$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: Ty0dCitKaYKbz223jhvj6SL3zcIERK3xpJ3bySOXucQ= Subject key identifier: 19:02:C0:DE:57:16:27:5E:38:CD:94:BD:1E:C0:B8:3F:5B:03:82:7A Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: C4 Signing time: Mon 03 Nov 2025 05:53:11 +0000 Manifest this update: Mon 03 Nov 2025 05:53:11 +0000 Manifest next update: Mon 10 Nov 2025 05:53:11 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: 1L18A75dmF+CshpHtJMPkpa+Rp11QrUlfozC3qvk670=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Nov 3 05:53:11 2025 GMT Not After : Nov 10 05:53:11 2025 GMT Subject: CN=69084347-b105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b1:74:05:38:c9:63:ef:e6:91:3a:72:b9:be: 51:51:69:d5:e0:36:0d:49:24:d3:5a:1b:ad:e6:ea: 0c:5d:55:8a:3f:c5:85:dd:18:4b:ff:c8:70:f3:e2: 77:1e:d7:26:a2:3e:dc:46:ab:00:8c:f8:b9:bb:7c: fb:bf:b6:08:5d:e6:19:2a:84:97:1d:40:09:62:77: f1:b3:24:5b:08:10:58:3b:2f:8b:95:14:41:5c:15: 2f:95:02:8f:73:59:f3:eb:e4:6c:bd:24:39:d6:4f: 18:78:87:31:ed:0c:37:09:c1:ab:34:0d:51:6e:4d: ee:63:a4:74:38:3c:d1:0b:ca:c5:ed:7b:e9:3e:9f: e1:80:a6:92:45:9e:9d:19:56:76:c7:7e:4e:f8:da: f9:3e:e4:2d:0a:a7:97:5f:d6:23:23:d2:cf:26:68: 2f:7e:ad:ab:73:99:b3:76:c4:57:34:23:ab:0c:30: b7:e2:be:f8:47:70:f8:02:c5:b6:d4:89:72:da:ce: d9:06:88:0c:63:c9:81:78:a5:f2:aa:07:d6:f9:62: 30:a8:38:dc:49:c9:5d:ad:1d:f4:e6:a0:ab:30:ac: e9:55:13:64:05:a4:e4:55:ad:14:22:25:4b:38:49: 63:00:fc:05:8c:d4:d2:14:e7:7c:de:1b:5b:ed:f3: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:02:C0:DE:57:16:27:5E:38:CD:94:BD:1E:C0:B8:3F:5B:03:82:7A X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8c:43:d5:b7:71:ac:02:e0:35:6b:8c:37:70:ea:db:2e:e0: c3:7f:de:c0:1d:9f:da:ba:5b:ee:e6:71:d6:e2:09:ae:e8:b7: a6:b4:f8:6c:99:81:6e:1b:cb:d2:77:09:83:c6:50:38:d5:d7: eb:3f:2b:c8:29:33:5b:06:17:cf:64:01:83:2e:20:f3:74:a0: 45:27:f2:7d:8d:f3:f8:fb:2a:b1:78:19:c0:42:d5:b7:c7:c4: 3b:e1:83:3f:84:8d:9d:9d:c0:b0:8d:21:c3:3a:ad:8e:65:46: 84:2d:56:9f:a7:b2:61:19:e9:ed:ac:6d:84:44:10:0b:75:fd: d7:53:88:53:62:43:b8:86:5e:5a:82:98:6a:da:18:34:9d:20: fb:76:60:26:5f:ca:95:c1:c2:e7:6f:e2:29:77:51:bc:27:ab: 2c:92:c0:81:07:fd:04:63:f5:84:9c:31:22:98:7b:2c:1d:91: 50:5a:8f:81:42:48:b9:9e:fe:de:bb:cd:91:cf:18:c1:70:e7: 6f:3e:64:65:ec:d9:39:a1:89:71:8e:75:10:d6:04:59:d8:4e: 18:30:a6:47:1f:bc:7d:b4:4b:f9:90:04:b5:56:b7:e1:76:d3: 86:ed:f9:02:05:7b:c2:f4:06:f0:f6:45:27:27:db:60:a0:57: 6f:b9:8b:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjUxMTAzMDU1MzExWhcNMjUxMTEwMDU1MzExWjAYMRYwFAYD VQQDEw02OTA4NDM0Ny1iMTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLF0BTjJY+/mkTpyub5RUWnV4DYNSSTTWhut5uoMXVWKP8WF3RhL/8hw8+J3 Htcmoj7cRqsAjPi5u3z7v7YIXeYZKoSXHUAJYnfxsyRbCBBYOy+LlRRBXBUvlQKP c1nz6+RsvSQ51k8YeIcx7Qw3CcGrNA1Rbk3uY6R0ODzRC8rF7XvpPp/hgKaSRZ6d GVZ2x35O+Nr5PuQtCqeXX9YjI9LPJmgvfq2rc5mzdsRXNCOrDDC34r74R3D4AsW2 1Ily2s7ZBogMY8mBeKXyqgfW+WIwqDjcScldrR305qCrMKzpVRNkBaTkVa0UIiVL OEljAPwFjNTSFOd83htb7fNwFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkCwN5X FideOM2UvR7AuD9bA4J6MB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7jEPVt3GsAuA1a4w3cOrbLuDDf97AHZ/aulvu5nHW4gmu6LemtPhs mYFuG8vSdwmDxlA41dfrPyvIKTNbBhfPZAGDLiDzdKBFJ/J9jfP4+yqxeBnAQtW3 x8Q74YM/hI2dncCwjSHDOq2OZUaELVafp7JhGentrG2ERBALdf3XU4hTYkO4hl5a gphq2hg0nSD7dmAmX8qVwcLnb+Ipd1G8J6ssksCBB/0EY/WEnDEimHssHZFQWo+B Qki5nv7eu82RzxjBcOdvPmRl7Nk5oYlxjnUQ1gRZ2E4YMKZHH7x9tEv5kAS1Vrfh dtOG7fkCBXvC9Abw9kUnJ9tgoFdvuYsS -----END CERTIFICATE-----Generated at Tue Nov 4 19:06:07 2025 by rpki-client