$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: E7ASEYd6eSJSNi1AWPsdIbc2KvJdzQwy7hbwE/u0g2o= Subject key identifier: F6:F2:08:C3:F6:8C:DD:BB:7E:19:AC:06:16:06:41:94:D9:A0:7D:3C Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 7B Signing time: Wed 11 Jun 2025 06:09:28 +0000 Manifest this update: Wed 11 Jun 2025 06:09:28 +0000 Manifest next update: Wed 18 Jun 2025 06:09:28 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: s0+HdXnVa9HfKW0HLyPEZI2iVnYhGx4tig6l2OyW7O0=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Jun 11 06:09:28 2025 GMT Not After : Jun 18 06:09:28 2025 GMT Subject: CN=68491d98-2c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:59:f8:82:9c:71:1b:07:e1:e4:61:80:68: 10:7a:ea:8e:6f:48:1d:2a:e3:4f:a8:81:65:a0:aa: 9d:b2:0b:a4:7a:e5:d1:e8:13:6c:78:9b:eb:96:a7: 4b:07:23:c4:80:a8:31:e9:69:84:70:e1:b6:ed:bf: a6:92:a6:b1:e3:2f:8f:b5:22:7c:7e:10:06:1e:fa: 6f:d6:7d:57:58:99:87:d3:8a:a5:1e:12:8d:13:30: c3:55:37:a7:92:e3:c5:b3:8e:46:5a:33:1b:ef:45: 1a:66:58:c2:95:ce:1b:83:b0:06:d8:e8:53:46:fc: 19:e5:4a:18:34:a7:f1:38:79:99:46:4e:b8:9d:49: fd:26:38:d2:82:c8:de:6f:62:89:58:9c:98:1e:a2: fb:37:60:c6:7d:53:0a:ae:78:39:7b:98:15:20:19: ea:4d:04:e6:c4:42:9f:90:5c:a6:a8:46:89:62:a3: 23:d8:4b:15:d5:3d:91:1d:82:8e:60:b6:52:5f:80: 04:de:32:bc:46:b3:74:cd:5d:31:87:3e:2b:7d:e2: 41:35:bd:cb:9c:8d:85:03:58:27:7b:e2:6d:a6:86: 2e:20:df:d0:0a:95:2f:3f:28:63:d3:eb:2a:20:f0: 5a:b2:3f:68:08:9d:0c:23:c1:32:a9:c7:02:b0:f1: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F2:08:C3:F6:8C:DD:BB:7E:19:AC:06:16:06:41:94:D9:A0:7D:3C X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:cd:6c:1a:b1:27:4d:86:7b:73:92:12:f5:4c:cf:32:13:2d: 61:02:da:27:48:7f:ea:70:fe:43:b6:d2:a5:83:e4:91:1a:6a: a5:5b:e4:bc:ce:62:1c:97:f8:d4:ec:74:bf:d7:4d:65:b9:5e: 01:07:f5:c6:7b:01:c2:16:a8:29:d4:bd:d9:e6:34:b6:f5:73: 93:67:27:73:2a:14:73:51:a8:60:0d:f1:79:55:c1:23:11:e9: 7e:78:25:3b:3f:21:64:4c:0f:70:f7:a7:73:b9:ee:67:54:9a: af:38:2c:a6:b1:41:59:50:b2:af:bc:ca:69:27:f4:dd:cc:ae: f4:4e:41:60:0b:1b:fc:79:d8:59:7e:7d:c7:3c:ac:ce:f7:4b: 24:62:16:fa:a5:eb:45:e2:25:f3:6d:65:f0:16:17:ed:6e:ae: b1:a5:11:63:85:c6:00:51:db:fc:8e:9b:6d:4e:ed:f8:11:49: ae:3a:89:63:a9:ca:f8:05:30:35:b0:68:8c:46:5b:08:ac:8c: 63:d2:ab:b6:e8:d2:39:af:3d:fe:e1:8f:55:0a:18:a0:a0:8e: 94:b7:d9:73:4f:b3:b6:a0:03:da:ae:9a:42:6a:28:9a:31:c2: 1f:b6:97:70:8b:2f:87:2b:67:6c:2a:39:9e:5a:e1:1a:ee:2f: 91:c2:25:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REQyMzExMC8GA1UEBRMoNjY4NDUzRkY1NjkxODFGRTFBRUFBMDYzN0U0ODI3NzQy MDExMkM2NDAeFw0yNTA2MTEwNjA5MjhaFw0yNTA2MTgwNjA5MjhaMBgxFjAUBgNV BAMTDTY4NDkxZDk4LTJjNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBuVn4gpxxGwfh5GGAaBB66o5vSB0q40+ogWWgqp2yC6R65dHoE2x4m+uWp0sH I8SAqDHpaYRw4bbtv6aSprHjL4+1Inx+EAYe+m/WfVdYmYfTiqUeEo0TMMNVN6eS 48WzjkZaMxvvRRpmWMKVzhuDsAbY6FNG/BnlShg0p/E4eZlGTridSf0mONKCyN5v YolYnJgeovs3YMZ9UwqueDl7mBUgGepNBObEQp+QXKaoRolioyPYSxXVPZEdgo5g tlJfgATeMrxGs3TNXTGHPit94kE1vcucjYUDWCd74m2mhi4g39AKlS8/KGPT6yog 8FqyP2gInQwjwTKpxwKw8RXJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9vIIw/aM 3bt+GawGFgZBlNmgfTwwHwYDVR0jBBgwFoAUZoRT/1aRgf4a6qBjfkgndCARLGQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURERDIzL0VBNzUwQkVDOTEw QzExRUZBNTQwRkMwRkM0RjlBRTAyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWm9SVF8xYVJnZjRhNnFCamZrZ25kQ0FSTEdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE RDIzL0VBNzUwQkVDOTEwQzExRUZBNTQwRkMwRkM0RjlBRTAyL1pvUlRfMWFSZ2Y0 YTZxQmpma2duZENBUkxHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIHNbBqxJ02Ge3OSEvVMzzITLWEC2idIf+pw/kO20qWD5JEaaqVb5LzO YhyX+NTsdL/XTWW5XgEH9cZ7AcIWqCnUvdnmNLb1c5NnJ3MqFHNRqGAN8XlVwSMR 6X54JTs/IWRMD3D3p3O57mdUmq84LKaxQVlQsq+8ymkn9N3MrvROQWALG/x52Fl+ fcc8rM73SyRiFvql60XiJfNtZfAWF+1urrGlEWOFxgBR2/yOm21O7fgRSa46iWOp yvgFMDWwaIxGWwisjGPSq7bo0jmvPf7hj1UKGKCgjpS32XNPs7agA9qumkJqKJox wh+2l3CLL4crZ2wqOZ5a4RruL5HCJWk= -----END CERTIFICATE-----Generated at Thu Jun 12 16:06:04 2025 by rpki-client