$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: 1mtWS0BRUJEab8Dex8jMK3Br80pMI0Jx41n6RciYB/k= Subject key identifier: 2A:A4:4B:35:34:02:EC:88:5D:31:6C:F6:40:F0:99:62:A7:99:12:C3 Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 99 Signing time: Sat 09 Aug 2025 06:51:44 +0000 Manifest this update: Sat 09 Aug 2025 06:51:43 +0000 Manifest next update: Sat 16 Aug 2025 06:51:43 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: Uwp1PIZCU0T/fca8fcyxAJz9KrJVVRU1av5bpF0BxMA=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Aug 9 06:51:43 2025 GMT Not After : Aug 16 06:51:43 2025 GMT Subject: CN=6896efff-b647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:06:ef:65:bd:c8:b0:67:38:5e:69:4e:37: 7f:97:d4:aa:67:e6:04:47:eb:28:1e:78:c1:47:ac: 85:b9:39:74:c5:7e:8d:9d:60:87:54:23:1c:f5:b6: 83:10:36:e7:e5:78:2d:7b:ea:04:34:33:f8:3f:db: 8b:85:b6:e7:ef:5c:26:0e:c6:4b:5e:12:9a:27:2b: f5:ab:b2:67:a4:b7:1d:3a:4d:4a:c0:a8:f9:c0:d0: 82:b4:56:03:f0:7f:39:f2:3e:e8:74:a6:31:41:f5: df:2d:e1:33:88:0d:a4:a0:62:08:8a:38:6b:63:fe: 15:76:08:2e:b7:b5:e1:4f:41:2f:91:6c:34:11:7b: f8:ed:04:71:7a:1e:2f:46:43:88:1c:7a:a0:db:42: 90:f5:3a:5f:0c:ba:ee:96:b2:03:29:2b:48:da:ec: 5c:d7:53:5d:58:af:f9:54:cb:60:b9:ef:1d:2c:90: 03:7d:6e:5f:86:b1:9b:02:38:30:4b:3e:fc:95:bd: 72:9f:d2:22:18:71:c5:31:c5:0f:22:e0:1d:43:64: 20:0c:98:51:81:4d:1f:6a:4d:0c:e8:f5:79:4c:0b: dd:43:11:54:a2:9e:b8:a1:8d:1b:97:1e:fc:63:07: ff:13:a4:77:72:b7:70:f6:bc:cf:31:1a:9d:89:1e: a6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A4:4B:35:34:02:EC:88:5D:31:6C:F6:40:F0:99:62:A7:99:12:C3 X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:74:ac:8c:e7:68:d8:32:04:87:8e:15:f2:02:5f:18:2d:f6: 53:4f:df:7d:46:e8:3e:71:81:02:80:72:b3:24:1f:5a:a3:3b: e0:94:b1:8b:b0:5d:cf:9e:1a:16:b5:92:cf:c0:2c:60:82:65: 4f:c4:1b:3b:2f:80:df:db:65:db:22:ca:5f:f2:ce:d3:49:83: de:1e:0f:8f:60:15:f3:45:3c:6a:ea:fd:c4:d0:09:58:08:d0: d4:ab:84:dc:91:33:1c:a1:3e:8a:2d:a9:c1:42:99:3f:b8:9c: 48:bb:a7:54:12:b9:ef:99:8d:a6:4f:15:89:1c:26:5b:6f:11: cf:2c:d1:ac:98:b6:b4:0f:f5:a7:c9:8d:f5:de:ae:48:e6:52: 70:15:67:1d:50:b8:cb:cf:29:bf:02:cf:22:d0:ec:40:b8:16: 76:a4:e7:3e:55:0b:dd:e4:37:5b:05:ac:03:87:de:ac:93:53: f1:09:d7:1d:3d:a9:84:19:71:6b:10:06:80:4a:dd:4d:c6:08: 25:81:18:10:6c:99:68:f7:fa:6a:b2:d2:e8:7e:57:0a:5c:97: 02:a6:a5:5c:7f:37:cb:06:6e:bc:09:82:fd:6a:8b:b6:eb:a2: 19:21:bd:7e:fc:ba:b4:c8:fa:dd:c1:03:8a:eb:e2:a5:71:dd: 9b:57:d2:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjUwODA5MDY1MTQzWhcNMjUwODE2MDY1MTQzWjAYMRYwFAYD VQQDEw02ODk2ZWZmZi1iNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6oG72W9yLBnOF5pTjd/l9SqZ+YER+soHnjBR6yFuTl0xX6NnWCHVCMc9baD EDbn5Xgte+oENDP4P9uLhbbn71wmDsZLXhKaJyv1q7JnpLcdOk1KwKj5wNCCtFYD 8H858j7odKYxQfXfLeEziA2koGIIijhrY/4Vdggut7XhT0EvkWw0EXv47QRxeh4v RkOIHHqg20KQ9TpfDLrulrIDKStI2uxc11NdWK/5VMtgue8dLJADfW5fhrGbAjgw Sz78lb1yn9IiGHHFMcUPIuAdQ2QgDJhRgU0fak0M6PV5TAvdQxFUop64oY0blx78 Ywf/E6R3crdw9rzPMRqdiR6mywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqkSzU0 AuyIXTFs9kDwmWKnmRLDMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrdKyM52jYMgSHjhXyAl8YLfZTT999Rug+cYECgHKzJB9aozvglLGL sF3PnhoWtZLPwCxggmVPxBs7L4Df22XbIspf8s7TSYPeHg+PYBXzRTxq6v3E0AlY CNDUq4TckTMcoT6KLanBQpk/uJxIu6dUErnvmY2mTxWJHCZbbxHPLNGsmLa0D/Wn yY313q5I5lJwFWcdULjLzym/As8i0OxAuBZ2pOc+VQvd5DdbBawDh96sk1PxCdcd PamEGXFrEAaASt1NxgglgRgQbJlo9/pqstLoflcKXJcCpqVcfzfLBm68CYL9aou2 66IZIb1+/Lq0yPrdwQOK6+Klcd2bV9JP -----END CERTIFICATE-----Generated at Sun Aug 10 13:52:41 2025 by rpki-client