$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json) Hash identifier: qoLHgyMS6dTUFR35Jp7O866+qQ1o68jEuhAr3rtxuyI= Subject key identifier: D3:78:31:23:C6:2B:61:E5:2B:49:23:3B:82:C4:50:A9:2B:61:BA:AF Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Certificate serial: 0B3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft Manifest number: 0B24 Signing time: Thu 24 Apr 2025 19:07:44 +0000 Manifest this update: Thu 24 Apr 2025 19:07:43 +0000 Manifest next update: Thu 01 May 2025 19:07:43 +0000 Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: Rsgj1NOmBTdmhMaVRErZgL+qpnURVyZuz+ln45VCVXM=) 2: 1F676C22068711EDA1C2070DC4F9AE02.roa (hash: js7wAPY4vYVuobTGafcZGa/sKzvGw3A4kNsurTbXJzQ=) 3: FB4D7A105BC611EFA9919382C4F9AE02.roa (hash: 7GYs/P+QyXtP6LHRFVs3ZOTo2+7xsIAwWSdZChoitdk=) 4: EE611404E51B11EF98150C30C4F9AE02.roa (hash: S6MfW/3Ap7vt/xYRzoiVOd+LSZB49FIFU+XiTz52c7E=) 5: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: 9Wsge6uN8/kWPU23/DSAiXCE5pnA2uN+jA1/GNMc3O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2875 (0xb3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Validity Not Before: Apr 24 19:07:43 2025 GMT Not After : May 1 19:07:43 2025 GMT Subject: CN=680a8c00-59b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dc:b3:48:15:eb:30:9d:3f:6a:4c:70:dd:b3: aa:a3:67:a5:81:0c:d2:e6:0f:15:13:b3:3e:89:68: 2e:f1:f3:24:05:41:98:d4:bb:eb:58:7a:29:24:da: 25:50:d7:36:64:18:0c:9f:bc:e0:a4:e7:08:35:01: 6f:f5:be:c3:2f:09:c6:22:9b:f1:2c:d4:5b:ae:55: cd:b8:ba:b4:48:ee:bb:39:19:07:62:4d:59:0d:cd: c0:bf:60:22:ec:c8:74:93:0d:eb:c2:ca:36:0a:ab: bc:b9:71:83:95:70:e2:9d:db:4a:d9:8e:3c:3e:d9: e4:f1:16:6e:29:17:46:ee:32:91:ff:60:2a:f7:49: a9:84:66:7c:80:95:f3:85:f5:94:1c:bc:da:50:61: 03:44:06:08:38:55:c3:7b:2b:7f:a8:3a:a7:23:9a: 42:b3:28:91:70:86:12:f7:28:f0:e3:69:6f:7f:2a: 07:09:67:27:14:1a:06:74:6f:93:be:66:02:d3:b1: 84:8a:05:0d:eb:bc:b8:02:11:c7:8b:69:0f:dd:a3: 24:84:17:54:5c:69:81:38:db:b1:5c:9c:5c:fd:52: 7b:1f:c4:a2:c6:b9:86:56:dc:8e:77:40:cc:32:a4: 07:92:99:95:ec:31:0d:21:05:e9:1a:04:2e:4c:66: f5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:78:31:23:C6:2B:61:E5:2B:49:23:3B:82:C4:50:A9:2B:61:BA:AF X509v3 Authority Key Identifier: keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d4:63:ba:ac:8d:6b:7b:75:d5:ab:38:8a:37:6c:1a:07:bf: dd:52:99:bc:3e:53:24:6c:2c:da:aa:76:b7:e2:6e:ff:61:63: 9c:68:25:98:82:56:ac:fb:50:6a:d1:d9:0b:ea:7e:f0:1e:c3: 5d:2d:5f:09:1a:9d:f9:03:f5:3d:bb:5a:dd:b4:b2:01:4c:f3: 22:4a:6e:40:fb:0b:3a:e8:63:7c:aa:00:fa:6b:0c:73:f5:57: ff:98:43:3d:f8:70:03:06:c2:8f:85:3d:ab:01:1d:77:2a:cb: 3e:76:48:a9:25:08:73:0e:1f:20:de:fc:bf:7e:c7:22:7a:6c: e0:a6:4c:2b:7f:80:cc:6e:da:75:c7:c0:de:7a:28:33:76:2d: ee:fa:0a:29:a8:3a:6c:87:57:bd:f5:db:6c:de:6f:fc:53:13: ed:e4:01:d1:60:79:13:c3:77:20:db:cb:05:ba:2c:30:8d:0a: 4c:ce:ec:49:d2:12:dc:8c:fe:90:93:0e:64:8a:b9:02:05:87: ee:3e:c3:71:87:95:5b:d9:33:90:5f:4d:b7:75:39:4f:80:3b: ee:9d:af:09:3a:e8:90:b7:bf:d0:0d:0b:40:fe:d5:9b:d7:e5: f2:f9:9b:cc:08:10:e3:84:1f:af:29:d8:84:39:39:5d:1b:4c: eb:77:6e:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC RjZCMTIyQUUwHhcNMjUwNDI0MTkwNzQzWhcNMjUwNTAxMTkwNzQzWjAYMRYwFAYD VQQDEw02ODBhOGMwMC01OWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29yzSBXrMJ0/akxw3bOqo2elgQzS5g8VE7M+iWgu8fMkBUGY1LvrWHopJNol UNc2ZBgMn7zgpOcINQFv9b7DLwnGIpvxLNRbrlXNuLq0SO67ORkHYk1ZDc3Av2Ai 7Mh0kw3rwso2Cqu8uXGDlXDindtK2Y48Ptnk8RZuKRdG7jKR/2Aq90mphGZ8gJXz hfWUHLzaUGEDRAYIOFXDeyt/qDqnI5pCsyiRcIYS9yjw42lvfyoHCWcnFBoGdG+T vmYC07GEigUN67y4AhHHi2kP3aMkhBdUXGmBONuxXJxc/VJ7H8SixrmGVtyOd0DM MqQHkpmV7DENIQXpGgQuTGb1hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNN4MSPG K2HlK0kjO4LEUKkrYbqvMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3 OFlZaUhScVpnbnlfYXhJcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk1GO6rI1re3XVqziKN2waB7/dUpm8PlMkbCzaqna34m7/YWOcaCWY glas+1Bq0dkL6n7wHsNdLV8JGp35A/U9u1rdtLIBTPMiSm5A+ws66GN8qgD6awxz 9Vf/mEM9+HADBsKPhT2rAR13Kss+dkipJQhzDh8g3vy/fsciemzgpkwrf4DMbtp1 x8Deeigzdi3u+gopqDpsh1e99dts3m/8UxPt5AHRYHkTw3cg28sFuiwwjQpMzuxJ 0hLcjP6Qkw5kirkCBYfuPsNxh5Vb2TOQX023dTlPgDvuna8JOuiQt7/QDQtA/tWb 1+Xy+ZvMCBDjhB+vKdiEOTldG0zrd27t -----END CERTIFICATE-----Generated at Sat Apr 26 17:03:00 2025 by rpki-client