$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: ohkUMM2UbDtzpN0w/2vjgRDkoeHVTHVGcTOyYC/IR2I= Subject key identifier: 5B:1B:F6:D9:47:84:9C:74:1B:8E:71:EE:C8:F7:7E:DB:A8:FF:BD:CD Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 60 Signing time: Fri 25 Apr 2025 06:03:21 +0000 Manifest this update: Fri 25 Apr 2025 06:03:21 +0000 Manifest next update: Fri 02 May 2025 06:03:21 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: Iq6q7StOvzRG9IthE0giS4UXp9NhGJC+M5gPo0Y/xYs=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: MwIpMdrSL2OUPZhkEFCHw46/9hdWF6RJ27rUbg8XQI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Apr 25 06:03:21 2025 GMT Not After : May 2 06:03:21 2025 GMT Subject: CN=680b25a9-6f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:77:ef:43:4d:e5:ee:5a:db:cd:51:49:16: c0:0e:33:b1:1e:a0:50:ec:47:34:10:7a:6c:90:29: 93:9a:16:14:8f:72:eb:94:51:31:40:30:9e:b2:5a: 5c:08:69:f1:af:21:8b:53:44:4c:91:48:cf:52:68: ba:28:0d:e3:bd:19:2f:60:25:20:2a:1c:b5:c1:b9: 76:cb:d8:59:f2:a8:4f:39:6b:a8:e0:f0:74:a7:fd: b8:3b:67:fc:ca:bd:00:1b:95:fc:37:3c:41:80:09: 9d:04:bd:23:21:75:86:3a:3c:31:9a:18:dc:08:43: 98:b7:16:e2:21:89:db:cd:3b:81:53:80:86:c6:52: c6:6f:56:37:c0:6a:ca:41:d9:c0:b0:c2:39:3f:b2: 84:98:5c:0b:95:ec:14:b5:84:9e:40:83:bd:c2:f0: 61:bf:7c:c4:69:8d:c5:fa:94:c6:fb:b8:bf:08:1d: d3:17:43:91:f7:57:b4:f7:a6:91:0d:bf:b9:c8:fc: fa:99:4b:87:2c:ab:79:10:a2:10:02:d2:e8:55:5c: b9:a7:3b:1c:6c:b1:32:0e:5d:d5:94:90:e4:56:db: 54:c7:31:fa:bc:e4:49:7f:95:4d:57:0d:69:97:83: 41:01:6d:a0:ef:01:fb:86:9f:26:16:78:83:99:5a: 61:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1B:F6:D9:47:84:9C:74:1B:8E:71:EE:C8:F7:7E:DB:A8:FF:BD:CD X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:3c:b7:20:48:8b:9e:dc:6b:dc:b5:39:97:4d:a8:e2:19:e8: 01:63:d9:82:d4:dc:6d:f1:95:e2:2d:93:47:d2:cd:54:fe:80: ee:c3:75:dc:fd:1e:94:b6:58:02:fd:9b:6e:c5:a6:b8:1a:34: e0:f2:ab:09:10:cf:8d:c6:9b:4c:4a:d2:1a:d4:0c:c9:0a:77: 85:70:fe:20:c6:6b:0e:cb:a5:6e:8b:88:3e:19:69:0b:62:44: 18:ee:81:5a:c0:87:27:c0:ee:73:d5:3c:aa:57:5f:9d:54:e8: 19:f8:2c:4b:27:9d:2e:13:be:c0:71:5f:d2:11:f9:8b:81:94: 5e:2f:a5:e7:d0:ed:6e:d5:df:fb:28:1e:38:9f:b6:a3:0b:9a: 72:5a:28:53:90:9b:3e:19:a5:73:e8:ed:ce:ee:bd:d8:95:ea: ba:c8:68:01:31:2b:c5:d4:fa:ac:2e:e9:19:c4:36:8d:5d:6c: bf:9e:07:b5:c1:4e:7e:e1:91:6d:b0:0c:86:65:0a:9b:5c:cc: 44:4f:4b:bb:ab:d4:24:63:65:ad:e0:6a:af:3c:a3:76:96:80: 5d:1c:f8:2d:4e:59:a7:2f:91:79:32:74:99:69:89:b6:38:b8: b8:c1:96:f5:c6:c0:5c:1e:91:72:9f:2f:80:45:ce:c6:16:90: 7e:ea:61:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REQyMzExMC8GA1UEBRMoNjY4NDUzRkY1NjkxODFGRTFBRUFBMDYzN0U0ODI3NzQy MDExMkM2NDAeFw0yNTA0MjUwNjAzMjFaFw0yNTA1MDIwNjAzMjFaMBgxFjAUBgNV BAMTDTY4MGIyNWE5LTZmNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtDXfvQ03l7lrbzVFJFsAOM7EeoFDsRzQQemyQKZOaFhSPcuuUUTFAMJ6yWlwI afGvIYtTREyRSM9SaLooDeO9GS9gJSAqHLXBuXbL2FnyqE85a6jg8HSn/bg7Z/zK vQAblfw3PEGACZ0EvSMhdYY6PDGaGNwIQ5i3FuIhidvNO4FTgIbGUsZvVjfAaspB 2cCwwjk/soSYXAuV7BS1hJ5Ag73C8GG/fMRpjcX6lMb7uL8IHdMXQ5H3V7T3ppEN v7nI/PqZS4csq3kQohAC0uhVXLmnOxxssTIOXdWUkORW21THMfq85El/lU1XDWmX g0EBbaDvAfuGnyYWeIOZWmExAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWxv22UeE nHQbjnHuyPd+26j/vc0wHwYDVR0jBBgwFoAUZoRT/1aRgf4a6qBjfkgndCARLGQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURERDIzL0VBNzUwQkVDOTEw QzExRUZBNTQwRkMwRkM0RjlBRTAyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWm9SVF8xYVJnZjRhNnFCamZrZ25kQ0FSTEdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE RDIzL0VBNzUwQkVDOTEwQzExRUZBNTQwRkMwRkM0RjlBRTAyL1pvUlRfMWFSZ2Y0 YTZxQmpma2duZENBUkxHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKo8tyBIi57ca9y1OZdNqOIZ6AFj2YLU3G3xleItk0fSzVT+gO7Dddz9 HpS2WAL9m27FprgaNODyqwkQz43Gm0xK0hrUDMkKd4Vw/iDGaw7LpW6LiD4ZaQti RBjugVrAhyfA7nPVPKpXX51U6Bn4LEsnnS4TvsBxX9IR+YuBlF4vpefQ7W7V3/so HjiftqMLmnJaKFOQmz4ZpXPo7c7uvdiV6rrIaAExK8XU+qwu6RnENo1dbL+eB7XB Tn7hkW2wDIZlCptczERPS7ur1CRjZa3gaq88o3aWgF0c+C1OWacvkXkydJlpibY4 uLjBlvXGwFwekXKfL4BFzsYWkH7qYfU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:44 2025 by rpki-client