$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: 5QAkDqOGWyfG9zZjZXfJlUWvIx2aoLxwA4WkSnHUObE= Subject key identifier: 19:38:3E:5F:37:2E:EC:3E:CF:0D:42:6F:28:4E:0B:4D:62:D9:CD:93 Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: A0 Signing time: Sat 23 Aug 2025 06:33:08 +0000 Manifest this update: Sat 23 Aug 2025 06:33:08 +0000 Manifest next update: Sat 30 Aug 2025 06:33:08 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: mCRDyqXnORyUQx30oaaV0Lbi8+LoMlJqOyctc31vQkg=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Aug 23 06:33:08 2025 GMT Not After : Aug 30 06:33:08 2025 GMT Subject: CN=68a960a4-bcf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:99:8a:22:24:fb:fd:e4:43:9a:33:1c:e5:7c: 63:e1:20:49:6d:5b:b6:16:02:34:b8:05:f1:cf:5b: de:07:7c:a0:eb:b1:95:a7:ec:4a:0d:7f:b0:e8:7f: 90:b5:59:8a:08:60:c3:2b:0e:0f:cc:c8:f9:7b:ef: 25:fc:14:64:ca:c7:7d:e4:3e:6b:b4:55:cd:f5:50: 5d:d3:99:14:12:57:f8:66:b5:4c:b7:d8:55:4f:dd: 34:9c:8d:d2:29:e7:43:48:b6:68:93:c7:f8:7b:f5: a2:3d:6b:e3:cf:f9:a1:53:34:8a:d3:bf:27:40:f5: 38:2f:52:4a:db:1f:65:8b:c3:0c:6b:dd:37:b3:98: af:d6:13:d6:58:b1:05:b2:95:56:81:03:7d:a8:d8: d4:6b:6c:a5:05:f8:6c:b1:62:38:49:02:b9:e7:27: fc:f6:98:50:4d:5a:28:cc:51:67:b7:ef:02:82:0e: 94:c3:13:81:b7:89:d5:22:f4:8d:6e:83:2b:7c:5e: 9f:cb:fb:6d:15:31:69:a1:7f:81:8f:3b:ae:9e:0e: 35:41:57:2b:87:02:8e:d8:62:75:a8:b6:0d:59:91: d1:14:20:a0:97:29:db:02:fd:67:ca:b1:31:42:5d: d5:74:ba:52:36:47:55:72:71:99:ad:14:d0:74:57: 28:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:38:3E:5F:37:2E:EC:3E:CF:0D:42:6F:28:4E:0B:4D:62:D9:CD:93 X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:bb:da:58:f3:06:c4:e7:50:94:ad:5c:a4:67:ec:d1:44:6e: 80:68:e1:6b:fd:7b:64:50:ee:e5:5d:0f:e9:97:ed:ce:49:be: 19:83:59:a3:c5:ec:e0:d9:2b:72:8d:28:3f:45:31:5f:8a:1b: 3d:02:c7:0b:d6:a8:e1:fe:de:a2:15:9a:f2:87:98:0e:2b:a2: 07:b3:5d:83:02:42:8b:19:c5:5e:56:0d:41:63:74:3e:73:de: 03:09:ed:a5:6c:70:69:05:14:93:8b:a2:81:63:f2:29:66:b0: 6b:13:b7:b5:7a:8e:a1:78:65:82:6b:4f:37:d2:4f:82:3f:9b: ea:b4:5c:1b:a3:92:2f:6e:a2:d7:a4:e8:44:1e:5e:32:12:8c: 84:02:1a:a1:10:68:7b:52:d3:49:c9:1f:e1:f6:4b:1d:d3:0f: 05:ed:50:f3:00:a3:20:b9:13:3b:b7:6f:59:7a:10:ff:15:5c: be:cf:3b:f9:a7:0d:40:43:e7:30:b4:50:a3:35:e3:35:02:fe: c1:ff:4d:8a:86:40:dd:97:ba:7e:ac:a8:a7:36:dc:2f:46:cc: 33:0e:cc:6c:dd:23:b5:e3:14:3e:5b:ac:cb:75:c9:d1:a6:10: 8b:d9:d2:31:be:02:1d:53:31:05:c7:36:36:2d:1a:10:ac:80: 7a:25:07:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjUwODIzMDYzMzA4WhcNMjUwODMwMDYzMzA4WjAYMRYwFAYD VQQDEw02OGE5NjBhNC1iY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45mKIiT7/eRDmjMc5Xxj4SBJbVu2FgI0uAXxz1veB3yg67GVp+xKDX+w6H+Q tVmKCGDDKw4PzMj5e+8l/BRkysd95D5rtFXN9VBd05kUElf4ZrVMt9hVT900nI3S KedDSLZok8f4e/WiPWvjz/mhUzSK078nQPU4L1JK2x9li8MMa903s5iv1hPWWLEF spVWgQN9qNjUa2ylBfhssWI4SQK55yf89phQTVoozFFnt+8Cgg6UwxOBt4nVIvSN boMrfF6fy/ttFTFpoX+Bjzuung41QVcrhwKO2GJ1qLYNWZHRFCCglynbAv1nyrEx Ql3VdLpSNkdVcnGZrRTQdFcoFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBk4Pl83 Luw+zw1CbyhOC01i2c2TMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7u9pY8wbE51CUrVykZ+zRRG6AaOFr/XtkUO7lXQ/pl+3OSb4Zg1mj xezg2StyjSg/RTFfihs9AscL1qjh/t6iFZryh5gOK6IHs12DAkKLGcVeVg1BY3Q+ c94DCe2lbHBpBRSTi6KBY/IpZrBrE7e1eo6heGWCa0830k+CP5vqtFwbo5IvbqLX pOhEHl4yEoyEAhqhEGh7UtNJyR/h9ksd0w8F7VDzAKMguRM7t29ZehD/FVy+zzv5 pw1AQ+cwtFCjNeM1Av7B/02KhkDdl7p+rKinNtwvRswzDsxs3SO14xQ+W6zLdcnR phCL2dIxvgIdUzEFxzY2LRoQrIB6JQcp -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:06 2025 by rpki-client