$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json) Hash identifier: 15X96acP46YuuYXM4AsAwQt8swlIoOaFHKk1K/BsTGo= Subject key identifier: 53:FF:B6:80:4A:92:FB:B6:DC:D2:16:F3:12:01:E2:88:73:A0:63:E9 Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Certificate serial: 0A7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft Manifest number: 0A6B Signing time: Sat 04 May 2024 20:58:59 +0000 Manifest this update: Sat 04 May 2024 20:58:58 +0000 Manifest next update: Sat 11 May 2024 20:58:58 +0000 Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: 7mHMIIUtH6/jRxtXEQw34NSLJgbPtmtgAuJ/Iguv2bQ=) 2: 1F676C22068711EDA1C2070DC4F9AE02.roa (hash: yfj4cCJ84XsUYHNOyoWRHXqNvKqSh8l5Af0qn9H7CQ4=) 3: 05A8B38482C011EE850C4F63C4F9AE02.roa (hash: LMoB8I1euv+63gPLnLVXZXmudKifbK3frD9P1mZeL3M=) 4: 10FEE4F0822B11EE878EB774C4F9AE02.roa (hash: w/dzgjupaJpsdCRQIkHrWGKFEnUxvUL6WmOlJLrDpCU=) 5: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: 9Wsge6uN8/kWPU23/DSAiXCE5pnA2uN+jA1/GNMc3O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Validity Not Before: May 4 20:58:58 2024 GMT Not After : May 11 20:58:58 2024 GMT Subject: CN=6636a192-832e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:69:46:21:82:73:95:ac:96:54:93:b2:c7: d7:71:f8:48:93:5d:2b:c2:fa:56:0f:7a:f6:c8:7a: 58:29:76:19:30:43:9f:1c:32:82:96:1d:aa:fd:81: 84:90:e8:48:a7:7e:db:dc:b1:9a:6e:7d:32:9b:9a: 89:91:6a:4e:11:1a:79:d5:67:21:81:68:73:c9:47: 0c:09:86:7d:41:e6:e4:e0:28:1e:e1:68:5f:2b:59: 82:42:66:ea:49:cd:52:91:0a:e0:f9:b5:f2:ba:35: a3:98:6f:de:06:d0:b0:f7:5d:9e:ae:65:07:02:5d: 84:5d:d1:9c:86:c1:94:62:3a:ae:e7:3d:1e:82:fb: 20:68:84:72:66:c1:7d:ba:e3:e3:ad:32:c2:0c:c9: 3c:8f:a0:36:26:3e:58:77:b7:6e:fe:95:5f:91:15: f7:5f:ca:56:9b:11:1e:fe:d2:0b:0f:58:39:e0:a0: 09:fb:17:b9:4f:6d:f4:a3:a6:de:d0:90:32:f5:0a: 4e:78:d0:7d:18:53:db:bf:88:ca:d9:62:9c:e1:1c: 8e:20:8a:bb:84:5b:80:92:f7:c0:71:f6:5b:46:6f: 82:50:64:f3:4e:16:e4:b0:82:4e:fa:ae:91:e5:1a: 7e:3c:11:af:6c:23:39:3c:76:27:b3:f6:01:98:a8: fa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FF:B6:80:4A:92:FB:B6:DC:D2:16:F3:12:01:E2:88:73:A0:63:E9 X509v3 Authority Key Identifier: keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:8f:65:dc:a6:28:22:6b:05:99:03:ad:e0:b7:b2:e9:cf:bb: e6:0c:3a:d3:d8:1a:ea:52:8b:af:55:33:68:ac:dc:c6:db:68: 6f:05:fe:d2:9b:ff:c1:0f:ed:bb:a5:fc:1a:12:9e:6f:95:34: fe:47:43:5b:e6:9b:9c:65:19:cd:70:a8:16:ad:21:63:32:10: da:34:9a:25:4e:e8:d9:91:d1:18:45:d6:3e:19:a1:2e:dd:a2: 33:0f:e4:7e:f8:b8:74:0e:27:90:73:ac:92:d7:bd:79:1d:84: d4:e0:f7:83:26:42:2e:22:82:08:c4:95:67:87:2d:75:a9:6f: 8b:8c:59:c7:1c:d8:5f:88:77:9c:cb:7f:4d:62:ab:59:c0:ba: b3:01:a4:28:06:77:ea:f5:c4:b7:9d:ff:e2:8f:0e:6c:99:ef: 51:17:57:eb:06:1d:7b:6d:63:f5:f7:ab:aa:ea:3a:cd:59:47: 11:7d:81:1c:16:bf:5d:e0:35:68:7d:72:10:6f:ba:19:8e:74: 69:8a:26:da:6f:d4:17:28:5e:c6:8c:e6:8b:da:d0:3f:0e:71: b3:84:04:ee:f8:be:dd:9c:a1:62:f0:ac:a4:05:a5:74:b8:77: 2b:c2:60:41:3e:b4:05:7d:95:10:5a:d9:83:5e:e1:96:01:f8: 13:75:52:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC RjZCMTIyQUUwHhcNMjQwNTA0MjA1ODU4WhcNMjQwNTExMjA1ODU4WjAYMRYwFAYD VQQDEw02NjM2YTE5Mi04MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMdpRiGCc5WsllSTssfXcfhIk10rwvpWD3r2yHpYKXYZMEOfHDKClh2q/YGE kOhIp37b3LGabn0ym5qJkWpOERp51WchgWhzyUcMCYZ9Qebk4Cge4WhfK1mCQmbq Sc1SkQrg+bXyujWjmG/eBtCw912ermUHAl2EXdGchsGUYjqu5z0egvsgaIRyZsF9 uuPjrTLCDMk8j6A2Jj5Yd7du/pVfkRX3X8pWmxEe/tILD1g54KAJ+xe5T230o6be 0JAy9QpOeNB9GFPbv4jK2WKc4RyOIIq7hFuAkvfAcfZbRm+CUGTzThbksIJO+q6R 5Rp+PBGvbCM5PHYns/YBmKj64wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFP/toBK kvu23NIW8xIB4ohzoGPpMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3 OFlZaUhScVpnbnlfYXhJcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhj2XcpigiawWZA63gt7Lpz7vmDDrT2BrqUouvVTNorNzG22hvBf7S m//BD+27pfwaEp5vlTT+R0Nb5pucZRnNcKgWrSFjMhDaNJolTujZkdEYRdY+GaEu 3aIzD+R++Lh0DieQc6yS1715HYTU4PeDJkIuIoIIxJVnhy11qW+LjFnHHNhfiHec y39NYqtZwLqzAaQoBnfq9cS3nf/ijw5sme9RF1frBh17bWP196uq6jrNWUcRfYEc Fr9d4DVofXIQb7oZjnRpiibab9QXKF7GjOaL2tA/DnGzhATu+L7dnKFi8KykBaV0 uHcrwmBBPrQFfZUQWtmDXuGWAfgTdVJJ -----END CERTIFICATE-----Generated at Sat May 4 21:32:59 2024 by rpki-client on console-fra.rpki-client.org