$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: 8iJKy2x/u8Ycb3PFSuPbxh1oK3hfW+7ta/m9Rqe4Pl4= Subject key identifier: E9:6F:08:DB:E5:53:EF:3C:5C:B4:C6:97:E1:A0:22:0A:CD:88:79:8B Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 010E Signing time: Wed 25 Mar 2026 05:12:48 +0000 Manifest this update: Wed 25 Mar 2026 05:12:47 +0000 Manifest next update: Wed 01 Apr 2026 05:12:47 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: DUFcUATEUPbNAL+tb6tJGH3xb+g0cUsemERwKAdy8Ps=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: nW43K60KK0EIrSI+ECEkmAnBWOAIbX7kD/S3C7JYmRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Mar 25 05:12:47 2026 GMT Not After : Apr 1 05:12:47 2026 GMT Subject: CN=69c36ed0-e23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:db:df:ed:df:ae:b4:5e:63:64:89:0e:fd: 23:7d:4a:e6:2d:b6:6c:e5:bc:66:44:59:1c:9f:7b: 21:26:11:fa:d1:b8:1f:02:cb:e4:22:6e:3c:f9:90: 0b:7b:20:98:d6:fe:a9:dc:e6:68:4f:c2:29:68:87: b9:54:a7:c5:1e:0a:1f:87:31:21:93:04:db:b5:c4: b2:b8:65:12:a2:9c:6d:07:65:08:fc:5b:e9:f8:74: a1:05:e8:76:74:92:0c:3f:43:31:40:cd:67:09:e9: 57:19:ee:cf:0a:71:48:f3:83:4b:3e:97:ae:13:2e: 47:38:65:15:43:96:cd:22:f7:38:c4:6c:f6:f2:f1: 49:b4:f9:f1:e0:04:2c:5d:f5:67:78:e9:fb:b0:2e: 9a:3b:10:84:56:c3:8b:b6:d5:ab:20:d3:02:aa:90: 6b:a3:01:65:b7:80:c3:21:33:62:81:2b:4b:99:25: dd:18:a5:13:1e:3b:23:82:ce:24:e6:ab:99:37:0c: 46:d4:10:07:f0:e6:a8:d9:86:9d:40:9c:98:55:9d: 88:69:3e:10:f5:40:6e:12:71:04:87:3c:44:73:70: c2:66:1c:df:5b:7f:53:fa:e3:0d:ce:b9:21:31:88: 62:6a:08:e0:24:8e:03:fc:13:cb:a5:6a:e4:7d:57: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6F:08:DB:E5:53:EF:3C:5C:B4:C6:97:E1:A0:22:0A:CD:88:79:8B X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f9:40:0d:6a:f8:8e:76:39:54:d6:25:f9:33:bf:05:0a:6d: 85:2b:de:64:73:31:54:98:2d:27:cf:06:c3:e8:6c:b7:a8:b4: 21:4e:47:28:dd:df:0a:20:10:b5:31:e9:8f:4f:65:f0:52:e7: 9a:34:bb:0f:72:4c:99:9a:77:ff:04:74:f6:96:e2:13:12:d1: 60:cc:54:8a:14:48:ea:09:e1:bc:0f:6d:ae:9c:51:e8:b9:e7: 96:fe:d1:1b:2d:9b:71:f7:1a:8b:ec:9a:43:22:f8:af:e0:d5: fe:ca:3c:0b:9c:f5:97:ee:15:99:12:e4:7d:1f:de:dd:9e:39: 7f:ce:28:03:47:40:bc:4b:c4:2e:34:d9:a0:d0:d1:d8:c6:93: 87:e7:c7:88:57:d0:10:c3:97:ef:22:1f:d2:21:37:71:7a:86: f8:ee:51:9e:b9:cd:fb:dd:86:47:b7:29:30:a5:37:e5:b1:11: 85:81:01:42:2a:d5:db:a6:ee:6b:9e:55:c1:f7:3a:fe:06:b1: ac:64:d8:9c:b1:8c:0a:8f:71:4a:52:5a:22:80:df:e1:97:e1: f5:96:f2:6e:d5:a6:5e:6f:40:4f:8e:44:be:d7:13:51:22:3e: bf:c4:96:2f:c3:f1:31:85:45:5e:eb:48:b1:cb:24:80:8d:ad: 64:df:6c:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjYwMzI1MDUxMjQ3WhcNMjYwNDAxMDUxMjQ3WjAYMRYwFAYD VQQDEw02OWMzNmVkMC1lMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mTb3+3frrReY2SJDv0jfUrmLbZs5bxmRFkcn3shJhH60bgfAsvkIm48+ZAL eyCY1v6p3OZoT8IpaIe5VKfFHgofhzEhkwTbtcSyuGUSopxtB2UI/Fvp+HShBeh2 dJIMP0MxQM1nCelXGe7PCnFI84NLPpeuEy5HOGUVQ5bNIvc4xGz28vFJtPnx4AQs XfVneOn7sC6aOxCEVsOLttWrINMCqpBrowFlt4DDITNigStLmSXdGKUTHjsjgs4k 5quZNwxG1BAH8Oao2YadQJyYVZ2IaT4Q9UBuEnEEhzxEc3DCZhzfW39T+uMNzrkh MYhiagjgJI4D/BPLpWrkfVc8pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOlvCNvl U+88XLTGl+GgIgrNiHmLMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHflADWr4jnY5VNYl+TO/BQpthSveZHMxVJgtJ88Gw+hst6i0IU5HKN3fCiAQ tTHpj09l8FLnmjS7D3JMmZp3/wR09pbiExLRYMxUihRI6gnhvA9trpxR6Lnnlv7R Gy2bcfcai+yaQyL4r+DV/so8C5z1l+4VmRLkfR/e3Z45f84oA0dAvEvELjTZoNDR 2MaTh+fHiFfQEMOX7yIf0iE3cXqG+O5RnrnN+92GR7cpMKU35bERhYEBQirV26bu a55Vwfc6/gaxrGTYnLGMCo9xSlJaIoDf4Zfh9ZbybtWmXm9AT45EvtcTUSI+v8SW L8PxMYVFXutIscskgI2tZN9syg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:10 2026 by rpki-client