$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json) Hash identifier: zs1lq2U2upJWa4nd+P2ZCZBVXdpgsAnz2ZICCZvlcII= Subject key identifier: 19:D0:BD:15:93:2F:DA:E6:58:04:A1:71:51:F7:1A:0F:07:EE:DC:30 Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Certificate serial: 0C35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft Manifest number: 0C04 Signing time: Sun 24 May 2026 18:52:17 +0000 Manifest this update: Sun 24 May 2026 18:52:16 +0000 Manifest next update: Sun 31 May 2026 18:52:16 +0000 Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: +YTsDWpj0JxxaCKCwUmL9zYnlNbY/cwS54P6m2e2x34=) 2: C8424AA84AB511F185B0E11DBA833773.roa (hash: fJf2y9d4stc3nMqOeASEOcsdUJQoVrVnG2FIkJvfGpI=) 3: 701069084E9F11F1AB859623BE833773.roa (hash: g7yGFwPmPH6EKyQWY6S1b8adIDRCUZ6giausRd/EaCA=) 4: 7DAECCA84E9F11F182521632BE833773.roa (hash: jN1j556n4CYVP+ZoEJsGbkluGWovmI0vyYUYAc5AM0o=) 5: FB4D7A105BC611EFA9919382C4F9AE02.roa (hash: i7vxGp1+9lDVYs7mJm6IB3LRhzfd5STmvsvGI15awd0=) 6: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: I2w0+/e1Kb9CMzXZGTK123IbYwzsAgG1t96AYmZZdH4=) 7: 390D5400B3F611F0A01DFD0AC4F9AE02.roa (hash: AgKBB6R2DNmXbMGkYO2RU1DaRqQ5Vqh9PXxdze8c+RY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 May 2026 18:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3125 (0xc35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Validity Not Before: May 24 18:52:16 2026 GMT Not After : May 31 18:52:16 2026 GMT Subject: CN=6a1348e1-aab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:98:f4:74:ae:81:d8:e2:7c:e5:47:e2:8d:80: 37:ae:40:a4:cb:31:be:c6:38:8f:93:a4:c6:66:21: 33:52:d4:a7:40:1c:12:04:8b:79:a5:15:09:f1:7a: 19:d0:8f:d2:99:a9:30:08:be:4a:78:40:48:ef:5f: 12:ab:cb:2a:b3:65:bd:d6:2d:fe:aa:a1:9e:ed:f8: dd:a0:e2:fe:a1:86:b3:e7:2d:89:07:a1:bb:ad:dd: 3b:7c:c4:e7:1f:4a:2d:ee:7e:f1:b1:2b:d7:30:44: ed:6b:86:53:9e:e6:f4:67:75:3d:b2:24:64:e2:b1: 2e:a1:47:1f:3f:e2:ce:26:d0:b8:04:8a:d8:90:e4: 3e:77:7f:3e:4c:fb:f9:ff:e8:7e:2b:5c:01:55:71: c4:68:1b:eb:ba:09:04:1a:a9:72:90:3d:18:cf:60: eb:b4:ae:47:e6:80:00:74:24:3b:71:1a:b4:6f:42: f0:9e:38:46:0b:ae:32:7c:c9:ae:76:10:56:b7:bc: aa:00:da:a7:98:94:5e:3c:9d:fc:c0:86:db:ab:b8: 86:85:da:89:6d:d4:72:af:bb:ad:94:d9:e4:25:bf: 41:f5:a9:dc:04:80:20:0c:d8:d9:ff:50:76:49:21: 53:01:a6:80:1e:95:95:2b:8a:f8:28:89:f8:f9:7e: cf:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D0:BD:15:93:2F:DA:E6:58:04:A1:71:51:F7:1A:0F:07:EE:DC:30 X509v3 Authority Key Identifier: keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ef:67:08:10:56:b4:8a:5b:a3:3b:b2:f8:37:16:84:ae:a2: 69:69:17:5b:95:99:21:ca:16:83:2c:85:b3:01:aa:9a:af:ec: 77:39:52:93:db:15:45:0d:e7:d4:37:94:00:ca:60:45:da:2a: db:5b:92:87:77:2d:5e:55:a9:9c:86:f9:b0:85:30:57:8a:5b: 10:ae:b9:83:f3:d7:f4:a7:e7:6c:43:15:18:f6:f6:f9:41:3d: 1f:9e:d2:b7:5f:ca:64:1f:b1:de:e6:ef:9c:7a:c8:70:37:8d: 3a:25:da:94:f0:97:0b:a6:b9:fd:42:99:ab:80:7a:38:f2:77: 48:5d:3f:3f:38:46:6a:69:81:94:92:f8:ec:d0:cd:c8:4e:f5: 2e:93:69:23:68:9f:ae:c1:c2:79:e0:c0:cd:86:ae:79:95:0e: 33:09:fe:a9:0e:34:4b:ac:4a:bf:97:03:b3:4b:0e:50:07:b8: d1:4d:0d:da:71:fa:13:2e:4b:49:08:df:61:ca:f9:70:cc:ea: df:8a:58:39:f4:76:52:92:a0:fc:51:3e:eb:c4:55:43:e4:3b: b7:30:18:94:c9:cc:4d:7d:00:0b:0f:79:18:c2:70:b5:f4:59: db:99:7d:3b:d6:6b:fe:f2:ca:9a:85:f4:e3:27:1e:1c:59:7f: e9:4d:5c:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC RjZCMTIyQUUwHhcNMjYwNTI0MTg1MjE2WhcNMjYwNTMxMTg1MjE2WjAYMRYwFAYD VQQDEw02YTEzNDhlMS1hYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJj0dK6B2OJ85UfijYA3rkCkyzG+xjiPk6TGZiEzUtSnQBwSBIt5pRUJ8XoZ 0I/SmakwCL5KeEBI718Sq8sqs2W91i3+qqGe7fjdoOL+oYaz5y2JB6G7rd07fMTn H0ot7n7xsSvXMETta4ZTnub0Z3U9siRk4rEuoUcfP+LOJtC4BIrYkOQ+d38+TPv5 /+h+K1wBVXHEaBvrugkEGqlykD0Yz2DrtK5H5oAAdCQ7cRq0b0LwnjhGC64yfMmu dhBWt7yqANqnmJRePJ38wIbbq7iGhdqJbdRyr7utlNnkJb9B9ancBIAgDNjZ/1B2 SSFTAaaAHpWVK4r4KIn4+X7PlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnQvRWT L9rmWAShcVH3Gg8H7twwMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3 OFlZaUhScVpnbnlfYXhJcTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHu9nCBBWtIpbozuy+DcWhK6iaWkXW5WZIcoWgyyFswGqmq/sdzlSk9sVRQ3n 1DeUAMpgRdoq21uSh3ctXlWpnIb5sIUwV4pbEK65g/PX9KfnbEMVGPb2+UE9H57S t1/KZB+x3ubvnHrIcDeNOiXalPCXC6a5/UKZq4B6OPJ3SF0/PzhGammBlJL47NDN yE71LpNpI2ifrsHCeeDAzYaueZUOMwn+qQ40S6xKv5cDs0sOUAe40U0N2nH6Ey5L SQjfYcr5cMzq34pYOfR2UpKg/FE+68RVQ+Q7tzAYlMnMTX0ACw95GMJwtfRZ25l9 O9Zr/vLKmoX04yceHFl/6U1c2g== -----END CERTIFICATE-----Generated at Mon May 25 12:43:44 2026 by rpki-client