$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json) Hash identifier: cwMuBSMmrEagv1PAIOTaHFpRYVz8HV5OjhQAknVnXxo= Subject key identifier: BA:E9:46:FE:B7:AD:E1:35:72:60:3E:25:D6:88:38:98:EE:93:C1:FC Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Certificate serial: 0B9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft Manifest number: 0B7F Signing time: Sat 18 Oct 2025 19:55:54 +0000 Manifest this update: Sat 18 Oct 2025 19:55:53 +0000 Manifest next update: Sat 25 Oct 2025 19:55:53 +0000 Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: +wvVe5d5vJvVcDPjhGC5AnbwRweGY2YrXdrPofi9/m8=) 2: 1F676C22068711EDA1C2070DC4F9AE02.roa (hash: /7INLjkCJxuGRBamYiwMgMuR9Yx5BJwn5CHWQ9lp1M4=) 3: FB4D7A105BC611EFA9919382C4F9AE02.roa (hash: eddZTpWlG2T9ATgQlQm2WB6FlpB3ZUxT2iZNYIcetK0=) 4: EE611404E51B11EF98150C30C4F9AE02.roa (hash: CWcGppa7/X2BEWOhZeYJBrVNg4CI1Gt4TP8k9AJmrTU=) 5: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: 6SPV2FX7Tph5ZmideN5WrWfiO8/8Sir95YP17tl87tY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2970 (0xb9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Validity Not Before: Oct 18 19:55:53 2025 GMT Not After : Oct 25 19:55:53 2025 GMT Subject: CN=68f3f0ca-3d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:82:96:76:fd:a3:0f:9f:bc:6b:59:af:a7:07: 09:e8:56:8c:0f:4d:48:1d:e0:69:48:ae:85:fe:05: 0e:25:3f:77:c4:20:9e:e5:4b:e7:ec:ea:e0:77:46: 46:f5:54:be:8d:0f:64:24:64:d2:65:e4:32:e5:d7: b2:55:c7:ed:26:3b:eb:cd:73:81:44:a4:de:de:e1: 8a:5c:f7:5b:f9:12:06:77:86:e1:b6:28:b2:60:3d: 2f:00:d9:8d:f0:8f:9c:46:a0:6d:e7:3a:0e:de:b7: 9c:9d:ab:f2:58:f9:b7:bb:7e:ec:47:60:f5:d6:fe: b0:26:de:81:5a:81:23:10:34:82:7a:a4:7f:53:54: 6b:50:33:a7:a5:ae:79:d6:89:4f:87:07:4e:46:ba: 34:21:7f:d0:8e:c4:5a:c6:62:c6:dc:84:8b:8c:1d: 92:a3:15:be:9e:f9:4e:12:b9:63:c5:aa:aa:fa:c1: 3c:b8:6a:0c:3d:1e:74:66:19:64:27:db:cc:a0:f8: 17:c2:40:f9:41:ea:ae:f6:10:29:11:37:88:9e:af: ae:48:4b:00:51:f2:79:10:19:cd:b8:a8:6e:a6:8e: 7b:9f:bc:63:f6:93:b0:0a:5e:5a:b3:ca:45:e6:f7: 27:de:0c:ad:46:c5:d4:01:d4:d2:59:ce:ab:19:a9: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E9:46:FE:B7:AD:E1:35:72:60:3E:25:D6:88:38:98:EE:93:C1:FC X509v3 Authority Key Identifier: keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ee:4f:97:fe:6e:04:be:5c:99:0d:e7:d2:72:a1:ed:4d:45: 8e:10:56:98:7a:b3:19:54:6b:57:76:5b:0e:fd:54:5d:d9:5c: ea:aa:53:e7:17:60:5c:64:c1:fb:e2:2c:91:c8:ff:9a:aa:bb: fb:e6:90:e4:9b:db:34:44:74:e7:8a:70:0a:6d:ce:b4:32:5e: c1:68:52:8b:6a:14:01:05:6e:fb:e9:61:64:30:c8:05:b7:bd: a6:4a:47:4f:ae:04:da:fc:20:3a:d4:35:27:ef:04:29:d1:ef: 1f:c2:82:be:b2:ef:7f:84:28:02:ef:a6:5a:19:a9:c4:f6:26: c3:d5:b7:5b:22:6d:2b:a9:41:44:dd:68:59:69:a8:27:de:4d: 48:82:87:1e:3c:29:1b:d9:37:cb:f3:59:cf:48:db:70:5e:0c: 9e:f9:8d:3e:54:50:a4:64:33:df:fe:e9:9d:b8:2f:5d:2c:54: f8:64:cf:95:c5:ea:a3:97:2c:b8:a0:c1:4d:dc:80:a9:53:08: 3a:ab:2e:94:37:00:7b:b5:3b:bd:15:7c:d3:aa:7a:b6:fd:4f: c0:a9:26:cb:d9:12:d3:c5:6d:59:81:bb:24:7a:2e:13:b3:1c: 77:d9:bf:4e:5e:2b:16:cf:bf:2b:b4:f3:26:c2:12:87:ee:88: 75:51:2d:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC RjZCMTIyQUUwHhcNMjUxMDE4MTk1NTUzWhcNMjUxMDI1MTk1NTUzWjAYMRYwFAYD VQQDEw02OGYzZjBjYS0zZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoKWdv2jD5+8a1mvpwcJ6FaMD01IHeBpSK6F/gUOJT93xCCe5Uvn7Orgd0ZG 9VS+jQ9kJGTSZeQy5deyVcftJjvrzXOBRKTe3uGKXPdb+RIGd4bhtiiyYD0vANmN 8I+cRqBt5zoO3recnavyWPm3u37sR2D11v6wJt6BWoEjEDSCeqR/U1RrUDOnpa55 1olPhwdORro0IX/QjsRaxmLG3ISLjB2SoxW+nvlOErljxaqq+sE8uGoMPR50Zhlk J9vMoPgXwkD5Qequ9hApETeInq+uSEsAUfJ5EBnNuKhupo57n7xj9pOwCl5as8pF 5vcn3gytRsXUAdTSWc6rGakIhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrpRv63 reE1cmA+JdaIOJjuk8H8MB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3 OFlZaUhScVpnbnlfYXhJcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD7k+X/m4EvlyZDefScqHtTUWOEFaYerMZVGtXdlsO/VRd2VzqqlPn F2BcZMH74iyRyP+aqrv75pDkm9s0RHTninAKbc60Ml7BaFKLahQBBW776WFkMMgF t72mSkdPrgTa/CA61DUn7wQp0e8fwoK+su9/hCgC76ZaGanE9ibD1bdbIm0rqUFE 3WhZaagn3k1IgocePCkb2TfL81nPSNtwXgye+Y0+VFCkZDPf/umduC9dLFT4ZM+V xeqjlyy4oMFN3ICpUwg6qy6UNwB7tTu9FXzTqnq2/U/AqSbL2RLTxW1Zgbskei4T sxx32b9OXisWz78rtPMmwhKH7oh1US03 -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:06 2025 by rpki-client