$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json) Hash identifier: fj0nMzmS/uySvE35v2JXdGsm3vXhWQuCbnGbYRTbAB8= Subject key identifier: FF:3D:A1:1C:D7:33:C3:67:24:79:20:F7:CA:72:69:25:7F:D4:1E:8F Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Certificate serial: 0B6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft Manifest number: 0B52 Signing time: Tue 22 Jul 2025 19:23:29 +0000 Manifest this update: Tue 22 Jul 2025 19:23:28 +0000 Manifest next update: Tue 29 Jul 2025 19:23:28 +0000 Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: ItgU/adYYSniGc0WMtFUYklG4L1+qo+Y3Ffc1fzpftM=) 2: 1F676C22068711EDA1C2070DC4F9AE02.roa (hash: /7INLjkCJxuGRBamYiwMgMuR9Yx5BJwn5CHWQ9lp1M4=) 3: FB4D7A105BC611EFA9919382C4F9AE02.roa (hash: eddZTpWlG2T9ATgQlQm2WB6FlpB3ZUxT2iZNYIcetK0=) 4: EE611404E51B11EF98150C30C4F9AE02.roa (hash: CWcGppa7/X2BEWOhZeYJBrVNg4CI1Gt4TP8k9AJmrTU=) 5: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: 6SPV2FX7Tph5ZmideN5WrWfiO8/8Sir95YP17tl87tY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 19:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Validity Not Before: Jul 22 19:23:28 2025 GMT Not After : Jul 29 19:23:28 2025 GMT Subject: CN=687fe530-3000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:c5:88:85:eb:85:7e:b6:99:28:81:5b:b0: 6c:8d:c0:12:10:48:7a:0d:f0:e5:10:8e:23:07:4b: 9b:8a:94:c5:b6:a9:a2:78:17:aa:2b:3f:fa:fe:2f: 46:03:e4:be:11:03:9c:b1:4e:99:89:c3:7e:a1:16: f6:26:53:11:ea:21:4c:72:6b:b4:6d:6d:fd:9c:fc: af:f2:48:77:50:60:6f:9f:ad:43:8f:b2:fc:81:57: bb:da:6c:88:01:e6:aa:86:8f:01:1f:4b:83:38:cb: 99:cf:96:88:2d:27:50:f3:71:29:cb:a8:cc:db:62: 70:d8:81:14:bc:ad:a6:33:c7:0d:f0:84:1b:30:64: ae:69:25:69:09:06:e6:a5:1a:2c:5a:54:f5:43:6e: a9:08:f6:02:3b:3d:bc:56:aa:29:99:87:c8:3c:64: a5:b8:32:18:d2:d8:5a:c3:90:3d:1f:7a:7f:98:4d: 0f:56:6f:51:36:34:f1:64:2c:9b:1e:d2:fa:8d:97: b5:e3:f1:e7:8f:4f:d6:ff:f7:85:61:65:a5:87:6b: 89:41:13:d0:fd:cb:9f:6f:18:ab:7c:4d:8c:fb:26: b1:14:76:2e:5a:a1:44:3d:79:07:24:86:73:ae:34: ef:f9:e2:1c:af:5a:53:ab:1e:37:d5:f4:35:88:73: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3D:A1:1C:D7:33:C3:67:24:79:20:F7:CA:72:69:25:7F:D4:1E:8F X509v3 Authority Key Identifier: keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ae:fd:1c:b7:71:7d:3d:f2:44:1c:d3:79:c1:96:56:be:32: 8e:3e:43:19:ba:ac:08:03:d7:05:70:87:75:e3:4e:47:25:af: dd:e5:e9:7c:46:d6:8f:be:21:5d:29:1f:56:af:dd:be:52:9f: f8:66:44:66:d4:24:8f:34:cd:4a:78:30:81:c1:53:02:a7:d0: 4b:ba:c5:f9:6f:fe:6c:b7:88:e1:e5:66:5e:99:72:85:0b:67: bb:85:b9:08:e2:4b:ff:d8:80:67:9d:86:6f:51:b5:8a:b9:87: bf:9b:93:65:27:4c:9a:b9:12:62:a7:05:14:e8:c6:41:d4:94: f1:af:93:34:50:aa:0e:67:58:75:8b:ea:ba:c4:f6:0e:35:8c: 09:de:30:5f:b7:dd:16:15:53:61:5c:fa:89:96:a5:11:b1:11: 95:f0:44:59:1c:fe:75:d3:4e:1e:b1:ba:1d:d6:e6:7c:89:cc: 88:36:70:3c:84:26:58:bd:f0:79:33:26:85:32:6b:06:e7:cc: 1e:3e:7b:e8:a5:6b:b2:a8:35:48:f7:0e:1a:03:53:be:cb:f1: 82:51:02:76:fb:f3:b1:be:37:26:88:9b:53:6f:e1:2a:30:6a: 13:28:c2:b5:7e:5c:1b:33:b5:0b:d2:79:b9:0b:f6:46:c0:fe: f4:a6:a0:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC RjZCMTIyQUUwHhcNMjUwNzIyMTkyMzI4WhcNMjUwNzI5MTkyMzI4WjAYMRYwFAYD VQQDEw02ODdmZTUzMC0zMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSnFiIXrhX62mSiBW7BsjcASEEh6DfDlEI4jB0ubipTFtqmieBeqKz/6/i9G A+S+EQOcsU6ZicN+oRb2JlMR6iFMcmu0bW39nPyv8kh3UGBvn61Dj7L8gVe72myI Aeaqho8BH0uDOMuZz5aILSdQ83Epy6jM22Jw2IEUvK2mM8cN8IQbMGSuaSVpCQbm pRosWlT1Q26pCPYCOz28VqopmYfIPGSluDIY0thaw5A9H3p/mE0PVm9RNjTxZCyb HtL6jZe14/Hnj0/W//eFYWWlh2uJQRPQ/cufbxirfE2M+yaxFHYuWqFEPXkHJIZz rjTv+eIcr1pTqx431fQ1iHN5TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP89oRzX M8NnJHkg98pyaSV/1B6PMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3 OFlZaUhScVpnbnlfYXhJcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWrv0ct3F9PfJEHNN5wZZWvjKOPkMZuqwIA9cFcId1405HJa/d5el8 RtaPviFdKR9Wr92+Up/4ZkRm1CSPNM1KeDCBwVMCp9BLusX5b/5st4jh5WZemXKF C2e7hbkI4kv/2IBnnYZvUbWKuYe/m5NlJ0yauRJipwUU6MZB1JTxr5M0UKoOZ1h1 i+q6xPYONYwJ3jBft90WFVNhXPqJlqURsRGV8ERZHP51004esbod1uZ8icyINnA8 hCZYvfB5MyaFMmsG58wePnvopWuyqDVI9w4aA1O+y/GCUQJ2+/OxvjcmiJtTb+Eq MGoTKMK1flwbM7UL0nm5C/ZGwP70pqAM -----END CERTIFICATE-----Generated at Wed Jul 23 02:31:19 2025 by rpki-client