$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: TFi88ioRjeFbJhn2MLdRQrEfG62PCmMind4a4IqnIhw= Subject key identifier: 1E:A7:C7:A6:A3:8A:98:52:37:AC:19:76:4E:B6:7F:5D:E3:58:BE:63 Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: C5 Signing time: Wed 05 Nov 2025 06:03:58 +0000 Manifest this update: Wed 05 Nov 2025 06:03:58 +0000 Manifest next update: Wed 12 Nov 2025 06:03:58 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: 7NHY8lHJzuRi5Fp/W9k49R1P7CELm2eVIUhNqH57Uwc=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Nov 5 06:03:58 2025 GMT Not After : Nov 12 06:03:58 2025 GMT Subject: CN=690ae8ce-caa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:8f:fb:92:36:ee:39:cd:ec:a6:3b:3d:7c: 84:73:b5:09:ac:e6:87:a2:2a:a1:b3:7a:37:e9:f0: 5c:04:d2:75:2c:e7:6f:fa:cc:73:c8:9f:8e:79:d1: 72:6f:d8:7a:c4:8e:fa:9e:48:f6:96:21:49:cf:13: 66:84:49:96:b3:a6:f7:2a:b3:23:98:71:52:4b:cb: 53:8f:43:81:2e:9b:2e:45:c9:c3:2f:8a:be:f3:01: 20:75:ee:db:64:a6:93:22:2d:67:23:e2:a7:e5:79: 9e:47:40:28:00:4e:f4:85:79:61:e8:09:f2:a6:cd: ca:d9:1d:fd:49:78:fe:18:e3:4f:7b:af:84:63:5f: 38:22:4d:53:e1:af:2a:4b:89:44:31:4d:d6:7b:3d: be:ad:c2:d9:79:82:6a:49:9a:ee:eb:68:c6:b0:0d: fe:d7:e7:2c:30:6d:75:9c:7b:aa:a6:37:6f:c7:3f: 90:a9:7f:c8:ef:a7:ce:88:68:fb:13:3e:db:c6:b7: e2:32:d5:12:bf:68:6f:50:40:b8:cf:d2:f7:d7:30: df:95:97:98:e3:2c:8f:08:1c:7a:9c:96:78:0f:86: af:ec:b2:54:39:f0:3b:64:39:b0:42:7b:70:44:64: 11:8a:1e:28:97:9e:06:14:d1:72:3e:0e:76:04:7f: dd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A7:C7:A6:A3:8A:98:52:37:AC:19:76:4E:B6:7F:5D:E3:58:BE:63 X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:06:68:c6:5a:a6:4e:f0:13:45:a3:45:b5:ed:ce:03:dd:9b: 90:c7:36:c6:14:3c:7d:21:58:97:56:87:33:74:b7:15:6d:d0: a8:9a:40:7d:7e:75:e6:78:19:f5:ee:a5:6e:07:6b:f7:3e:fc: 10:68:3c:3d:6f:43:02:d2:49:59:ee:34:c5:42:14:ab:0d:1c: 75:e8:18:ca:2f:53:2c:aa:66:2d:e3:6f:70:6a:dc:5c:74:5d: a9:80:c3:12:a4:25:b7:68:03:80:13:8a:09:6e:ea:6e:c1:c3: 11:3e:7d:22:12:89:6f:ed:99:7d:73:61:db:66:00:44:7b:8d: 6a:37:b9:d2:d8:56:18:e9:0e:c6:8c:ea:99:aa:d6:be:a6:f3: bd:09:82:5e:08:8c:4b:c1:0f:a9:40:32:1b:a7:7b:82:cc:58: f8:ce:d5:bd:66:d4:20:73:d2:65:2b:d0:41:01:98:ca:6b:39: 7a:df:08:ae:38:76:27:28:0f:f9:72:8e:93:ce:84:8c:a0:86: fc:19:5d:b3:6a:f7:72:8e:49:22:de:d7:2a:d3:ab:36:a5:b2: 1a:a4:a0:e6:c9:10:7a:f0:77:6f:03:81:92:ea:e2:4b:a8:db: 0a:6f:e1:2f:7a:3f:21:ac:a6:81:90:c7:54:cc:18:04:09:c0: f9:b3:3b:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjUxMTA1MDYwMzU4WhcNMjUxMTEyMDYwMzU4WjAYMRYwFAYD VQQDEw02OTBhZThjZS1jYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtW6P+5I27jnN7KY7PXyEc7UJrOaHoiqhs3o36fBcBNJ1LOdv+sxzyJ+OedFy b9h6xI76nkj2liFJzxNmhEmWs6b3KrMjmHFSS8tTj0OBLpsuRcnDL4q+8wEgde7b ZKaTIi1nI+Kn5XmeR0AoAE70hXlh6Anyps3K2R39SXj+GONPe6+EY184Ik1T4a8q S4lEMU3Wez2+rcLZeYJqSZru62jGsA3+1+csMG11nHuqpjdvxz+QqX/I76fOiGj7 Ez7bxrfiMtUSv2hvUEC4z9L31zDflZeY4yyPCBx6nJZ4D4av7LJUOfA7ZDmwQntw RGQRih4ol54GFNFyPg52BH/dGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6nx6aj iphSN6wZdk62f13jWL5jMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8BmjGWqZO8BNFo0W17c4D3ZuQxzbGFDx9IViXVoczdLcVbdComkB9 fnXmeBn17qVuB2v3PvwQaDw9b0MC0klZ7jTFQhSrDRx16BjKL1MsqmYt429watxc dF2pgMMSpCW3aAOAE4oJbupuwcMRPn0iEolv7Zl9c2HbZgBEe41qN7nS2FYY6Q7G jOqZqta+pvO9CYJeCIxLwQ+pQDIbp3uCzFj4ztW9ZtQgc9JlK9BBAZjKazl63wiu OHYnKA/5co6TzoSMoIb8GV2zavdyjkki3tcq06s2pbIapKDmyRB68HdvA4GS6uJL qNsKb+Evej8hrKaBkMdUzBgECcD5sztS -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:15 2025 by rpki-client