$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: CVmCl5mlX2jsrmyKIQ/HOkHwBLT9KQ5ltyX9sm3Q2KM= Subject key identifier: 76:3A:B3:9B:D1:56:3D:77:A6:F1:D5:44:D1:3E:FA:08:16:61:BA:54 Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 014C Signing time: Thu 23 Jul 2026 06:53:07 +0000 Manifest this update: Thu 23 Jul 2026 06:53:07 +0000 Manifest next update: Thu 30 Jul 2026 06:53:07 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: +/SbWXlabP8dRrMjOn+mjRTeN9cDv+ilh6HzOcFhFmc=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: BGGfvsOq7RoK0GrG/EorBPAAePzcOp1fy3TkM7bq4uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Jul 23 06:53:07 2026 GMT Not After : Jul 30 06:53:07 2026 GMT Subject: CN=6a61ba53-4630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:90:a0:f3:ea:77:b6:12:e5:d9:c2:c8:60: d2:8c:95:a2:69:86:60:ae:45:86:0d:58:42:4b:44: 3f:f3:de:91:17:f2:bf:9f:21:bd:58:b6:5d:1a:4b: 3f:86:44:5f:fc:1a:9c:03:5d:49:22:7f:95:b8:40: 42:50:46:01:dc:05:01:d7:1d:ae:74:11:1c:2e:00: 2d:b9:59:d8:1f:ac:fd:4f:4d:25:37:12:5a:b8:6c: 9c:dd:fe:33:04:ec:c6:36:03:6a:5c:4a:c6:fb:bf: b1:68:2d:13:32:06:68:f8:0a:ae:05:b5:e8:8b:95: a9:70:c0:08:3d:d7:ba:64:4d:d4:df:98:8a:33:f1: 77:f8:84:7d:f3:7e:b6:3a:2e:68:94:5e:95:2a:73: cd:4d:c9:23:d1:72:57:cf:dc:52:83:d3:84:54:8e: 07:f1:91:2d:2d:93:15:44:2d:c1:49:00:82:1b:55: 4b:83:bb:18:5a:0f:1c:70:e0:06:46:9b:94:7b:42: 83:8b:5c:04:e3:74:3c:df:ad:43:56:bb:8f:82:7d: c2:5b:7b:63:1b:ed:55:5d:01:e4:92:9f:38:85:1f: 14:60:d6:36:26:9e:01:d1:f8:23:0a:ee:17:2c:db: 2c:ce:70:6e:d6:6b:26:68:5c:f8:f4:b6:b3:ca:90: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3A:B3:9B:D1:56:3D:77:A6:F1:D5:44:D1:3E:FA:08:16:61:BA:54 X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7f:db:95:a7:da:7c:27:1a:a3:3f:4f:bb:91:96:a6:68:66: 09:4b:c3:6f:65:fb:6e:f3:25:ae:e9:b2:48:8e:3a:8e:0a:ac: c9:75:77:e3:e7:15:c5:20:4c:f2:70:8d:27:c4:e1:9b:9a:c9: 81:25:66:32:9e:1d:67:ef:b2:76:27:5f:5c:e3:08:1c:c6:75: 94:e4:37:90:a1:04:56:fa:34:0e:57:f4:b3:db:f0:b6:55:8b: 8e:56:7d:d2:ef:dd:b8:ba:43:1e:f6:b6:d7:0d:4a:d3:02:72: 60:1a:40:b5:1e:db:ec:af:d1:96:f9:ce:7b:ca:33:9f:43:33: c1:53:8b:fc:9f:ee:ec:c8:d1:a2:e1:00:47:31:2f:9f:1c:fe: 16:07:3e:39:9e:88:03:63:24:05:7d:6d:7a:10:bd:4f:6d:2c: c7:89:0f:93:82:74:a6:25:3a:68:ca:8f:2e:39:39:df:cf:3a: c6:df:b9:50:22:aa:a0:9b:84:0e:2c:22:3a:cd:43:55:36:ad: e1:0c:dd:66:a8:9d:4b:07:27:ba:99:b9:9a:87:54:11:f3:88: ca:d3:ae:e2:c5:d3:46:25:d7:6e:96:7f:2f:f5:07:af:1d:7f: df:42:68:21:34:ab:37:bf:91:57:7f:9c:51:b5:91:1e:20:88: de:a9:04:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjYwNzIzMDY1MzA3WhcNMjYwNzMwMDY1MzA3WjAYMRYwFAYD VQQDEw02YTYxYmE1My00NjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWiQoPPqd7YS5dnCyGDSjJWiaYZgrkWGDVhCS0Q/896RF/K/nyG9WLZdGks/ hkRf/BqcA11JIn+VuEBCUEYB3AUB1x2udBEcLgAtuVnYH6z9T00lNxJauGyc3f4z BOzGNgNqXErG+7+xaC0TMgZo+AquBbXoi5WpcMAIPde6ZE3U35iKM/F3+IR98362 Oi5olF6VKnPNTckj0XJXz9xSg9OEVI4H8ZEtLZMVRC3BSQCCG1VLg7sYWg8ccOAG RpuUe0KDi1wE43Q8361DVruPgn3CW3tjG+1VXQHkkp84hR8UYNY2Jp4B0fgjCu4X LNssznBu1msmaFz49LazypDVDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHY6s5vR Vj13pvHVRNE++ggWYbpUMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG3/blafafCcaoz9Pu5GWpmhmCUvDb2X7bvMlrumySI46jgqsyXV34+cVxSBM 8nCNJ8Thm5rJgSVmMp4dZ++ydidfXOMIHMZ1lOQ3kKEEVvo0Dlf0s9vwtlWLjlZ9 0u/duLpDHva21w1K0wJyYBpAtR7b7K/RlvnOe8ozn0MzwVOL/J/u7MjRouEARzEv nxz+Fgc+OZ6IA2MkBX1tehC9T20sx4kPk4J0piU6aMqPLjk53886xt+5UCKqoJuE DiwiOs1DVTat4QzdZqidSwcnupm5modUEfOIytOu4sXTRiXXbpZ/L/UHrx1/30Jo ITSrN7+RV3+cUbWRHiCI3qkEKw== -----END CERTIFICATE-----Generated at Fri Jul 24 07:08:52 2026 by rpki-client