$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: fq0loH56GPtABav3b8imrjb24lX1bALcvNhMHmLBByU= Subject key identifier: 42:3E:1C:5C:BE:C8:33:72:20:95:E0:E2:AD:72:B5:9B:3F:FD:64:5C Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: BD Signing time: Sun 19 Oct 2025 09:06:49 +0000 Manifest this update: Sun 19 Oct 2025 09:06:49 +0000 Manifest next update: Sun 26 Oct 2025 09:06:49 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: wgPsW2odxeE5WfnLBAoDaJip+zxpweVldhHOHD+A1uo=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Oct 19 09:06:49 2025 GMT Not After : Oct 26 09:06:49 2025 GMT Subject: CN=68f4aa29-ad40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3b:e7:7e:89:cb:18:d0:d7:52:b2:55:94:98: 99:a3:6d:bb:d9:a2:29:02:f5:e1:64:41:cc:53:b6: 9e:ca:92:34:7b:3f:0c:6e:f6:7e:1b:6f:e6:a1:9b: 0a:f7:ec:31:19:25:e3:7d:aa:2f:a2:19:db:fb:fc: fb:af:25:31:5a:43:79:9b:1b:ef:53:f3:b9:08:dd: 50:8a:d8:df:0c:07:54:bb:09:aa:df:f9:c0:52:61: e5:11:96:8b:4e:b0:7f:a7:55:97:0a:e8:9a:ba:de: c2:d4:a9:b5:bb:91:10:de:dc:ed:ed:1e:10:36:00: 14:b1:00:56:18:44:b5:68:01:bb:a2:ca:25:14:52: 4c:fb:7a:ad:7e:c1:77:d9:14:1b:1b:4f:e0:dd:02: 5b:bf:ea:31:98:ce:f6:64:d1:5d:1e:21:57:ea:69: 9d:34:15:4c:eb:c9:83:95:63:39:47:ec:0b:96:fc: 06:f4:f6:ba:9f:6b:4e:00:3d:a8:97:b0:c8:ab:f3: ec:35:3d:14:b9:f4:ce:c8:95:86:69:bf:9c:c5:f1: e2:04:b5:d7:09:2a:04:f3:d9:92:50:7b:41:28:36: 70:27:45:f6:18:c8:6a:80:d3:d2:ae:48:c5:85:c2: 27:b7:2d:ab:65:8b:73:51:39:d2:b5:0e:ad:88:9a: 83:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3E:1C:5C:BE:C8:33:72:20:95:E0:E2:AD:72:B5:9B:3F:FD:64:5C X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c2:86:13:df:64:7d:43:a9:eb:ac:27:b6:e9:62:80:7c:a0: af:cb:22:13:31:9f:dc:cb:4e:cd:b1:82:a7:57:96:74:4b:e3: 24:6e:eb:73:80:ef:9d:67:78:1d:a7:a2:d7:1d:cd:3b:62:ce: 53:eb:12:f1:99:3f:3e:32:6b:86:b7:04:dd:39:c1:d9:db:72: ca:dd:dd:48:be:ee:81:e5:ba:bb:f8:24:66:56:aa:c0:cb:da: 2e:3a:e3:55:7a:88:7f:12:73:c5:0a:3e:a1:e4:68:87:25:b6: d8:d2:6e:85:6c:88:7d:bc:88:35:23:0c:55:77:20:84:f4:90: 5f:9c:3a:b0:3b:12:8f:08:5c:56:5f:f9:11:72:71:03:f0:f3: 30:e5:df:37:d0:04:39:71:63:61:50:70:b6:b7:9b:61:54:2e: d6:15:23:98:d6:9e:10:92:bc:e5:97:65:ec:70:dd:c5:17:8f: 7a:df:01:fa:6b:33:16:ca:09:ac:9e:e3:e0:e6:55:d5:fe:a2: 2c:67:01:70:3d:be:7e:05:09:b1:3e:6e:30:3d:45:33:d5:85: 98:7f:1b:96:ca:48:1d:e8:26:e4:1b:14:4b:fd:12:99:ca:45: 8f:ca:b7:fe:09:fd:21:af:50:68:64:af:b1:f0:13:64:3b:57: e9:f7:90:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjUxMDE5MDkwNjQ5WhcNMjUxMDI2MDkwNjQ5WjAYMRYwFAYD VQQDEw02OGY0YWEyOS1hZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jvnfonLGNDXUrJVlJiZo2272aIpAvXhZEHMU7aeypI0ez8MbvZ+G2/moZsK 9+wxGSXjfaovohnb+/z7ryUxWkN5mxvvU/O5CN1QitjfDAdUuwmq3/nAUmHlEZaL TrB/p1WXCuiaut7C1Km1u5EQ3tzt7R4QNgAUsQBWGES1aAG7osolFFJM+3qtfsF3 2RQbG0/g3QJbv+oxmM72ZNFdHiFX6mmdNBVM68mDlWM5R+wLlvwG9Pa6n2tOAD2o l7DIq/PsNT0UufTOyJWGab+cxfHiBLXXCSoE89mSUHtBKDZwJ0X2GMhqgNPSrkjF hcInty2rZYtzUTnStQ6tiJqDUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEI+HFy+ yDNyIJXg4q1ytZs//WRcMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAewoYT32R9Q6nrrCe26WKAfKCvyyITMZ/cy07NsYKnV5Z0S+Mkbutz gO+dZ3gdp6LXHc07Ys5T6xLxmT8+MmuGtwTdOcHZ23LK3d1Ivu6B5bq7+CRmVqrA y9ouOuNVeoh/EnPFCj6h5GiHJbbY0m6FbIh9vIg1IwxVdyCE9JBfnDqwOxKPCFxW X/kRcnED8PMw5d830AQ5cWNhUHC2t5thVC7WFSOY1p4Qkrzll2XscN3FF4963wH6 azMWygmsnuPg5lXV/qIsZwFwPb5+BQmxPm4wPUUz1YWYfxuWykgd6CbkGxRL/RKZ ykWPyrf+Cf0hr1BoZK+x8BNkO1fp95Aa -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:18 2025 by rpki-client