
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json)
Hash identifier: JvbBerVkbRRYNH3PLpwsaJqoRR3UoWY6TOVY25oZH7I=
Subject key identifier: E1:4C:E1:41:A5:DE:28:76:BA:1D:61:C2:C3:4A:43:A0:EE:F3:9D:E7
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial: 0C17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
Manifest number: 0BEB
Signing time: Thu 16 Apr 2026 18:50:28 +0000
Manifest this update: Thu 16 Apr 2026 18:50:27 +0000
Manifest next update: Thu 23 Apr 2026 18:50:27 +0000
Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: /JwZqLmKQoy5ji9lUnsRBUUl5RO4bnexthi28LugSU0=)
2: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: I2w0+/e1Kb9CMzXZGTK123IbYwzsAgG1t96AYmZZdH4=)
3: 3A23F644121C11F1803734E51C3D8C67.roa (hash: T/HYfFsb/fZL5pHZr9f314mE7V/oEz2D1WIa+l4Ez9g=)
4: F7E17D64188911F19EAE4D133C3D8C67.roa (hash: 1WfZBNb22aKiZTNlA93yMn4A+pWq9UPoX3zV087CDjU=)
5: 390D5400B3F611F0A01DFD0AC4F9AE02.roa (hash: AgKBB6R2DNmXbMGkYO2RU1DaRqQ5Vqh9PXxdze8c+RY=)
6: FB4D7A105BC611EFA9919382C4F9AE02.roa (hash: i7vxGp1+9lDVYs7mJm6IB3LRhzfd5STmvsvGI15awd0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3095 (0xc17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Validity
Not Before: Apr 16 18:50:27 2026 GMT
Not After : Apr 23 18:50:27 2026 GMT
Subject: CN=69e12f73-41df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e6:55:31:87:c8:ec:a9:c8:15:19:50:4c:60:
17:86:f5:e0:51:6e:e2:af:ec:1f:f0:2f:07:79:34:
be:a2:03:cb:1d:51:0c:6c:8b:55:02:03:c2:21:f8:
9b:7e:c6:90:99:b6:00:c7:07:1f:31:07:72:f7:8b:
46:eb:6e:29:5c:dd:d1:a6:0a:f7:38:c8:5e:10:78:
85:91:16:1f:71:ed:97:e7:fd:35:49:62:0b:a0:e6:
53:84:53:05:50:b9:1f:32:9f:86:2b:66:ed:21:65:
29:74:05:ca:73:9d:3a:c2:35:3e:38:d3:13:fc:3f:
b3:5e:ea:ef:d3:1c:64:62:60:3b:5d:19:02:0f:2a:
5b:57:c5:7c:2f:62:dd:ff:cc:2a:1f:c6:0e:d5:4d:
56:a8:4c:30:23:5b:5d:ac:a0:9b:ae:f3:b9:29:09:
48:bf:78:dc:c9:3b:05:34:11:fd:b3:06:45:e5:ea:
68:9f:36:8a:7f:49:f4:cd:f8:16:3b:c7:12:2e:c4:
2b:c3:c3:27:e9:86:0c:5a:3f:e2:a8:85:24:db:09:
d4:3e:98:73:07:48:44:aa:0f:a5:16:11:6a:dc:80:
a1:12:f1:7d:f7:df:d9:62:ce:96:25:e6:3b:2e:7b:
61:d0:6a:04:61:ac:7e:c6:d8:1c:e9:f1:94:7a:c2:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4C:E1:41:A5:DE:28:76:BA:1D:61:C2:C3:4A:43:A0:EE:F3:9D:E7
X509v3 Authority Key Identifier:
keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2b:8f:6f:74:e0:a2:13:ed:71:1c:df:04:22:28:49:c9:b8:
c6:fa:51:da:6e:5d:da:17:4f:1e:35:2c:84:db:f2:72:8c:ed:
10:ed:68:a0:30:31:f3:df:4e:44:3d:a1:b3:b7:f3:81:74:1f:
49:4a:1c:47:ac:3a:ef:87:59:19:50:77:10:67:6f:68:da:53:
4d:08:fc:ec:cd:d7:d0:87:28:ff:2b:aa:e8:84:8a:fe:c5:87:
0f:50:79:78:17:dc:35:ef:1e:65:d6:79:b4:5b:ff:5c:c3:c1:
f2:d7:36:51:ed:43:d2:9e:68:29:91:51:de:55:03:52:ba:c4:
9f:7b:e0:b7:93:5c:f3:8f:b6:40:4b:e6:b7:30:11:57:e6:da:
6e:26:cf:4f:8c:f8:97:42:10:f6:de:56:7f:b7:b4:f3:37:c8:
b4:40:fa:c3:d6:5f:4d:0e:01:69:ee:19:43:a7:17:6f:59:0c:
32:db:c0:28:f6:c6:6f:51:20:6c:7f:fc:f5:be:6b:f0:9d:19:
b5:6b:a3:e3:cf:6c:bd:0e:dc:a7:af:c0:e1:8d:5b:cf:e3:d3:
e4:ee:88:f2:4a:82:a5:1d:da:02:a7:91:6c:ff:50:7b:25:ec:
ef:23:f5:93:91:77:76:e9:a7:d3:22:bb:93:77:0b:68:8a:85:
ee:56:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:16 2026 by rpki-client