
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json)
Hash identifier: wxX4HdSwsRzN9VEBfhZpFBrx5ZH0I41KmJWdEQQqYh4=
Subject key identifier: 0F:13:8A:7C:CA:0F:65:09:89:61:ED:FC:9D:2A:C9:1C:DF:61:E3:68
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial: 0C88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
Manifest number: 0C4D
Signing time: Sat 26 Sep 2026 18:52:13 +0000
Manifest this update: Sat 26 Sep 2026 18:52:13 +0000
Manifest next update: Sat 03 Oct 2026 18:52:13 +0000
Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: a15ljuye/pDqQzxkVrEfHNPkZKPKFPC1+Dr5r7GkZkU=)
2: B97508ECB72711F1ACE4541F7111F970.roa (hash: Ro5QdhRfDdT6Kmi1OfSSRs8khpl30ID6ftuqa1fY/6w=)
3: FB4D7A105BC611EFA9919382C4F9AE02.roa (hash: IhvlKShIgxYwAqc31Kpxr8cYr9GIG9h4VIY3g0Bwj74=)
4: 7DAECCA84E9F11F182521632BE833773.roa (hash: 9ZkR97D1eaxQJx0om4khBXLMqZNV8FB/OwG+kPUZwtA=)
5: 98CC300CAC1911F1A1742B943311F970.roa (hash: z7lRynpgGucAwEiOBLOuzKRJrnXkZ29Vadeizu7jo+I=)
6: 390D5400B3F611F0A01DFD0AC4F9AE02.roa (hash: 63PE+Dv5v7iZ7pSCPRR/CVx+dcwM+eDew6BxWyHfYjM=)
7: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: 40vm31zmDyZTzpk5qT/8hZKQ8x6OcqspYrpboNvjiwo=)
8: B17BE8CCAC1911F19C5C2AA33311F970.roa (hash: 8fBGg/7brNTFbBGhyfd1BnYeZjcKLEKePHH3RIzDE5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3208 (0xc88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Validity
Not Before: Sep 26 18:52:13 2026 GMT
Not After : Oct 3 18:52:13 2026 GMT
Subject: CN=6ab8145d-2e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:b6:a0:1e:37:0e:4f:e1:28:a5:d1:44:c5:
c7:79:44:9c:b2:dc:f5:64:0f:b0:6b:3b:b4:ff:aa:
10:73:61:a0:93:30:23:44:87:b8:e6:cc:b5:86:0c:
5b:a2:f9:6b:49:21:40:f0:07:1d:2e:02:82:41:dd:
c7:a7:17:3a:16:54:56:d4:10:65:b5:b8:a6:4f:71:
98:34:76:99:9b:df:12:70:2b:f3:0b:91:9c:94:e6:
94:66:b5:92:b1:95:c3:f9:c5:34:0c:c8:f2:ad:ff:
b1:ac:e1:a3:40:08:72:42:0c:78:da:b4:58:cb:c5:
03:c6:ec:e0:bc:a2:34:b3:c7:bb:b4:3c:1b:7e:b3:
b1:b2:d5:4a:78:51:71:94:86:16:15:d5:75:07:61:
1e:d3:4f:0a:ab:3a:1f:ef:aa:ab:54:df:55:a6:ee:
4b:f4:6d:d1:2f:77:1e:5c:16:18:d9:84:49:5a:a0:
e3:0e:75:8a:c0:0f:46:1a:5a:07:a5:42:9d:35:00:
31:66:0a:80:7d:c2:9b:81:9f:cf:64:90:a7:13:f9:
ef:1a:67:f4:c9:40:f3:c4:55:30:7f:d4:4b:07:2e:
8c:73:db:8b:e1:14:70:ea:ec:ee:1f:50:b5:df:98:
ba:f1:3b:7d:9f:fa:cf:5f:e6:0e:51:48:0c:41:76:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:13:8A:7C:CA:0F:65:09:89:61:ED:FC:9D:2A:C9:1C:DF:61:E3:68
X509v3 Authority Key Identifier:
keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:99:80:91:03:df:45:06:df:e9:b9:3f:d2:7c:9c:3b:09:26:
8d:31:35:67:03:ea:7f:01:e4:16:72:b5:5a:71:9a:c7:7f:3a:
5c:18:02:82:84:b0:ba:61:33:83:fb:71:f9:f7:91:80:d8:6f:
e6:f1:5d:92:4a:7f:2f:93:d2:86:66:51:e4:07:5a:5b:46:0b:
22:d7:b1:f8:99:22:30:68:81:5a:4a:12:c8:4c:9d:cb:80:97:
50:11:3c:3a:b7:4f:3c:97:8d:26:aa:31:6a:b4:e8:9d:69:2a:
05:9a:6d:bf:87:53:75:6e:b3:e9:cf:f9:98:2b:e9:c6:8c:1b:
4f:46:3a:59:73:58:e9:c7:79:41:f7:b4:d3:77:21:9c:67:9f:
3d:02:8a:89:97:c1:c1:19:7c:6a:7b:7e:76:53:b1:24:c6:89:
18:5d:01:22:0f:9d:d7:d1:92:e5:64:03:27:55:bf:15:24:39:
c0:1d:09:2e:84:a8:ca:1c:66:c5:23:3e:86:4e:19:1f:56:1a:
3b:27:95:cf:b1:89:46:cc:9e:03:80:46:f1:a8:af:15:7e:70:
8a:cd:d4:d6:fa:b0:b8:28:cc:5b:37:40:6c:89:ad:76:4b:fc:
5f:1a:32:9c:84:dc:a7:cf:cf:7b:a3:b0:c7:60:e2:13:cd:89:
b6:d6:71:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC
RjZCMTIyQUUwHhcNMjYwOTI2MTg1MjEzWhcNMjYxMDAzMTg1MjEzWjAYMRYwFAYD
VQQDEw02YWI4MTQ1ZC0yZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnwq2oB43Dk/hKKXRRMXHeUScstz1ZA+wazu0/6oQc2GgkzAjRIe45sy1hgxb
ovlrSSFA8AcdLgKCQd3Hpxc6FlRW1BBltbimT3GYNHaZm98ScCvzC5GclOaUZrWS
sZXD+cU0DMjyrf+xrOGjQAhyQgx42rRYy8UDxuzgvKI0s8e7tDwbfrOxstVKeFFx
lIYWFdV1B2Ee008Kqzof76qrVN9Vpu5L9G3RL3ceXBYY2YRJWqDjDnWKwA9GGloH
pUKdNQAxZgqAfcKbgZ/PZJCnE/nvGmf0yUDzxFUwf9RLBy6Mc9uL4RRw6uzuH1C1
35i68Tt9n/rPX+YOUUgMQXb75wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8TinzK
D2UJiWHt/J0qyRzfYeNoMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND
NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3
OFlZaUhScVpnbnlfYXhJcTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE5mAkQPfRQbf6bk/0nycOwkmjTE1ZwPqfwHkFnK1WnGax386XBgCgoSwumEz
g/tx+feRgNhv5vFdkkp/L5PShmZR5AdaW0YLItex+JkiMGiBWkoSyEydy4CXUBE8
OrdPPJeNJqoxarTonWkqBZptv4dTdW6z6c/5mCvpxowbT0Y6WXNY6cd5Qfe003ch
nGefPQKKiZfBwRl8ant+dlOxJMaJGF0BIg+d19GS5WQDJ1W/FSQ5wB0JLoSoyhxm
xSM+hk4ZH1YaOyeVz7GJRsyeA4BG8aivFX5wis3U1vqwuCjMWzdAbImtdkv8Xxoy
nITcp8/Pe6Owx2DiE82JttZxYQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 04:34:08 2026 by rpki-client