$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: 9hjhUn+9Ij8CGSkfnGDppOPJCgWiq0UUEVNpeFQZuyY= Subject key identifier: 8B:98:AB:54:FF:35:87:5D:74:70:F7:28:DE:24:39:B2:81:B0:C5:A6 Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 6B Signing time: Tue 13 May 2025 06:08:44 +0000 Manifest this update: Tue 13 May 2025 06:08:44 +0000 Manifest next update: Tue 20 May 2025 06:08:44 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: 42IkBx+B6X1fyjPSpeRfRJ6Cwk/Z7JZf7XvwqRPqgck=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 2ZAkM7vZMjuIOO1XUvMMKIbKIXWfM6dsysj8W72Zb84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: May 13 06:08:44 2025 GMT Not After : May 20 06:08:44 2025 GMT Subject: CN=6822e1ec-ece7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:bb:64:43:c6:37:e0:63:79:85:44:59:9d: 3a:d9:06:00:a9:4f:59:78:12:52:c0:93:9f:68:cc: 0d:87:8b:fe:a6:75:a5:ea:e0:f1:2f:73:43:ea:e3: 43:38:06:7c:95:77:d3:47:53:5b:6b:46:7b:2e:b9: 6d:1e:bf:c6:21:eb:7e:52:43:90:42:d3:c3:fc:f8: f7:3e:ad:55:b1:64:e0:7c:0a:18:9f:89:9d:de:5e: 35:17:74:77:b1:de:0b:49:a1:2f:07:d6:96:34:06: 9d:02:c1:0f:f6:ab:ca:fe:fb:8c:74:3e:9e:f6:17: 38:6c:9c:41:7b:be:5e:da:db:76:fc:2c:c2:9d:91: d9:39:5c:d5:f8:6a:61:24:17:23:cc:14:99:5f:b7: f1:54:a4:a8:1e:c0:02:78:92:64:bf:4d:54:9c:55: 36:d8:ef:47:06:7d:77:0d:a6:27:b7:56:b1:e3:2d: 37:ba:60:a1:3b:24:8f:4b:27:3e:82:96:8a:47:14: 89:8a:57:68:c1:d9:4e:01:84:44:72:40:a0:9d:cb: d6:e2:c3:4c:93:cd:37:58:ec:fa:27:db:43:40:51: 82:65:02:fa:73:3e:81:1d:94:46:74:b5:ca:d1:c5: 53:56:08:2a:d3:28:c8:bb:aa:7a:54:4b:24:bc:1e: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:98:AB:54:FF:35:87:5D:74:70:F7:28:DE:24:39:B2:81:B0:C5:A6 X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:54:c0:b0:6b:a2:6c:ba:6d:08:13:a5:03:d6:78:ae:d5:83: da:10:83:12:fb:85:de:8d:93:40:53:24:b7:72:f0:f5:87:eb: 42:29:6f:87:7a:13:96:6f:7a:9f:b4:bc:2b:4e:bb:a9:c0:de: fe:79:aa:89:e8:f3:f1:e0:1d:6e:3d:bb:4a:86:c7:3a:24:2f: 46:d4:e8:56:bc:c2:bf:12:ea:96:01:c7:ae:41:d2:99:ab:81: 70:0a:b3:78:a9:06:b7:e4:db:65:30:61:8a:26:81:1c:88:e8: 26:f1:f3:6c:d4:86:5f:d4:f1:fe:96:ec:79:f9:28:cc:6c:9c: ed:5c:9c:5a:22:43:48:9b:78:d7:8b:cc:97:73:eb:aa:fd:bc: 75:d1:7e:83:e1:b5:3a:7a:f3:e7:a8:3d:0f:0d:cf:2c:4e:5b: 7e:b8:5d:36:3d:24:e7:98:17:7b:2e:d4:82:2a:16:46:ea:6f: 06:af:13:d3:9c:6b:a4:43:b0:e6:c3:fe:05:f4:58:a5:65:96: 04:3a:d7:e7:4e:ec:48:68:d7:44:f7:6f:5c:8a:0d:f4:f7:ac: cf:1a:c0:37:2d:1c:f6:83:b7:2a:f1:e3:fd:a0:cd:b2:55:7c: 62:48:c4:ca:c7:99:9e:0c:ae:ac:e3:fa:a1:c1:dd:d4:94:1c: 74:44:fd:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REQyMzExMC8GA1UEBRMoNjY4NDUzRkY1NjkxODFGRTFBRUFBMDYzN0U0ODI3NzQy MDExMkM2NDAeFw0yNTA1MTMwNjA4NDRaFw0yNTA1MjAwNjA4NDRaMBgxFjAUBgNV BAMTDTY4MjJlMWVjLWVjZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3CLtkQ8Y34GN5hURZnTrZBgCpT1l4ElLAk59ozA2Hi/6mdaXq4PEvc0Pq40M4 BnyVd9NHU1trRnsuuW0ev8Yh635SQ5BC08P8+Pc+rVWxZOB8ChifiZ3eXjUXdHex 3gtJoS8H1pY0Bp0CwQ/2q8r++4x0Pp72FzhsnEF7vl7a23b8LMKdkdk5XNX4amEk FyPMFJlft/FUpKgewAJ4kmS/TVScVTbY70cGfXcNpie3VrHjLTe6YKE7JI9LJz6C lopHFImKV2jB2U4BhERyQKCdy9biw0yTzTdY7Pon20NAUYJlAvpzPoEdlEZ0tcrR xVNWCCrTKMi7qnpUSyS8HrURAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi5irVP81 h110cPco3iQ5soGwxaYwHwYDVR0jBBgwFoAUZoRT/1aRgf4a6qBjfkgndCARLGQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURERDIzL0VBNzUwQkVDOTEw QzExRUZBNTQwRkMwRkM0RjlBRTAyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWm9SVF8xYVJnZjRhNnFCamZrZ25kQ0FSTEdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE RDIzL0VBNzUwQkVDOTEwQzExRUZBNTQwRkMwRkM0RjlBRTAyL1pvUlRfMWFSZ2Y0 YTZxQmpma2duZENBUkxHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJUwLBromy6bQgTpQPWeK7Vg9oQgxL7hd6Nk0BTJLdy8PWH60Ipb4d6 E5Zvep+0vCtOu6nA3v55qono8/HgHW49u0qGxzokL0bU6Fa8wr8S6pYBx65B0pmr gXAKs3ipBrfk22UwYYomgRyI6Cbx82zUhl/U8f6W7Hn5KMxsnO1cnFoiQ0ibeNeL zJdz66r9vHXRfoPhtTp68+eoPQ8NzyxOW364XTY9JOeYF3su1IIqFkbqbwavE9Oc a6RDsObD/gX0WKVllgQ61+dO7Eho10T3b1yKDfT3rM8awDctHPaDtyrx4/2gzbJV fGJIxMrHmZ4Mrqzj+qHB3dSUHHRE/X8= -----END CERTIFICATE-----Generated at Tue May 13 11:29:42 2025 by rpki-client