$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json) Hash identifier: cEUlozk2aZa/Y7fRa2gTrp5wmUt1Q1oG4AvR+3MaMRA= Subject key identifier: 0D:EE:31:D6:A5:DB:CD:20:6E:E1:96:22:51:56:CE:2F:16:DE:1B:8B Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Certificate serial: 0A82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft Manifest number: 0A6E Signing time: Sun 12 May 2024 20:22:09 +0000 Manifest this update: Sun 12 May 2024 20:22:08 +0000 Manifest next update: Sun 19 May 2024 20:22:08 +0000 Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: I0Xhh0wYURRsmuLRVfleyY1NAKSFDY+PlGEnaX8ZAxo=) 2: 1F676C22068711EDA1C2070DC4F9AE02.roa (hash: yfj4cCJ84XsUYHNOyoWRHXqNvKqSh8l5Af0qn9H7CQ4=) 3: 05A8B38482C011EE850C4F63C4F9AE02.roa (hash: LMoB8I1euv+63gPLnLVXZXmudKifbK3frD9P1mZeL3M=) 4: 10FEE4F0822B11EE878EB774C4F9AE02.roa (hash: w/dzgjupaJpsdCRQIkHrWGKFEnUxvUL6WmOlJLrDpCU=) 5: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: 9Wsge6uN8/kWPU23/DSAiXCE5pnA2uN+jA1/GNMc3O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2690 (0xa82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Validity Not Before: May 12 20:22:08 2024 GMT Not After : May 19 20:22:08 2024 GMT Subject: CN=664124f0-5eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:84:ad:72:fa:51:09:b1:c0:af:fe:4b:82: 33:d3:e2:38:fa:ed:14:7c:30:79:c9:1f:d7:ca:c8: 7c:1d:5a:7a:5c:54:fa:e0:01:b4:77:65:bc:a6:72: a6:4d:a5:10:14:3b:ae:78:52:48:04:63:d1:6f:ba: 33:1f:58:3d:20:dd:61:30:11:32:41:53:13:44:69: 38:27:7a:cc:fa:c5:84:44:47:22:63:79:56:fb:50: 25:4f:ef:83:d0:ea:b0:4b:ae:1d:24:a2:77:43:95: 73:7c:aa:75:3b:c3:ce:73:74:52:5e:d0:cc:4d:96: 57:d4:09:45:c0:09:9a:02:b3:9b:32:a6:b9:6c:e7: ff:fc:83:b7:d3:a7:80:5c:e0:12:d7:85:bd:c6:e4: e8:3c:6e:0c:86:50:15:e1:48:81:8e:aa:80:45:1b: 9d:4c:90:be:00:ae:a8:fc:33:51:28:77:7f:7a:6a: cc:0e:da:74:3c:83:33:55:ec:57:ac:53:d7:3e:3e: b5:5b:b3:02:1a:b5:22:8b:fe:d2:dc:b8:55:af:38: 06:78:0b:db:7a:b7:61:31:2d:5a:87:44:71:28:e5: f9:55:8e:e0:9a:2e:6a:b1:ee:9c:68:58:60:50:de: c7:10:85:f7:b2:9a:1c:1c:dc:f4:0b:bd:73:90:f6: bc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EE:31:D6:A5:DB:CD:20:6E:E1:96:22:51:56:CE:2F:16:DE:1B:8B X509v3 Authority Key Identifier: keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0b:26:bf:d1:99:7a:d8:b8:56:1f:fb:51:43:fa:a3:a5:6a: c6:ce:45:c3:af:d5:03:63:b9:8a:b6:7c:38:df:54:ce:c9:d3: d3:2c:6f:1b:d8:db:06:65:d3:35:91:18:db:71:b5:13:c5:59: ea:a1:a4:68:df:c6:fc:00:dc:1a:e0:a4:ac:15:95:d2:fc:92: d4:96:aa:9e:33:af:27:7e:84:04:c9:a4:f1:68:db:4e:6c:47: b4:21:92:72:2a:37:cb:02:6e:e2:65:5c:69:b6:b6:a0:04:55: 92:12:8b:19:cc:44:b7:5c:0e:d3:f6:56:b4:4a:2f:ad:3f:ec: cb:4d:3b:da:19:ab:15:4d:0c:4d:c0:1e:d5:c0:b3:77:3a:42: 90:a7:06:59:d7:3c:35:97:59:58:fe:6c:2d:53:5c:8e:84:79: 19:ce:c3:8d:36:a2:1c:b8:cb:5b:6a:ef:f7:12:e0:82:c7:9e: 7d:ee:61:76:e2:2c:17:49:e3:43:cf:a6:f4:ce:73:9c:8d:da: d4:aa:7f:08:fe:63:87:59:f2:4a:a5:f2:c3:66:22:23:09:d3: 71:5d:03:dc:21:a5:1e:75:6e:e6:db:53:55:ea:aa:54:97:58: 9b:18:a2:65:e6:72:2e:ff:1b:9f:f8:60:e2:ca:b3:f1:4a:9b: 9b:7f:0e:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC RjZCMTIyQUUwHhcNMjQwNTEyMjAyMjA4WhcNMjQwNTE5MjAyMjA4WjAYMRYwFAYD VQQDEw02NjQxMjRmMC01ZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvy+ErXL6UQmxwK/+S4Iz0+I4+u0UfDB5yR/Xysh8HVp6XFT64AG0d2W8pnKm TaUQFDuueFJIBGPRb7ozH1g9IN1hMBEyQVMTRGk4J3rM+sWEREciY3lW+1AlT++D 0OqwS64dJKJ3Q5VzfKp1O8POc3RSXtDMTZZX1AlFwAmaArObMqa5bOf//IO306eA XOAS14W9xuToPG4MhlAV4UiBjqqARRudTJC+AK6o/DNRKHd/emrMDtp0PIMzVexX rFPXPj61W7MCGrUii/7S3LhVrzgGeAvberdhMS1ah0RxKOX5VY7gmi5qse6caFhg UN7HEIX3spocHNz0C71zkPa8fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3uMdal 280gbuGWIlFWzi8W3huLMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3 OFlZaUhScVpnbnlfYXhJcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeCya/0Zl62LhWH/tRQ/qjpWrGzkXDr9UDY7mKtnw431TOydPTLG8b 2NsGZdM1kRjbcbUTxVnqoaRo38b8ANwa4KSsFZXS/JLUlqqeM68nfoQEyaTxaNtO bEe0IZJyKjfLAm7iZVxptragBFWSEosZzES3XA7T9la0Si+tP+zLTTvaGasVTQxN wB7VwLN3OkKQpwZZ1zw1l1lY/mwtU1yOhHkZzsONNqIcuMtbau/3EuCCx5597mF2 4iwXSeNDz6b0znOcjdrUqn8I/mOHWfJKpfLDZiIjCdNxXQPcIaUedW7m21NV6qpU l1ibGKJl5nIu/xuf+GDiyrPxSpubfw52 -----END CERTIFICATE-----Generated at Sun May 12 22:40:06 2024 by rpki-client on console-ams.rpki-client.org