
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json)
Hash identifier: 8RJzKDAMZYOYLIOUWubHR7MQIjeGyGAD4pqML7d4VkY=
Subject key identifier: B7:19:7F:E8:75:05:22:99:8F:51:0E:05:BC:5E:70:E4:9E:71:21:F6
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial: 0C87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
Manifest number: 0C4C
Signing time: Thu 24 Sep 2026 18:44:46 +0000
Manifest this update: Thu 24 Sep 2026 18:44:45 +0000
Manifest next update: Thu 01 Oct 2026 18:44:45 +0000
Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: LzX9oMl/WWLh1h8NoxaRKe97uwKwu4eoJnhp1Aznd+Y=)
2: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: 40vm31zmDyZTzpk5qT/8hZKQ8x6OcqspYrpboNvjiwo=)
3: B17BE8CCAC1911F19C5C2AA33311F970.roa (hash: 8fBGg/7brNTFbBGhyfd1BnYeZjcKLEKePHH3RIzDE5Q=)
4: 98CC300CAC1911F1A1742B943311F970.roa (hash: z7lRynpgGucAwEiOBLOuzKRJrnXkZ29Vadeizu7jo+I=)
5: B97508ECB72711F1ACE4541F7111F970.roa (hash: Ro5QdhRfDdT6Kmi1OfSSRs8khpl30ID6ftuqa1fY/6w=)
6: FB4D7A105BC611EFA9919382C4F9AE02.roa (hash: IhvlKShIgxYwAqc31Kpxr8cYr9GIG9h4VIY3g0Bwj74=)
7: 390D5400B3F611F0A01DFD0AC4F9AE02.roa (hash: 63PE+Dv5v7iZ7pSCPRR/CVx+dcwM+eDew6BxWyHfYjM=)
8: 7DAECCA84E9F11F182521632BE833773.roa (hash: 9ZkR97D1eaxQJx0om4khBXLMqZNV8FB/OwG+kPUZwtA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3207 (0xc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Validity
Not Before: Sep 24 18:44:45 2026 GMT
Not After : Oct 1 18:44:45 2026 GMT
Subject: CN=6ab56f9e-0b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:32:89:37:88:fc:64:a8:8b:3b:b5:74:c1:
ba:5c:e8:36:61:66:45:ee:21:66:d1:06:25:89:1a:
b3:b7:c4:70:77:d4:61:61:8b:90:85:0e:17:60:5c:
5f:0e:95:98:9f:be:ba:31:49:d7:9d:04:37:1a:60:
f2:31:3f:58:d8:a0:2d:a6:1d:96:09:b9:b8:fb:5f:
2a:8f:3b:7f:58:22:24:a8:5e:ed:11:55:c3:a2:51:
fa:4b:fa:ce:3a:88:9b:12:c3:a3:cb:cf:c1:30:65:
59:56:29:ae:bc:e7:6b:09:ba:e3:9f:8c:b3:2a:4c:
db:c3:7e:a3:b9:6e:5a:ce:d9:80:c1:7c:d3:b7:75:
9f:33:24:3c:b1:42:09:04:82:ba:83:03:b0:38:a2:
85:35:c4:49:5e:3f:af:57:48:7c:ae:2e:ec:30:4f:
ce:fc:e7:f9:a9:41:f8:67:cf:5a:96:24:58:ed:60:
57:b4:e6:87:59:1c:a1:92:a3:55:70:6b:52:94:0d:
bb:87:06:26:ed:e3:df:05:0f:dd:63:f5:5e:37:39:
4c:04:a3:5e:0f:9d:6b:62:8c:2e:44:f8:8a:b5:fd:
90:16:40:93:95:59:7b:af:02:92:a2:a6:98:ca:19:
dd:99:fe:36:79:82:20:79:de:63:3a:c7:bf:54:b1:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:19:7F:E8:75:05:22:99:8F:51:0E:05:BC:5E:70:E4:9E:71:21:F6
X509v3 Authority Key Identifier:
keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e2:52:98:24:ea:c7:ca:65:5e:f9:d0:fc:98:1d:d1:8f:b2:
c9:61:5d:9d:1b:69:a6:f7:29:df:f6:3f:c4:2d:50:c9:85:df:
c1:d0:b9:5f:00:54:35:0e:91:09:69:07:7f:8f:07:68:d3:5e:
09:80:92:8b:88:9b:f5:f4:57:ae:43:bc:e8:d7:1c:2a:79:35:
8b:78:c4:e6:6e:d7:63:2a:e6:d2:d2:39:66:39:13:14:1a:ca:
8b:41:fe:34:ce:ff:42:68:ad:66:a8:3a:91:70:68:51:13:c4:
3f:21:00:d2:8c:9d:44:8a:4b:e4:06:35:b7:d2:d6:d3:50:c6:
1e:36:39:f5:71:29:88:74:17:e1:06:48:7a:2d:01:b1:4c:12:
22:bd:a3:f4:70:50:de:5f:d3:49:e2:99:7e:f3:c0:c8:0f:16:
66:0a:8f:9a:1d:60:7e:17:ba:b4:7e:03:71:6b:e6:f7:5e:a4:
5e:7f:ee:16:82:2c:a7:04:e2:2f:9e:ba:f9:7a:05:bf:99:55:
a0:fb:89:62:1d:02:3b:46:51:f5:95:0f:f9:d5:67:d0:ee:e7:
10:e6:07:fe:c7:a3:d3:e5:53:4f:37:c5:7f:c9:dd:bc:d0:d3:
66:0e:ef:53:da:92:61:c4:1e:a4:61:47:ac:2a:de:16:aa:9f:
66:d8:bc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:03:35 2026 by rpki-client