$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: cH6dPElrMmAj55B4K+BKwH2w6Zsca+bAwZLsmU11Es0= Subject key identifier: 96:6D:BE:1C:E7:09:8C:15:66:90:68:CD:5D:33:65:A8:36:66:9D:DA Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 0138 Signing time: Sat 13 Jun 2026 05:30:17 +0000 Manifest this update: Sat 13 Jun 2026 05:30:17 +0000 Manifest next update: Sat 20 Jun 2026 05:30:17 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: HqAl69SnOpwsd5qmL217eHN4iXiLUhgy4g5ujow6z5A=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: BGGfvsOq7RoK0GrG/EorBPAAePzcOp1fy3TkM7bq4uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 05:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Jun 13 05:30:17 2026 GMT Not After : Jun 20 05:30:17 2026 GMT Subject: CN=6a2ceae9-f555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:61:e8:5e:6e:b4:5d:fd:8f:4e:b4:20:5b:22: 1f:61:df:e6:7a:e7:74:0d:89:b7:f0:32:9a:96:3c: b8:ef:3b:31:74:ca:2c:79:0d:88:fa:0c:4c:5e:19: 95:22:91:74:0e:ad:e1:10:a5:70:4f:2e:d2:5a:9b: e3:51:f3:24:7e:39:1f:1b:46:d6:2a:6b:d7:17:aa: ef:b4:a3:b3:e1:52:61:3f:a3:95:61:2c:99:a2:9f: 3d:4c:06:34:3d:ec:80:74:98:88:c9:5b:15:1c:1c: 36:ba:df:43:55:21:3e:08:70:df:f8:c5:f7:b7:eb: cb:e4:7b:63:5e:c7:c1:55:d4:f3:c6:6b:f8:1c:83: c3:88:e2:b6:a4:38:83:c9:1f:c5:2e:1e:89:b3:d5: 75:b6:1d:7f:aa:fb:e6:f9:35:d9:20:4c:ac:f8:dc: 99:d8:0b:82:0e:fa:a8:a5:3d:5b:d0:85:8a:8c:fa: 51:79:9c:41:b3:94:c3:04:5e:3a:e4:78:9f:2f:78: de:2d:db:69:77:1d:e9:01:32:d6:9b:62:8d:a1:93: 7f:62:bc:16:09:b0:37:8b:6b:7f:05:7a:c7:d9:b6: d0:d2:f1:7b:6b:13:d5:a2:86:be:97:9f:e4:12:ac: 62:b4:be:d7:e1:7f:51:3d:8b:78:17:2c:7c:8a:d1: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6D:BE:1C:E7:09:8C:15:66:90:68:CD:5D:33:65:A8:36:66:9D:DA X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:fc:55:0c:f7:31:02:67:68:af:9b:02:b9:5e:71:08:40:60: a3:c8:67:37:9d:eb:4e:f9:07:ec:d0:76:dc:f1:5b:8c:fd:00: 33:45:22:df:fa:ea:0d:10:ba:54:49:50:90:00:0d:d3:3e:22: 37:89:78:21:34:a3:ea:25:78:4c:1c:10:7d:91:c4:a9:9c:c1: d9:87:e4:c1:46:4f:52:1c:32:10:87:7a:89:b1:cf:33:4f:2e: 21:3f:21:1c:f3:66:47:99:a4:38:a5:62:5e:9a:db:fb:86:05: 5e:5b:0a:a8:d5:ef:76:80:7e:71:8f:f6:aa:d5:04:bf:0e:18: aa:96:7c:92:13:ff:94:c7:16:3c:be:87:30:7e:f8:8a:6e:e4: c9:95:d7:c5:4b:1f:c0:9c:e6:04:f7:12:fa:11:65:4d:cc:57: d1:b1:35:07:06:99:78:f5:20:3f:5b:e3:fe:ba:c0:0e:71:af: 25:34:d7:4a:b6:e5:bd:03:fa:b5:18:de:34:59:e9:37:fb:35: 86:7c:f5:c6:55:fa:5a:3b:e1:3b:57:db:1a:27:3a:a8:44:f0: 34:5c:3c:ad:2a:0e:bc:b3:4f:1b:c4:17:66:5e:78:7c:74:4f: 67:c0:9d:52:33:b0:81:39:62:53:df:92:ef:56:0f:0f:8a:00: b3:33:af:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjYwNjEzMDUzMDE3WhcNMjYwNjIwMDUzMDE3WjAYMRYwFAYD VQQDEw02YTJjZWFlOS1mNTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GHoXm60Xf2PTrQgWyIfYd/meud0DYm38DKaljy47zsxdMoseQ2I+gxMXhmV IpF0Dq3hEKVwTy7SWpvjUfMkfjkfG0bWKmvXF6rvtKOz4VJhP6OVYSyZop89TAY0 PeyAdJiIyVsVHBw2ut9DVSE+CHDf+MX3t+vL5HtjXsfBVdTzxmv4HIPDiOK2pDiD yR/FLh6Js9V1th1/qvvm+TXZIEys+NyZ2AuCDvqopT1b0IWKjPpReZxBs5TDBF46 5HifL3jeLdtpdx3pATLWm2KNoZN/YrwWCbA3i2t/BXrH2bbQ0vF7axPVooa+l5/k EqxitL7X4X9RPYt4Fyx8itFykwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZtvhzn CYwVZpBozV0zZag2Zp3aMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY/xVDPcxAmdor5sCuV5xCEBgo8hnN53rTvkH7NB23PFbjP0AM0Ui3/rqDRC6 VElQkAAN0z4iN4l4ITSj6iV4TBwQfZHEqZzB2YfkwUZPUhwyEId6ibHPM08uIT8h HPNmR5mkOKViXprb+4YFXlsKqNXvdoB+cY/2qtUEvw4YqpZ8khP/lMcWPL6HMH74 im7kyZXXxUsfwJzmBPcS+hFlTcxX0bE1BwaZePUgP1vj/rrADnGvJTTXSrblvQP6 tRjeNFnpN/s1hnz1xlX6WjvhO1fbGic6qETwNFw8rSoOvLNPG8QXZl54fHRPZ8Cd UjOwgTliU9+S71YPD4oAszOv1g== -----END CERTIFICATE-----Generated at Sat Jun 13 14:55:02 2026 by rpki-client