$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: 3ANva3r6Z/48/2gJ/qIsaBwmDcxyRrFFp0kq1J1UEEA= Subject key identifier: 67:88:11:29:13:FD:67:02:E3:59:9F:24:12:8A:B9:F5:14:E7:2A:7C Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: 0143 Signing time: Sun 05 Jul 2026 06:02:13 +0000 Manifest this update: Sun 05 Jul 2026 06:02:12 +0000 Manifest next update: Sun 12 Jul 2026 06:02:12 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: 2J0kc+TLp4AbvBUN34wrSJ3tYvdAmJGHC4d57fVhpN8=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: BGGfvsOq7RoK0GrG/EorBPAAePzcOp1fy3TkM7bq4uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 05:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Jul 5 06:02:12 2026 GMT Not After : Jul 12 06:02:12 2026 GMT Subject: CN=6a49f365-00c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:73:ed:13:bb:2d:a0:c0:9e:18:7c:54:35: 68:ac:b1:b1:6d:43:a7:be:7b:43:46:69:d9:2a:03: c5:85:5a:f2:1c:12:3f:ad:fa:dc:09:78:6c:2b:06: 22:b4:be:8b:80:cb:b6:36:e3:41:03:fe:21:cb:38: 6f:71:d1:44:6d:3e:f5:12:ac:cf:39:20:ad:8e:6d: ac:af:f4:4b:fc:47:56:3d:84:0c:ee:13:9b:d6:fb: 32:5c:25:93:fc:25:cd:49:a6:13:52:75:87:fe:5d: a8:99:c0:2b:50:28:c8:02:61:48:7c:1a:a7:bf:a1: fc:2b:94:16:a2:74:ee:70:d3:2e:a4:a2:e1:b0:92: 49:3c:6e:bb:25:70:70:54:e3:ac:98:49:3b:32:cd: 88:24:d3:a5:61:29:14:44:cf:4a:62:fa:1a:84:43: 6a:6f:3b:25:b9:0f:6e:52:d4:04:24:ed:43:74:1b: 4f:f2:e4:c8:a7:33:9d:31:67:f6:93:f0:6f:e2:e6: 5a:54:5c:1c:dc:3e:ff:6a:23:a1:78:48:90:4d:ee: 44:99:0f:a3:4e:f1:f0:7d:05:f2:92:d0:8f:8d:9d: e8:a7:dc:cb:16:67:d2:7d:68:cf:2e:96:6b:95:93: a0:8e:c2:06:97:29:26:44:87:91:87:3e:b4:d9:1e: 53:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:88:11:29:13:FD:67:02:E3:59:9F:24:12:8A:B9:F5:14:E7:2A:7C X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5a:c1:0f:36:b6:bb:f4:a6:8f:12:a3:77:02:1d:12:c0:f0: 32:4c:51:3a:a0:19:44:ca:de:3b:27:9d:83:a0:9a:94:3a:5e: 1d:87:cd:f4:9a:8d:f4:e1:5b:85:96:7c:e5:9a:34:b3:d8:19: 33:5c:07:a1:52:f1:13:14:cc:2d:f1:12:81:13:b9:f4:7a:a7: 73:4a:bb:ca:5d:51:47:56:bf:16:7f:df:16:6d:8b:e8:04:c1: 7b:f0:ec:ad:90:db:d6:49:83:90:47:90:3a:85:82:ae:ed:d9: e8:56:6d:f4:7c:f5:67:50:76:a9:72:f3:bc:35:f6:57:3f:8b: 72:11:b1:3e:77:71:18:18:cc:b8:a7:a1:01:64:62:10:12:1d: c9:59:4b:3a:89:29:50:42:4b:98:22:66:5b:17:bb:79:41:fa: f3:6a:ff:55:6f:5c:eb:a1:4f:b6:3c:a0:92:50:d4:21:10:6e: b2:83:0e:b7:b0:87:22:5d:04:81:cc:e5:c6:b2:7b:0e:01:53: e0:64:07:3d:3a:b5:3a:a6:56:f9:e4:92:cb:2a:47:e5:02:61: 69:f0:86:c1:c5:33:d1:bf:d8:0b:81:6e:d5:de:31:31:18:87: 85:95:1c:e9:36:95:1f:6d:d4:0d:9f:4d:f8:ba:59:0f:f5:58: c8:03:09:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjYwNzA1MDYwMjEyWhcNMjYwNzEyMDYwMjEyWjAYMRYwFAYD VQQDEw02YTQ5ZjM2NS0wMGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymJz7RO7LaDAnhh8VDVorLGxbUOnvntDRmnZKgPFhVryHBI/rfrcCXhsKwYi tL6LgMu2NuNBA/4hyzhvcdFEbT71EqzPOSCtjm2sr/RL/EdWPYQM7hOb1vsyXCWT /CXNSaYTUnWH/l2omcArUCjIAmFIfBqnv6H8K5QWonTucNMupKLhsJJJPG67JXBw VOOsmEk7Ms2IJNOlYSkURM9KYvoahENqbzsluQ9uUtQEJO1DdBtP8uTIpzOdMWf2 k/Bv4uZaVFwc3D7/aiOheEiQTe5EmQ+jTvHwfQXyktCPjZ3op9zLFmfSfWjPLpZr lZOgjsIGlykmRIeRhz602R5TjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGeIESkT /WcC41mfJBKKufUU5yp8MB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAilrBDza2u/SmjxKjdwIdEsDwMkxROqAZRMreOyedg6CalDpeHYfN9JqN9OFb hZZ85Zo0s9gZM1wHoVLxExTMLfESgRO59Hqnc0q7yl1RR1a/Fn/fFm2L6ATBe/Ds rZDb1kmDkEeQOoWCru3Z6FZt9Hz1Z1B2qXLzvDX2Vz+LchGxPndxGBjMuKehAWRi EBIdyVlLOokpUEJLmCJmWxe7eUH682r/VW9c66FPtjygklDUIRBusoMOt7CHIl0E gczlxrJ7DgFT4GQHPTq1OqZW+eSSyypH5QJhafCGwcUz0b/YC4Fu1d4xMRiHhZUc 6TaVH23UDZ9N+LpZD/VYyAMJVA== -----END CERTIFICATE-----Generated at Sun Jul 5 08:39:30 2026 by rpki-client