$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: 6tf2BAtdJDQ/Jmw123KbjtxmFmxqfr19eFRE82CDwtg= Subject key identifier: 79:26:54:20:1A:53:8E:18:6F:37:E0:26:D6:42:32:04:84:FC:70:65 Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 86 Signing time: Thu 03 Jul 2025 06:50:25 +0000 Manifest this update: Thu 03 Jul 2025 06:50:25 +0000 Manifest next update: Thu 10 Jul 2025 06:50:24 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: 4HWElL5USN1tthZY8abikkZ+O9oSb+ORZkSDaz33kZg=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Jul 3 06:50:25 2025 GMT Not After : Jul 10 06:50:24 2025 GMT Subject: CN=68662831-a7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:d4:67:dd:fd:4d:bf:cc:7e:bf:df:8e:01: 78:ca:5c:06:a8:3a:49:4c:cd:fa:dc:57:02:80:e0: 50:46:e8:73:bc:49:32:a5:db:38:c0:f3:b5:33:01: ac:44:16:bc:07:f4:7b:a4:2a:ff:77:97:8e:ef:3c: d7:e8:34:f3:69:cf:19:af:10:87:e6:c5:95:da:00: 25:2b:19:57:11:6a:4c:1a:21:43:ee:24:bd:5e:3f: da:c3:c4:47:96:11:56:43:aa:1f:55:5f:f2:8b:c2: 35:21:d9:2f:27:6c:54:63:66:38:d5:69:44:fb:5a: 55:a9:cc:6e:39:ee:7c:95:c8:12:30:c7:4d:d5:1f: f1:4a:00:58:ed:62:9d:62:b3:9b:b8:a1:27:d5:7f: 56:b2:8c:e2:d8:b4:f3:6b:0d:45:c6:c0:0a:5b:e8: c1:f6:83:42:33:85:6e:d0:52:82:5c:63:1f:25:ac: f4:32:c3:25:60:72:b1:1d:ca:93:9f:06:ea:38:86: 0d:67:06:0c:64:bd:2e:3b:18:46:55:c2:81:7c:fb: 0f:dc:5b:3b:90:9b:71:96:7d:4d:b2:fe:90:32:0e: 54:6a:f1:56:de:82:26:ac:a7:92:18:73:de:57:32: e4:a0:66:8c:bf:95:75:c1:7d:0e:84:64:52:f2:18: 84:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:26:54:20:1A:53:8E:18:6F:37:E0:26:D6:42:32:04:84:FC:70:65 X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:46:2b:af:cb:87:22:1b:ce:d2:75:11:17:de:fd:11:85:a8: ad:a1:0c:07:47:53:64:c6:10:4a:3c:af:9d:81:1b:8a:71:56: 59:b3:d6:cd:0b:b4:85:a4:a9:87:6f:b1:f3:90:b5:32:39:bd: ec:72:3f:7d:bb:84:1c:3b:c4:a5:cb:68:e5:5b:35:5d:5e:d8: 59:4a:f0:ae:31:98:54:08:0a:8b:c1:ea:ba:95:58:0b:54:58: fd:54:8a:fd:d0:68:32:fb:48:28:42:9b:64:94:18:c3:3d:8d: ec:c0:95:58:7a:d3:4c:4c:dc:7c:81:4f:eb:da:eb:65:99:a4: 9e:d1:68:90:08:38:8d:eb:03:a6:b0:db:bd:d7:50:f5:01:59: e7:b5:a9:57:e6:58:3a:ae:9f:b3:70:d7:0d:91:03:92:e0:d0: 98:89:01:37:cc:64:f6:cf:50:ef:78:f0:90:56:80:ad:fa:65: da:3e:d5:45:e7:bd:cc:d4:1d:b9:90:d6:87:a7:d9:f3:2e:d2: 46:8f:cc:92:68:da:19:93:0f:f4:e1:1c:ea:5e:42:1f:02:d5: d0:db:6e:ea:e2:67:7c:0a:13:96:02:86:bd:ba:86:e4:9b:bb: 5d:3f:c7:d0:35:12:5b:3f:3f:74:df:4d:76:44:1e:9c:86:8d: e0:41:f2:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjUwNzAzMDY1MDI1WhcNMjUwNzEwMDY1MDI0WjAYMRYwFAYD VQQDEw02ODY2MjgzMS1hN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkDUZ939Tb/Mfr/fjgF4ylwGqDpJTM363FcCgOBQRuhzvEkypds4wPO1MwGs RBa8B/R7pCr/d5eO7zzX6DTzac8ZrxCH5sWV2gAlKxlXEWpMGiFD7iS9Xj/aw8RH lhFWQ6ofVV/yi8I1IdkvJ2xUY2Y41WlE+1pVqcxuOe58lcgSMMdN1R/xSgBY7WKd YrObuKEn1X9Wsozi2LTzaw1FxsAKW+jB9oNCM4Vu0FKCXGMfJaz0MsMlYHKxHcqT nwbqOIYNZwYMZL0uOxhGVcKBfPsP3Fs7kJtxln1Nsv6QMg5UavFW3oImrKeSGHPe VzLkoGaMv5V1wX0OhGRS8hiE/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkmVCAa U44YbzfgJtZCMgSE/HBlMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpRiuvy4ciG87SdREX3v0RhaitoQwHR1NkxhBKPK+dgRuKcVZZs9bN C7SFpKmHb7HzkLUyOb3scj99u4QcO8Sly2jlWzVdXthZSvCuMZhUCAqLweq6lVgL VFj9VIr90Ggy+0goQptklBjDPY3swJVYetNMTNx8gU/r2utlmaSe0WiQCDiN6wOm sNu911D1AVnntalX5lg6rp+zcNcNkQOS4NCYiQE3zGT2z1DvePCQVoCt+mXaPtVF 573M1B25kNaHp9nzLtJGj8ySaNoZkw/04RzqXkIfAtXQ227q4md8ChOWAoa9uobk m7tdP8fQNRJbPz903012RB6cho3gQfJo -----END CERTIFICATE-----Generated at Fri Jul 4 22:04:52 2025 by rpki-client