$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json) Hash identifier: B9kAmKs2ClQcPlJIa0obfKGAvVXN4gHHcB1B68PdRig= Subject key identifier: 2E:3C:D9:68:5E:6A:A1:64:38:F0:C5:A7:9E:59:91:DA:86:BC:4A:AF Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Certificate serial: 0B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft Manifest number: 0B30 Signing time: Wed 14 May 2025 19:20:14 +0000 Manifest this update: Wed 14 May 2025 19:20:13 +0000 Manifest next update: Wed 21 May 2025 19:20:13 +0000 Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: qgkfayj0pERaWCt1EgxYLMUaMQHAfhfDMLj0tpY7f1I=) 2: 1F676C22068711EDA1C2070DC4F9AE02.roa (hash: /7INLjkCJxuGRBamYiwMgMuR9Yx5BJwn5CHWQ9lp1M4=) 3: FB4D7A105BC611EFA9919382C4F9AE02.roa (hash: eddZTpWlG2T9ATgQlQm2WB6FlpB3ZUxT2iZNYIcetK0=) 4: EE611404E51B11EF98150C30C4F9AE02.roa (hash: CWcGppa7/X2BEWOhZeYJBrVNg4CI1Gt4TP8k9AJmrTU=) 5: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: 6SPV2FX7Tph5ZmideN5WrWfiO8/8Sir95YP17tl87tY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Validity Not Before: May 14 19:20:13 2025 GMT Not After : May 21 19:20:13 2025 GMT Subject: CN=6824eced-cdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:42:f5:4c:da:72:b0:3b:11:eb:1b:aa:cc:94: 6c:21:18:bf:a2:6b:fb:67:c8:6f:b2:19:34:b4:f3: e6:fa:aa:cb:81:2b:5f:b6:65:be:20:cb:2a:15:37: 75:26:10:d1:6b:93:6e:04:4b:02:17:90:1a:48:c9: 75:b0:56:92:d2:78:7b:0d:46:52:01:b4:d1:24:5d: b0:a2:06:1f:ad:82:20:e5:0c:08:67:c8:3d:44:f4: 30:60:41:4c:0d:c8:d1:33:2c:3f:6c:6c:9d:a4:5d: a3:59:79:03:31:3d:d5:9d:ac:cf:a8:e5:fc:cb:eb: 87:42:ee:76:a5:ff:75:42:b2:6f:2f:e7:ba:74:4f: 4b:ae:1e:7b:f7:48:b7:c4:97:01:5c:23:8c:a8:a6: f7:d6:d2:60:65:c1:c8:47:2f:93:80:9c:69:b7:e3: f9:da:dd:7e:7e:55:bc:38:7b:ec:f3:4b:5f:0c:33: 2b:12:04:f9:ac:e9:c7:6b:5e:0d:c5:d6:55:69:2b: fb:4c:22:47:b9:4e:26:02:ab:18:52:f1:01:b8:57: e1:df:b6:ce:f6:e7:3c:85:89:8b:b6:2a:ab:11:55: d6:f2:ca:6a:b3:fe:c9:2a:f7:e6:45:8c:31:18:97: 33:c0:77:6f:f2:c5:95:f7:8f:05:b2:a7:a8:24:11: 2c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3C:D9:68:5E:6A:A1:64:38:F0:C5:A7:9E:59:91:DA:86:BC:4A:AF X509v3 Authority Key Identifier: keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:04:c6:98:59:1f:3f:9a:3d:96:9e:5d:bb:89:cb:46:c6:65: 4f:03:90:5f:cb:d1:4c:20:0e:cf:32:6d:ad:38:2f:90:64:74: aa:75:74:fb:d8:ee:99:e2:33:40:67:4b:7f:a7:db:07:9d:ec: a2:7c:b7:be:1b:47:32:97:c6:27:69:1b:7d:db:a2:8b:0c:62: d6:b2:e3:f8:a7:ee:3f:cc:23:be:3d:79:eb:39:52:57:0b:6f: 27:20:40:a1:74:4f:e2:71:8c:80:26:63:7c:1c:e2:62:e6:fb: 33:7b:7d:9f:b2:5f:78:38:f4:db:29:2e:28:a3:55:1e:9c:1d: 8d:86:f2:01:94:92:82:ef:d4:c2:f6:26:c2:fd:8c:25:e8:84: 18:ea:b9:d2:1f:fe:3e:ed:56:ae:1f:04:27:f5:88:36:39:6b: 05:6a:3a:c8:f7:0f:fb:bb:f1:45:42:57:5f:a6:ac:ec:34:22: 8f:a3:91:cb:7d:b1:c2:2a:54:c9:b8:3b:63:8b:17:72:85:d3: 1d:ae:5d:10:e7:2d:ca:8d:67:be:9f:11:03:d3:59:5d:48:66: 1d:a0:29:32:78:16:d3:8e:ef:fd:0a:13:e8:66:fa:d2:06:eb: 7b:c0:af:c6:c2:72:40:64:96:37:a8:6f:14:fa:31:54:30:56: 2d:45:6c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC RjZCMTIyQUUwHhcNMjUwNTE0MTkyMDEzWhcNMjUwNTIxMTkyMDEzWjAYMRYwFAYD VQQDEw02ODI0ZWNlZC1jZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9UL1TNpysDsR6xuqzJRsIRi/omv7Z8hvshk0tPPm+qrLgStftmW+IMsqFTd1 JhDRa5NuBEsCF5AaSMl1sFaS0nh7DUZSAbTRJF2wogYfrYIg5QwIZ8g9RPQwYEFM DcjRMyw/bGydpF2jWXkDMT3VnazPqOX8y+uHQu52pf91QrJvL+e6dE9Lrh5790i3 xJcBXCOMqKb31tJgZcHIRy+TgJxpt+P52t1+flW8OHvs80tfDDMrEgT5rOnHa14N xdZVaSv7TCJHuU4mAqsYUvEBuFfh37bO9uc8hYmLtiqrEVXW8spqs/7JKvfmRYwx GJczwHdv8sWV948FsqeoJBEsZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC482Whe aqFkOPDFp55ZkdqGvEqvMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3 OFlZaUhScVpnbnlfYXhJcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzBMaYWR8/mj2Wnl27ictGxmVPA5Bfy9FMIA7PMm2tOC+QZHSqdXT7 2O6Z4jNAZ0t/p9sHneyifLe+G0cyl8YnaRt926KLDGLWsuP4p+4/zCO+PXnrOVJX C28nIEChdE/icYyAJmN8HOJi5vsze32fsl94OPTbKS4oo1UenB2NhvIBlJKC79TC 9ibC/Ywl6IQY6rnSH/4+7VauHwQn9Yg2OWsFajrI9w/7u/FFQldfpqzsNCKPo5HL fbHCKlTJuDtjixdyhdMdrl0Q5y3KjWe+nxED01ldSGYdoCkyeBbTju/9ChPoZvrS But7wK/GwnJAZJY3qG8U+jFUMFYtRWw3 -----END CERTIFICATE-----Generated at Wed May 14 21:25:42 2025 by rpki-client