$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: 3TUOvry+7r/fKHvj/3N5GCBXzd2c0pJNfSbxw7VyMaY= Subject key identifier: 14:F9:1C:DA:E4:C2:C7:12:85:38:97:76:E0:5C:9A:F0:38:95:ED:49 Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 011A Signing time: Fri 17 Apr 2026 05:33:10 +0000 Manifest this update: Fri 17 Apr 2026 05:33:09 +0000 Manifest next update: Fri 24 Apr 2026 05:33:09 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: Zn5zDGoKL+nDevZLlePpqiScJMabRbbZcITrl1voiz4=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: nW43K60KK0EIrSI+ECEkmAnBWOAIbX7kD/S3C7JYmRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Apr 17 05:33:09 2026 GMT Not After : Apr 24 05:33:09 2026 GMT Subject: CN=69e1c616-46ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:1e:bc:f0:cb:ba:f3:08:13:f7:41:16:70: b2:92:e7:54:78:c0:ae:ea:d6:f2:88:9a:f8:28:44: 24:b0:ff:97:fe:f4:f0:23:74:35:86:dc:ab:bf:6c: a9:8d:45:9b:5c:ec:74:0f:a3:b0:26:49:2f:e5:4f: c6:4e:e1:94:36:69:7c:7a:87:74:70:af:a1:b2:79: c2:68:b8:5e:54:b0:07:65:c1:1e:63:c3:15:f4:13: 3c:23:d8:30:ac:83:0f:29:cc:b9:22:ee:5e:56:82: c3:9d:ef:05:6c:7d:62:6b:b8:79:4b:44:35:e2:36: f9:c7:5a:c2:14:34:3b:96:c9:b0:fe:9d:8b:bc:92: a1:06:98:6d:fa:fc:b1:3a:a9:71:28:cd:f7:5c:01: 5e:15:ad:13:db:0e:2d:03:da:9e:bf:d4:d9:77:3a: 06:2d:a2:5c:b2:99:29:91:37:71:fd:de:bb:66:5b: d6:89:5e:96:a2:f3:19:af:bb:76:b2:49:f4:df:8d: 11:4e:86:41:06:cb:98:cb:b5:69:66:dc:9e:79:5a: 24:69:31:5b:ac:67:fa:06:a2:d9:43:71:74:af:d4: 48:9a:ac:8c:db:99:91:a9:f9:2c:74:af:32:6d:1c: ba:df:2f:a6:ff:4d:0d:eb:3e:e1:3a:6c:b5:15:f3: a4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F9:1C:DA:E4:C2:C7:12:85:38:97:76:E0:5C:9A:F0:38:95:ED:49 X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:5e:40:f3:50:08:06:5e:bf:76:03:6b:68:3e:2e:6a:56:09: 05:6c:dd:7b:67:7b:a0:56:cc:b6:37:ce:0e:8c:a7:cb:5d:76: fe:19:3f:9c:04:30:19:77:14:cf:13:60:07:70:74:94:3a:d6: c4:46:94:f2:be:03:cb:1e:1b:c2:aa:13:49:33:62:47:e5:91: fa:9f:fa:99:11:4c:bf:71:58:69:a3:32:dc:ba:93:3e:27:97: f7:45:d3:7f:0b:0c:0e:c3:8d:48:10:ae:a4:0a:16:9a:8d:6c: 10:04:e4:28:18:95:92:35:b4:ad:88:af:e1:f5:9a:0f:44:dc: 93:dc:3a:13:84:d8:cd:4b:b0:f1:42:cb:ba:f2:a9:c9:9a:0c: cd:01:a7:48:3f:b4:4e:a3:41:8f:c7:44:36:70:e9:04:fc:5c: bd:36:ff:44:d1:af:20:d7:d8:9a:2d:93:d8:a5:6f:5a:6f:75: 88:ba:67:13:a0:29:cc:de:37:a3:31:ad:b4:69:8a:be:95:d8: 3c:ae:40:a2:39:01:aa:cb:07:90:7e:e5:8b:cb:55:b8:4c:d5: 58:f8:d3:5d:8e:0f:0d:f0:3a:16:10:16:7d:72:ae:b2:e5:35: 2f:e7:9b:c3:5c:07:d1:5e:24:1d:48:40:99:3a:59:a8:4a:f4: d3:c0:ec:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjYwNDE3MDUzMzA5WhcNMjYwNDI0MDUzMzA5WjAYMRYwFAYD VQQDEw02OWUxYzYxNi00NmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsckevPDLuvMIE/dBFnCykudUeMCu6tbyiJr4KEQksP+X/vTwI3Q1htyrv2yp jUWbXOx0D6OwJkkv5U/GTuGUNml8eod0cK+hsnnCaLheVLAHZcEeY8MV9BM8I9gw rIMPKcy5Iu5eVoLDne8FbH1ia7h5S0Q14jb5x1rCFDQ7lsmw/p2LvJKhBpht+vyx OqlxKM33XAFeFa0T2w4tA9qev9TZdzoGLaJcspkpkTdx/d67ZlvWiV6WovMZr7t2 skn0340RToZBBsuYy7VpZtyeeVokaTFbrGf6BqLZQ3F0r9RImqyM25mRqfksdK8y bRy63y+m/00N6z7hOmy1FfOkkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBT5HNrk wscShTiXduBcmvA4le1JMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEV5A81AIBl6/dgNraD4ualYJBWzde2d7oFbMtjfODoyny112/hk/nAQwGXcU zxNgB3B0lDrWxEaU8r4Dyx4bwqoTSTNiR+WR+p/6mRFMv3FYaaMy3LqTPieX90XT fwsMDsONSBCupAoWmo1sEATkKBiVkjW0rYiv4fWaD0Tck9w6E4TYzUuw8ULLuvKp yZoMzQGnSD+0TqNBj8dENnDpBPxcvTb/RNGvINfYmi2T2KVvWm91iLpnE6ApzN43 ozGttGmKvpXYPK5AojkBqssHkH7li8tVuEzVWPjTXY4PDfA6FhAWfXKusuU1L+eb w1wH0V4kHUhAmTpZqEr008DsQQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:23:09 2026 by rpki-client