$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: QI9RLDwGyIEm30+pZADSWLFCWWPYo508AChUm/Yjd80= Subject key identifier: DC:B9:2E:B4:CC:1E:58:F3:39:8F:72:C2:C0:BD:6A:2B:43:AB:9D:E9 Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: FB Signing time: Thu 19 Feb 2026 04:38:02 +0000 Manifest this update: Thu 19 Feb 2026 04:38:01 +0000 Manifest next update: Thu 26 Feb 2026 04:38:01 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: K/VEfkXVdk9Xs6b2bw9ftl+4B2gqkNOjR3KRO8fs5T8=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Feb 2026 04:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Feb 19 04:38:01 2026 GMT Not After : Feb 26 04:38:01 2026 GMT Subject: CN=699693aa-bf84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:47:32:75:7e:39:12:b8:e6:43:73:04:f8: 89:ab:4b:76:c8:61:fa:fe:58:1b:67:b3:40:c8:1d: e6:7c:d3:fd:26:ab:c8:3c:f1:4c:3b:7d:9f:3e:62: ec:8d:ed:8b:d5:d2:5d:61:33:f8:f4:a0:d1:70:1e: 17:38:c7:aa:5d:49:3a:c3:d9:7f:49:1c:19:6a:c6: 41:4c:01:13:6b:5f:50:1a:84:75:61:1b:ce:87:7b: 97:69:8a:ec:33:e4:fe:1f:88:70:db:59:65:bb:3e: 25:8c:18:3a:56:53:0e:7f:60:bf:df:dc:f0:2e:c0: b3:3c:3e:72:70:01:93:02:45:35:ad:77:84:53:3e: 02:77:f3:66:93:a8:69:b7:f0:be:eb:f0:5c:04:26: fc:31:32:35:97:51:6a:a9:d5:c4:e2:46:c1:4a:71: 65:be:84:e5:8c:8f:02:a2:2b:ba:ab:ca:f9:ec:b3: 36:f7:a8:2c:ae:2d:56:53:8e:87:a8:6a:bc:26:68: 1b:08:19:2c:bd:34:7e:07:4e:49:88:d4:27:98:45: 0e:2e:30:3b:82:1e:35:9e:fb:14:46:c5:c6:06:ef: 1b:60:a9:21:1f:8d:e8:94:38:f6:e2:b7:27:3d:14: 24:1f:c8:6e:2b:28:fa:c5:8a:20:bb:5a:40:27:0e: eb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B9:2E:B4:CC:1E:58:F3:39:8F:72:C2:C0:BD:6A:2B:43:AB:9D:E9 X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6f:c3:19:ce:ae:9a:41:19:dc:05:9d:8d:9a:85:21:78:2b: ee:3e:88:82:07:da:d6:fd:71:a0:ba:20:8f:46:41:09:e4:d5: 5b:85:d4:57:9e:45:48:d8:4f:57:12:52:de:86:78:3a:c6:1b: 03:71:17:f7:7a:08:79:82:23:bc:e2:1c:f7:88:65:ca:89:37: 5d:b1:1b:c3:87:3d:5f:86:57:92:e3:69:d4:a4:c5:06:7e:c4: a7:17:2f:0a:3d:1a:2a:81:4e:1e:93:84:bc:a7:fd:56:47:7a: e0:9a:9a:93:3a:4a:f5:5b:e3:56:a7:56:ba:01:8b:d7:55:c3: 95:3b:a8:55:59:62:38:b4:24:08:2a:3e:a2:bb:f1:59:56:db: f8:ad:34:b1:58:ba:04:42:df:66:6e:45:08:0f:b1:00:7b:c1: 21:7e:43:7d:08:95:44:ed:3a:41:dc:88:66:1a:9a:04:26:51: b6:b0:96:4c:3a:f7:3a:cf:c1:c1:82:96:0c:62:b6:f4:e2:e7: aa:77:fd:aa:f6:99:51:38:1c:64:06:40:f7:dd:11:a2:3c:38: 48:aa:e3:32:84:2b:0f:92:01:8b:8f:5f:93:c2:66:5c:7e:45: cf:47:3d:a2:0e:1a:4e:a6:2b:ec:26:a1:ab:f6:ab:92:e2:0e: 08:28:dd:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjYwMjE5MDQzODAxWhcNMjYwMjI2MDQzODAxWjAYMRYwFAYD VQQDDA02OTk2OTNhYS1iZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19FHMnV+ORK45kNzBPiJq0t2yGH6/lgbZ7NAyB3mfNP9JqvIPPFMO32fPmLs je2L1dJdYTP49KDRcB4XOMeqXUk6w9l/SRwZasZBTAETa19QGoR1YRvOh3uXaYrs M+T+H4hw21lluz4ljBg6VlMOf2C/39zwLsCzPD5ycAGTAkU1rXeEUz4Cd/Nmk6hp t/C+6/BcBCb8MTI1l1FqqdXE4kbBSnFlvoTljI8Coiu6q8r57LM296gsri1WU46H qGq8JmgbCBksvTR+B05JiNQnmEUOLjA7gh41nvsURsXGBu8bYKkhH43olDj24rcn PRQkH8huKyj6xYogu1pAJw7rOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy5LrTM HljzOY9ywsC9aitDq53pMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+b8MZzq6aQRncBZ2NmoUheCvuPoiCB9rW/XGguiCPRkEJ5NVbhdRX nkVI2E9XElLehng6xhsDcRf3egh5giO84hz3iGXKiTddsRvDhz1fhleS42nUpMUG fsSnFy8KPRoqgU4ek4S8p/1WR3rgmpqTOkr1W+NWp1a6AYvXVcOVO6hVWWI4tCQI Kj6iu/FZVtv4rTSxWLoEQt9mbkUID7EAe8EhfkN9CJVE7TpB3IhmGpoEJlG2sJZM Ovc6z8HBgpYMYrb04ueqd/2q9plROBxkBkD33RGiPDhIquMyhCsPkgGLj1+TwmZc fkXPRz2iDhpOpivsJqGr9quS4g4IKN0M -----END CERTIFICATE-----Generated at Thu Feb 19 18:18:03 2026 by rpki-client