$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: ZuhkePf0+pWaJCJYEBHQ7kqkc3vYX7Dxzm4j9Cbf14Y= Subject key identifier: 15:F1:B9:8E:85:6D:B2:9F:A1:13:58:88:0F:F9:ED:4A:0B:1D:5F:9F Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 016B Signing time: Mon 21 Sep 2026 04:57:33 +0000 Manifest this update: Mon 21 Sep 2026 04:57:33 +0000 Manifest next update: Mon 28 Sep 2026 04:57:33 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: y5EBXmxqTi7wOpIUSjTW8zZxC/7I9jNJFj8Gg6qae6k=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: BGGfvsOq7RoK0GrG/EorBPAAePzcOp1fy3TkM7bq4uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Sep 21 04:57:33 2026 GMT Not After : Sep 28 04:57:33 2026 GMT Subject: CN=6ab0b93d-9ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:f8:97:97:2f:a1:c2:b8:a2:0b:d7:58:aa: 09:d7:9f:27:00:ff:f3:64:51:b8:a8:db:8f:da:d2: f7:69:c4:c9:c3:10:ef:72:f6:66:c5:45:c4:76:9b: f1:f0:36:3f:bf:b9:39:fa:ee:02:2e:f0:5e:a7:f6: 20:60:78:b6:5e:39:a3:6f:70:fe:6f:d3:1a:51:77: f1:be:c6:e1:60:05:1c:9e:03:29:22:4a:7b:92:80: 97:69:1d:dd:2a:d4:9b:9a:37:48:98:5c:91:9f:da: 1e:9a:f6:fe:8b:22:95:51:3e:41:c4:cc:f1:59:c7: a5:2a:f4:1a:54:59:57:75:3c:68:7a:65:51:4b:15: 11:31:f9:ad:9d:49:cb:67:92:17:9d:a2:ba:f2:3f: e4:99:cd:2b:27:65:57:27:c2:99:d4:10:c8:61:d4: d7:a2:ec:47:b1:02:b5:62:7f:d8:8f:97:ff:29:cd: f5:41:0d:f6:4d:be:cc:59:99:38:6f:44:66:89:c7: bf:a5:a2:47:8e:99:c5:f4:69:c1:3f:23:8a:2e:73: d2:85:3d:6c:71:15:b8:7e:be:02:23:81:84:b7:ec: 7b:69:4f:75:c3:c0:b5:02:f3:df:fd:e6:b5:94:ca: b7:ad:63:31:6f:91:9e:02:54:01:ae:a5:70:ba:69: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F1:B9:8E:85:6D:B2:9F:A1:13:58:88:0F:F9:ED:4A:0B:1D:5F:9F X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:72:65:51:3a:f5:cd:15:6e:2a:ef:cd:e9:1c:74:a7:3d:b5: 75:cd:bb:a2:97:d0:5a:01:e0:46:ce:99:24:00:de:07:dd:92: 6f:67:e2:c6:f8:3d:b9:4b:c9:c4:89:0a:1d:25:9e:85:3d:34: b6:25:2e:be:35:b9:c8:3d:7c:ee:06:83:bb:e1:89:d4:39:66: 3c:0a:88:4d:73:a6:ba:36:30:15:9b:77:9a:fa:59:58:67:93: 24:6c:67:2e:f5:42:15:ba:9f:03:7e:0e:07:c5:b3:59:4c:56: 2f:b5:43:21:67:ed:a0:e2:20:02:54:6c:0e:7b:0c:ec:16:88: b8:bc:da:4a:90:90:0e:61:72:f5:eb:f0:11:db:dd:c8:fa:cd: be:8b:51:68:85:9f:d1:29:b9:5c:df:c8:e7:25:b2:74:c2:e5: d6:e0:90:ca:82:15:f9:86:ee:f1:17:67:fb:41:41:d9:d8:04: 38:df:27:44:1e:17:a4:ac:48:1f:21:98:f1:3c:d0:56:46:3e: 73:cb:9b:f3:00:ec:09:5c:2c:39:d7:8b:6f:1d:66:7a:7d:bf: 51:14:b8:9f:54:23:ca:61:7b:0b:12:11:c7:da:fe:e8:72:f0: 86:3e:0f:ca:6f:ba:b2:fe:9e:09:c3:20:1f:15:c6:ee:92:81: 18:4a:49:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjYwOTIxMDQ1NzMzWhcNMjYwOTI4MDQ1NzMzWjAYMRYwFAYD VQQDEw02YWIwYjkzZC05ZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/74l5cvocK4ogvXWKoJ158nAP/zZFG4qNuP2tL3acTJwxDvcvZmxUXEdpvx 8DY/v7k5+u4CLvBep/YgYHi2Xjmjb3D+b9MaUXfxvsbhYAUcngMpIkp7koCXaR3d KtSbmjdImFyRn9oemvb+iyKVUT5BxMzxWcelKvQaVFlXdTxoemVRSxURMfmtnUnL Z5IXnaK68j/kmc0rJ2VXJ8KZ1BDIYdTXouxHsQK1Yn/Yj5f/Kc31QQ32Tb7MWZk4 b0Rmice/paJHjpnF9GnBPyOKLnPShT1scRW4fr4CI4GEt+x7aU91w8C1AvPf/ea1 lMq3rWMxb5GeAlQBrqVwumkzKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBXxuY6F bbKfoRNYiA/57UoLHV+fMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARnJlUTr1zRVuKu/N6Rx0pz21dc27opfQWgHgRs6ZJADeB92Sb2fixvg9uUvJ xIkKHSWehT00tiUuvjW5yD187gaDu+GJ1DlmPAqITXOmujYwFZt3mvpZWGeTJGxn LvVCFbqfA34OB8WzWUxWL7VDIWftoOIgAlRsDnsM7BaIuLzaSpCQDmFy9evwEdvd yPrNvotRaIWf0Sm5XN/I5yWydMLl1uCQyoIV+Ybu8Rdn+0FB2dgEON8nRB4XpKxI HyGY8TzQVkY+c8ub8wDsCVwsOdeLbx1men2/URS4n1QjymF7CxIRx9r+6HLwhj4P ym+6sv6eCcMgHxXG7pKBGEpJtA== -----END CERTIFICATE-----Generated at Wed Sep 23 05:59:12 2026 by rpki-client