$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json) Hash identifier: OGfH7551sE1ywPNz2r4KE8vh1Fb2x8x/tAb5J+wh51g= Subject key identifier: 3D:4F:C0:15:EA:93:85:20:8E:35:57:83:AF:C4:DB:ED:61:CF:A0:E4 Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Certificate serial: 0B52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft Manifest number: 0B37 Signing time: Fri 30 May 2025 19:23:28 +0000 Manifest this update: Fri 30 May 2025 19:23:27 +0000 Manifest next update: Fri 06 Jun 2025 19:23:27 +0000 Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: aR+TusHqCG6lI61L/kh1K9NlALOSKxMR4uJvFOzZHTg=) 2: 1F676C22068711EDA1C2070DC4F9AE02.roa (hash: /7INLjkCJxuGRBamYiwMgMuR9Yx5BJwn5CHWQ9lp1M4=) 3: FB4D7A105BC611EFA9919382C4F9AE02.roa (hash: eddZTpWlG2T9ATgQlQm2WB6FlpB3ZUxT2iZNYIcetK0=) 4: EE611404E51B11EF98150C30C4F9AE02.roa (hash: CWcGppa7/X2BEWOhZeYJBrVNg4CI1Gt4TP8k9AJmrTU=) 5: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: 6SPV2FX7Tph5ZmideN5WrWfiO8/8Sir95YP17tl87tY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2898 (0xb52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Validity Not Before: May 30 19:23:27 2025 GMT Not After : Jun 6 19:23:27 2025 GMT Subject: CN=683a05b0-85ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ff:cd:13:4e:fa:0b:2b:71:4f:fe:70:76:cb: ec:cd:e7:15:e3:3f:6e:b7:4a:93:98:1d:46:22:e2: 69:fb:d6:3c:c1:9e:93:a1:62:31:74:15:18:48:3c: 06:d3:6d:fe:d5:ab:54:1f:67:27:01:e7:a7:30:8a: 80:29:68:90:34:0c:b2:ea:47:a0:d3:96:5e:c2:e8: b3:3d:8b:2a:a3:46:eb:59:f4:2a:2d:82:87:c6:61: 89:5f:a8:82:cb:49:c4:5a:53:e1:73:f1:28:d3:93: 4f:a6:71:32:b7:79:c3:f5:38:3c:57:fd:38:3d:52: f4:3f:95:af:c4:62:c7:69:5f:3e:7f:7f:06:51:ed: 4b:44:70:ae:68:84:a5:9c:7c:e9:14:7c:77:83:f4: c4:b6:cb:68:2e:59:2f:bc:87:04:c9:6a:6e:a0:9c: 07:75:ea:18:fa:7f:f7:d1:18:2d:73:9f:8b:98:33: 6a:c3:ad:b1:50:67:75:25:d4:ff:93:76:75:d8:ab: 42:50:e6:bd:67:4b:30:44:be:03:25:1f:25:d4:60: 02:07:f3:7c:c4:98:3d:6f:6e:52:77:8d:30:42:97: 34:e6:29:81:d0:fb:83:25:b0:51:24:a3:82:47:9e: 65:f8:f8:78:f9:f2:db:2c:d7:22:6e:4b:8a:74:5c: ca:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4F:C0:15:EA:93:85:20:8E:35:57:83:AF:C4:DB:ED:61:CF:A0:E4 X509v3 Authority Key Identifier: keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:46:a2:3a:d1:ba:b1:d8:4b:e2:c5:99:f5:ab:25:76:66:dc: 51:dc:74:29:0f:1b:f8:c1:1f:07:a4:c4:cc:0d:e3:79:86:b2: 51:f9:a7:3e:50:ea:1f:43:61:20:10:a1:22:7a:78:74:e5:2f: f7:c2:3f:a4:70:8e:a1:0d:82:14:71:a4:70:56:04:04:40:84: 3e:77:98:d7:7e:c5:67:57:76:70:4c:0f:9c:d5:d8:da:47:7e: b3:a4:83:c7:db:30:a0:97:a7:53:72:66:17:98:6d:6d:47:02: ab:af:f6:51:8c:3c:62:16:af:6c:80:be:47:cd:ce:b7:11:98: 2a:1c:d7:3e:2e:f9:8c:b9:87:1c:90:be:d8:ae:cf:3c:c0:b9: 63:b9:2b:90:a8:c0:60:23:d3:a4:85:6a:ee:d2:4d:f0:25:55: 77:4c:6b:b2:9c:3b:23:8d:a2:99:f2:1b:d8:8f:65:0b:17:c8: 02:03:0f:15:63:e0:9b:bf:1b:93:d6:e9:a9:49:49:36:da:4d: 6b:a3:bc:f7:f3:9d:3e:8f:53:0c:8a:28:9a:af:4b:ab:d7:ec: d9:a9:f4:c6:84:47:26:79:4f:6e:37:41:be:d5:72:56:25:c7: ef:a7:9c:a7:fb:5d:13:97:3d:94:dd:ed:eb:5e:24:b0:fa:a3: 22:20:e7:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC RjZCMTIyQUUwHhcNMjUwNTMwMTkyMzI3WhcNMjUwNjA2MTkyMzI3WjAYMRYwFAYD VQQDEw02ODNhMDViMC04NWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5f/NE076CytxT/5wdsvszecV4z9ut0qTmB1GIuJp+9Y8wZ6ToWIxdBUYSDwG 023+1atUH2cnAeenMIqAKWiQNAyy6keg05ZewuizPYsqo0brWfQqLYKHxmGJX6iC y0nEWlPhc/Eo05NPpnEyt3nD9Tg8V/04PVL0P5WvxGLHaV8+f38GUe1LRHCuaISl nHzpFHx3g/TEtstoLlkvvIcEyWpuoJwHdeoY+n/30Rgtc5+LmDNqw62xUGd1JdT/ k3Z12KtCUOa9Z0swRL4DJR8l1GACB/N8xJg9b25Sd40wQpc05imB0PuDJbBRJKOC R55l+Ph4+fLbLNcibkuKdFzK1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1PwBXq k4UgjjVXg6/E2+1hz6DkMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3 OFlZaUhScVpnbnlfYXhJcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQRqI60bqx2EvixZn1qyV2ZtxR3HQpDxv4wR8HpMTMDeN5hrJR+ac+ UOofQ2EgEKEienh05S/3wj+kcI6hDYIUcaRwVgQEQIQ+d5jXfsVnV3ZwTA+c1dja R36zpIPH2zCgl6dTcmYXmG1tRwKrr/ZRjDxiFq9sgL5Hzc63EZgqHNc+LvmMuYcc kL7Yrs88wLljuSuQqMBgI9OkhWru0k3wJVV3TGuynDsjjaKZ8hvYj2ULF8gCAw8V Y+CbvxuT1umpSUk22k1ro7z3850+j1MMiiiar0ur1+zZqfTGhEcmeU9uN0G+1XJW Jcfvp5yn+10Tlz2U3e3rXiSw+qMiIOfe -----END CERTIFICATE-----Generated at Sat May 31 17:27:52 2025 by rpki-client