$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: LtGG9YZ9SBQ7AcskiacwxcIpxF65iKlShL25Zf07VOU= Subject key identifier: E2:BF:84:11:97:3C:34:0B:72:39:05:8B:B0:E3:7A:9C:E6:2D:AD:5E Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 7A Signing time: Mon 09 Jun 2025 05:44:38 +0000 Manifest this update: Mon 09 Jun 2025 05:44:37 +0000 Manifest next update: Mon 16 Jun 2025 05:44:37 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: EolGqCqqe5Stbq6JrQPLi9lN3fwnOHAUVN6ePhp+Q6w=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 05:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Jun 9 05:44:37 2025 GMT Not After : Jun 16 05:44:37 2025 GMT Subject: CN=684674c5-d8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b9:65:60:39:1c:11:8b:7c:cb:c1:bd:84:cd: 1c:be:a2:64:6a:c9:a0:57:ac:ae:f7:b8:64:f3:e0: 7f:4a:a8:0c:e2:78:21:a8:f3:1f:15:5f:d6:83:a6: 70:9c:72:c3:1c:90:80:22:14:35:c4:4b:d0:c8:d4: b1:ae:4b:97:f7:49:6f:e6:ac:65:6e:a3:ac:49:62: 5f:cd:cf:2c:61:76:03:81:98:9c:ef:fa:6c:4d:e5: a0:4c:38:d9:cb:5e:7e:19:b6:15:16:97:3c:c4:94: fb:da:af:76:fb:c8:f7:17:29:46:84:54:05:2a:cc: 6e:1a:d3:10:45:3c:ac:b7:33:3a:cd:44:33:bc:f3: 1f:36:df:18:52:74:04:2f:79:38:ea:49:16:d5:c9: 4e:1c:90:98:5b:9a:34:a2:70:db:1a:04:9c:13:78: 39:51:aa:54:be:59:4f:da:d8:10:b0:7a:9d:9e:51: ed:02:91:13:8e:8c:2c:b3:f3:57:fe:f0:5c:28:85: 6e:28:9f:61:ab:a6:5b:74:73:62:c9:84:f3:1e:5d: 93:54:4e:22:74:2b:e8:50:4b:0c:56:7e:ab:a3:af: 84:e2:c1:ba:b7:f1:24:62:c8:a1:6c:6c:f1:84:7b: 75:0a:d3:62:66:be:25:22:32:6b:4d:eb:99:cf:a0: de:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BF:84:11:97:3C:34:0B:72:39:05:8B:B0:E3:7A:9C:E6:2D:AD:5E X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:df:e0:05:e0:55:a0:e7:bf:18:10:9b:aa:8a:d4:1e:17:b6: 60:61:96:12:64:59:b2:de:17:57:96:12:61:96:23:09:4c:c0: 4a:74:40:8a:0f:21:35:e6:32:d8:69:fd:6f:cf:04:3e:40:e8: a9:7a:2e:e4:f3:35:2e:77:58:04:00:47:10:60:6c:c6:5e:6e: 6c:68:46:ba:ce:37:a1:82:38:69:cd:ec:e1:77:d0:be:d4:ce: 0e:27:d5:2a:75:91:a3:81:68:19:52:d2:b7:83:43:0d:34:60: 2e:81:9b:d6:d6:0b:77:f7:dd:6b:87:2b:e0:7c:79:8d:b0:c8: 89:06:4e:9a:83:83:d5:c6:08:61:ca:20:ec:ef:68:98:7b:e1: d0:ac:7d:7c:c8:82:7b:5f:66:03:db:15:ec:61:68:7f:6a:94: 84:43:76:25:e1:65:f6:6c:81:60:07:64:8f:76:c8:36:bb:2f: 3c:3b:10:c8:4b:9f:19:4b:8e:41:2f:08:c9:98:f0:b1:60:6c: 3a:d3:80:8b:0c:94:9d:86:1a:7c:22:27:87:79:58:c9:88:58: 8d:c8:45:d8:67:7d:fa:18:a3:69:29:88:20:da:d5:3a:34:98: 67:4d:3d:36:46:f8:5c:8c:1d:5f:d6:a3:6b:23:f5:00:ef:b1: 56:10:8a:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REQyMzExMC8GA1UEBRMoNjY4NDUzRkY1NjkxODFGRTFBRUFBMDYzN0U0ODI3NzQy MDExMkM2NDAeFw0yNTA2MDkwNTQ0MzdaFw0yNTA2MTYwNTQ0MzdaMBgxFjAUBgNV BAMTDTY4NDY3NGM1LWQ4ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfuWVgORwRi3zLwb2EzRy+omRqyaBXrK73uGTz4H9KqAzieCGo8x8VX9aDpnCc csMckIAiFDXES9DI1LGuS5f3SW/mrGVuo6xJYl/NzyxhdgOBmJzv+mxN5aBMONnL Xn4ZthUWlzzElPvar3b7yPcXKUaEVAUqzG4a0xBFPKy3MzrNRDO88x823xhSdAQv eTjqSRbVyU4ckJhbmjSicNsaBJwTeDlRqlS+WU/a2BCwep2eUe0CkROOjCyz81f+ 8FwohW4on2Grplt0c2LJhPMeXZNUTiJ0K+hQSwxWfqujr4Tiwbq38SRiyKFsbPGE e3UK02JmviUiMmtN65nPoN6tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4r+EEZc8 NAtyOQWLsON6nOYtrV4wHwYDVR0jBBgwFoAUZoRT/1aRgf4a6qBjfkgndCARLGQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURERDIzL0VBNzUwQkVDOTEw QzExRUZBNTQwRkMwRkM0RjlBRTAyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWm9SVF8xYVJnZjRhNnFCamZrZ25kQ0FSTEdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE RDIzL0VBNzUwQkVDOTEwQzExRUZBNTQwRkMwRkM0RjlBRTAyL1pvUlRfMWFSZ2Y0 YTZxQmpma2duZENBUkxHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIHf4AXgVaDnvxgQm6qK1B4XtmBhlhJkWbLeF1eWEmGWIwlMwEp0QIoP ITXmMthp/W/PBD5A6Kl6LuTzNS53WAQARxBgbMZebmxoRrrON6GCOGnN7OF30L7U zg4n1Sp1kaOBaBlS0reDQw00YC6Bm9bWC3f33WuHK+B8eY2wyIkGTpqDg9XGCGHK IOzvaJh74dCsfXzIgntfZgPbFexhaH9qlIRDdiXhZfZsgWAHZI92yDa7Lzw7EMhL nxlLjkEvCMmY8LFgbDrTgIsMlJ2GGnwiJ4d5WMmIWI3IRdhnffoYo2kpiCDa1To0 mGdNPTZG+FyMHV/Wo2sj9QDvsVYQilE= -----END CERTIFICATE-----Generated at Mon Jun 9 23:41:34 2025 by rpki-client