3b:77:bd:5f:fd:47:b7:5e:f5:0f:92:c5:a4:d4:25: 28:4e:9c:e1:f6:25:2d:a4:53:06:2d:61:89:a2:92:42:bb:2f: 15:54:ab:c7:88:80:10:75:55:6d:00:fc:47:27:32:9b:45:34: 0a:a4:a6:54:06:f6:8b:8f:45:25:2f:5e:1d:88:0d:91:9f:65: 4a:92:18:d1:38:dd:7e:64:9c:17:93:79:7b:fb:45:02:ec:66: 52:77:63:fe:ef:54:96:48:2e:d0:00:2b:46:15:5d:e3:47:db: df:88:eb:9e:27:ca:32:1f:9c:2c:4e:31:f8:c7:0f:82:80:49: e6:8a:98:8b:60:fe:a9:be:7e:98:73:f2:b3:76:60:d3:f6:2e: 4d:10:0b:5a:43:ce:af:fe:90:91:7a:b4:b5:4a:e3:ad:c2:36: 80:e5:81:c6:f3:0c:9e:61:90:f6:43:8c:6f:5e:21:29:75:a5: 68:83:84:a3:9f:bd:8b:dc:b5:b3:81:ba:ba:8e:33:16:87:7a: 5f:80:67:87:9f:44:d1:82:ba:46:44:91:36:12:bf:6c:30:01: d9:f2:3e:4c:5e:3c:9a:07:da:5c:3f:c6:24:0f:c1:f3:f7:06: 70:1e:7e:bf:c8:9b:ff:ff:4e:a7:ea:06:51:03:0e:53:d8:16: e2:80:a4:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4QjUxMTAvBgNVBAUTKENEQkZBMEE2RDA2MUUxRkU3MDM0QjQwRjJFRTJFNEI1 M0RFOEZERTEwHhcNMjYwMzAxMDgwNzQ5WhcNMjYwMzA4MDgwNzQ5WjAYMRYwFAYD VQQDEw02OWEzZjNkNi00NTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5ruMdAe//157wqR97UkE303a6mz+17j8foQTuj8kcmrNnwmDxyzFWPXtdNZ I5CCo+N9qN5rWdoZnixJ0Qnfpj6l9wq9RWAotA5ZQDWxa/aKzaJNXyGdlguIxER6 8gW+FZXOi0G1VWkz/CiBiADKLVfKn1yyaWj21QjhWoxY4kqkdDrumRSXl72l2hkL shNzI3SJ+NCuuUth6410Z4QBilXIU8qN6KmF4b5VT0JJy+bPKLP6Ili9vRwqOl7w cMb/UvqWvynpy8fd+hOpWzJwxTasO++Ayj1CqexU73VyDSSdLxZOYcnzdXM17jyX hwcj8nR/ufqNbxcPYTIz1dPuZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLEdm30y ZoyjSDCHWgN9rHxZb3bNMB8GA1UdIwQYMBaAFM2/oKbQYeH+cDS0Dy7i5LU96P3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThCNS85NkQ4MjM4QUVD MDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRmNXdOTFFQTHVMa3RUM29f ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThCNS85NkQ4MjM4QUVDMDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRm NXdOTFFQTHVMa3RUM29fZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbSwDO3e9X/1Ht171D5LFpNQlKE6c4fYlLaRTBi1hiaKSQrsvFVSrx4iAEHVV bQD8Rycym0U0CqSmVAb2i49FJS9eHYgNkZ9lSpIY0TjdfmScF5N5e/tFAuxmUndj /u9Ulkgu0AArRhVd40fb34jrnifKMh+cLE4x+McPgoBJ5oqYi2D+qb5+mHPys3Zg 0/YuTRALWkPOr/6QkXq0tUrjrcI2gOWBxvMMnmGQ9kOMb14hKXWlaIOEo5+9i9y1 s4G6uo4zFod6X4Bnh59E0YK6RkSRNhK/bDAB2fI+TF48mgfaXD/GJA/B8/cGcB5+ v8ib//9Op+oGUQMOU9gW4oCkYg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:34:27 2026 by rpki-client