$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: JtnBsmjB4AEK9Vqk7qlGcLA0UNnWrjlf0gZpcySbYcI= Subject key identifier: BD:48:43:F3:C0:78:DA:7F:5F:41:68:6D:31:B0:2A:11:46:85:6C:51 Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 0100 Signing time: Sun 01 Mar 2026 07:14:16 +0000 Manifest this update: Sun 01 Mar 2026 07:14:15 +0000 Manifest next update: Sun 08 Mar 2026 07:14:15 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: mW7hj2p1gJu1V+/AiSo4Mda0lD/0TuxSPa2MCJ5WavE=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Mar 1 07:14:15 2026 GMT Not After : Mar 8 07:14:15 2026 GMT Subject: CN=69a3e748-3874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:93:4c:b7:62:64:78:a7:34:57:76:f0:c7: fa:29:7f:8b:c3:6c:fe:6c:13:16:49:09:e6:5f:47: 62:9c:06:d6:14:12:a1:c5:54:54:ce:c7:14:b6:a7: b1:26:08:6a:0b:57:2c:54:6d:e0:50:e3:2b:d6:93: 23:59:ce:a1:0d:33:89:79:82:a8:eb:71:a0:85:8c: 9e:56:24:30:ff:03:8f:94:96:85:dc:a8:95:64:bc: 05:e2:a7:b1:00:b8:7e:87:95:36:85:4f:e7:be:08: 63:67:38:12:d1:24:b0:5b:a2:e2:3e:db:f7:33:ce: 0a:19:47:04:22:3f:83:16:0a:8f:d4:19:5a:9b:df: 20:98:90:ed:28:81:83:f7:23:d2:5d:47:0b:b2:9c: 2a:91:c0:5e:22:c7:c6:b3:7d:fb:40:31:0a:5f:e9: 70:5e:48:ad:20:cb:53:df:f5:9e:de:bd:99:19:7e: c8:fc:30:24:8d:62:0a:1a:80:11:fd:ac:73:cb:e5: 58:7a:d4:88:b5:a1:02:1c:5b:18:b2:47:d2:de:6b: 72:99:a3:96:53:f8:11:ae:c4:29:43:dc:3e:4c:09: 1d:4a:f0:72:e1:55:f9:db:5b:44:8c:4a:9e:5d:cc: 20:3c:75:3c:72:ab:f8:4c:a6:10:65:b8:79:50:c0: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:48:43:F3:C0:78:DA:7F:5F:41:68:6D:31:B0:2A:11:46:85:6C:51 X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:d5:a7:73:22:8e:b9:ff:1b:27:d2:b0:3a:81:2c:e3:73:c6: e2:c8:0b:4c:89:fb:57:5b:29:97:93:41:19:6e:c3:64:b9:ac: 58:70:63:f6:0c:f9:0f:92:8d:e3:35:ea:bc:b7:53:3a:31:e5: 9a:30:c8:43:d7:2b:40:cd:54:96:4d:fd:84:5c:b7:c9:38:de: ff:7e:aa:47:9f:75:1c:1d:0e:79:1f:a6:93:fc:21:66:f5:77: 91:75:e0:c5:81:f7:0d:03:dd:10:a8:b2:3a:66:c5:64:4a:86: aa:40:37:58:33:30:ca:67:02:3b:09:d9:1e:a9:1a:4e:d2:1a: ef:b9:bd:d3:9c:56:9c:3f:2c:81:c5:f9:c5:dc:76:49:5e:5b: 5b:8f:fc:8d:f8:86:48:aa:0a:95:e6:49:01:a1:98:21:c4:c1: 01:a1:7e:5d:5e:4b:74:83:81:c0:75:4d:30:0d:68:01:50:cf: 2d:23:46:f8:a2:ea:80:fc:ba:7b:60:7a:10:96:81:50:13:64: d4:90:4c:6a:a0:ed:09:72:1b:c2:47:c2:0d:a6:c8:36:ea:eb: 6c:ad:65:af:f0:79:2e:7f:37:79:fa:41:c3:c8:c2:de:16:f3: be:a7:5e:43:f8:13:87:47:60:08:02:53:c0:43:1f:0f:5a:ba: 94:fb:00:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjYwMzAxMDcxNDE1WhcNMjYwMzA4MDcxNDE1WjAYMRYwFAYD VQQDEw02OWEzZTc0OC0zODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso2TTLdiZHinNFd28Mf6KX+Lw2z+bBMWSQnmX0dinAbWFBKhxVRUzscUtqex JghqC1csVG3gUOMr1pMjWc6hDTOJeYKo63GghYyeViQw/wOPlJaF3KiVZLwF4qex ALh+h5U2hU/nvghjZzgS0SSwW6LiPtv3M84KGUcEIj+DFgqP1Blam98gmJDtKIGD 9yPSXUcLspwqkcBeIsfGs337QDEKX+lwXkitIMtT3/We3r2ZGX7I/DAkjWIKGoAR /axzy+VYetSItaECHFsYskfS3mtymaOWU/gRrsQpQ9w+TAkdSvBy4VX521tEjEqe XcwgPHU8cqv4TKYQZbh5UMBZewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL1IQ/PA eNp/X0FobTGwKhFGhWxRMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAadWncyKOuf8bJ9KwOoEs43PG4sgLTIn7V1spl5NBGW7DZLmsWHBj9gz5D5KN 4zXqvLdTOjHlmjDIQ9crQM1Ulk39hFy3yTje/36qR591HB0OeR+mk/whZvV3kXXg xYH3DQPdEKiyOmbFZEqGqkA3WDMwymcCOwnZHqkaTtIa77m905xWnD8sgcX5xdx2 SV5bW4/8jfiGSKoKleZJAaGYIcTBAaF+XV5LdIOBwHVNMA1oAVDPLSNG+KLqgPy6 e2B6EJaBUBNk1JBMaqDtCXIbwkfCDabINurrbK1lr/B5Ln83efpBw8jC3hbzvqde Q/gTh0dgCAJTwEMfD1q6lPsAZw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:58:47 2026 by rpki-client