$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: BtBbZB6LZFRzyV2OWL5AMIfinoV9EmmhAQypieKdoGE= Subject key identifier: 67:B5:F2:4E:E5:E4:64:C1:00:84:75:6F:FD:59:7E:54:1F:30:BE:DC Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 014E Signing time: Mon 27 Jul 2026 07:10:36 +0000 Manifest this update: Mon 27 Jul 2026 07:10:35 +0000 Manifest next update: Mon 03 Aug 2026 07:10:35 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: SKezFHrUiRDQka0rR9eC/UMvgb7e76VNCNHO/i9jbas=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: BGGfvsOq7RoK0GrG/EorBPAAePzcOp1fy3TkM7bq4uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Jul 27 07:10:35 2026 GMT Not After : Aug 3 07:10:35 2026 GMT Subject: CN=6a67046c-c0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:43:bf:ac:81:b0:c2:de:b2:77:7b:67:aa: 4b:ed:41:bb:1a:3c:9c:ce:50:e4:7d:78:52:33:76: 76:9d:d8:42:bd:16:19:c1:3c:85:54:77:ca:b8:0d: 10:92:f0:45:f0:4d:3b:6f:7b:a3:a8:fe:39:ab:25: f4:90:63:af:c1:1c:86:8c:f9:ad:58:cb:8f:7b:83: 42:f5:95:9f:de:e8:aa:d5:72:49:b5:96:3f:75:5c: 7c:d0:87:98:a8:34:1f:7d:74:47:56:52:c6:60:fa: 40:3f:3b:ab:e9:c8:95:71:38:eb:ad:8d:00:36:2b: a8:55:23:a6:b5:ba:5d:46:5f:69:69:ef:00:1a:78: 57:d4:18:00:c7:9a:70:8f:06:0b:23:10:09:b8:1d: 27:e1:0b:23:e6:7d:f9:d9:2b:46:74:0a:2b:3c:88: f3:f5:4e:03:2c:ee:4d:8b:6f:eb:69:06:fd:02:dc: bf:d5:ee:6f:25:ea:0e:3f:81:77:3b:08:db:6d:c3: ea:12:9a:80:e8:b8:42:a9:79:89:6a:08:3a:43:18: b4:0d:54:f4:6d:af:82:fb:1e:18:9c:28:9b:b8:34: 21:cd:78:ab:88:88:59:f1:ae:81:8b:f2:f8:5c:4e: f4:e2:16:f8:b5:fe:c8:eb:55:a7:2a:a4:be:c5:21: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B5:F2:4E:E5:E4:64:C1:00:84:75:6F:FD:59:7E:54:1F:30:BE:DC X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:4f:17:47:46:5a:e7:40:38:c4:49:33:d0:dd:2e:31:59:46: 89:fc:d5:f7:0b:24:b9:90:9e:90:ae:05:64:95:bc:30:2f:17: ca:0a:eb:5b:76:68:1a:74:9b:c0:00:24:73:0e:98:f6:85:60: 4d:ae:ac:c6:98:2d:81:ac:4e:ae:93:66:4f:49:70:f2:bb:d6: 93:9d:6c:a9:3a:fb:9a:02:42:ab:51:aa:84:5a:22:b8:5e:4d: 84:10:4b:8e:b9:61:66:fb:1e:cd:b2:ad:3c:5c:c2:d6:6d:45: 22:40:ee:3a:78:8c:f1:1e:08:92:c1:ae:44:fa:34:46:aa:6f: 11:c1:93:47:b6:e9:d1:a1:fd:3c:ad:b8:0c:74:6e:96:ef:90: 0d:23:23:9b:39:a2:80:9c:ee:84:10:fb:90:d8:0a:2a:2f:41: d8:03:8a:ae:b1:f5:af:47:33:78:ff:d8:15:fd:07:c5:5e:34: ec:5b:c8:94:d1:cc:ca:94:d8:fd:66:b0:3a:e3:83:67:07:96: 94:a7:6d:63:45:78:12:93:53:4e:03:f8:0f:53:db:64:04:89: 70:6d:05:15:7b:04:6d:89:41:48:6c:0e:85:cf:27:19:50:da: f3:23:e8:71:97:db:a6:5a:04:d1:fb:e4:5a:b0:24:03:58:0c: d6:55:47:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjYwNzI3MDcxMDM1WhcNMjYwODAzMDcxMDM1WjAYMRYwFAYD VQQDEw02YTY3MDQ2Yy1jMGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwd5Dv6yBsMLesnd7Z6pL7UG7GjyczlDkfXhSM3Z2ndhCvRYZwTyFVHfKuA0Q kvBF8E07b3ujqP45qyX0kGOvwRyGjPmtWMuPe4NC9ZWf3uiq1XJJtZY/dVx80IeY qDQffXRHVlLGYPpAPzur6ciVcTjrrY0ANiuoVSOmtbpdRl9pae8AGnhX1BgAx5pw jwYLIxAJuB0n4Qsj5n352StGdAorPIjz9U4DLO5Ni2/raQb9Aty/1e5vJeoOP4F3 OwjbbcPqEpqA6LhCqXmJagg6Qxi0DVT0ba+C+x4YnCibuDQhzXiriIhZ8a6Bi/L4 XE704hb4tf7I61WnKqS+xSHH3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGe18k7l 5GTBAIR1b/1ZflQfML7cMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvE8XR0Za50A4xEkz0N0uMVlGifzV9wskuZCekK4FZJW8MC8XygrrW3ZoGnSb wAAkcw6Y9oVgTa6sxpgtgaxOrpNmT0lw8rvWk51sqTr7mgJCq1GqhFoiuF5NhBBL jrlhZvsezbKtPFzC1m1FIkDuOniM8R4IksGuRPo0RqpvEcGTR7bp0aH9PK24DHRu lu+QDSMjmzmigJzuhBD7kNgKKi9B2AOKrrH1r0czeP/YFf0HxV407FvIlNHMypTY /WawOuODZweWlKdtY0V4EpNTTgP4D1PbZASJcG0FFXsEbYlBSGwOhc8nGVDa8yPo cZfbploE0fvkWrAkA1gM1lVH+w== -----END CERTIFICATE-----Generated at Tue Jul 28 20:21:36 2026 by rpki-client