$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json) Hash identifier: ow2Lc2m+0eykKwWZlS+U1vuOKrtsru4Qsv7TznlulWQ= Subject key identifier: 09:BF:D8:CA:88:18:1E:89:3E:03:B6:51:C2:CB:62:3E:8E:B2:96:06 Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Certificate serial: 0B3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft Manifest number: 0B25 Signing time: Sat 26 Apr 2025 19:02:30 +0000 Manifest this update: Sat 26 Apr 2025 19:02:30 +0000 Manifest next update: Sat 03 May 2025 19:02:30 +0000 Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: DLerjs/A/PGdgFwm+gWYGVj7BtogReWBoFBhrXw7xXk=) 2: 1F676C22068711EDA1C2070DC4F9AE02.roa (hash: js7wAPY4vYVuobTGafcZGa/sKzvGw3A4kNsurTbXJzQ=) 3: FB4D7A105BC611EFA9919382C4F9AE02.roa (hash: 7GYs/P+QyXtP6LHRFVs3ZOTo2+7xsIAwWSdZChoitdk=) 4: EE611404E51B11EF98150C30C4F9AE02.roa (hash: S6MfW/3Ap7vt/xYRzoiVOd+LSZB49FIFU+XiTz52c7E=) 5: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: 9Wsge6uN8/kWPU23/DSAiXCE5pnA2uN+jA1/GNMc3O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2876 (0xb3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Validity Not Before: Apr 26 19:02:30 2025 GMT Not After : May 3 19:02:30 2025 GMT Subject: CN=680d2dc6-c14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:41:0a:46:d4:3e:92:8f:3d:ea:db:39:cb: c2:0f:3f:b9:a5:61:c3:13:68:d7:ce:87:12:8b:de: 39:6b:f0:2f:5c:50:e6:18:28:fa:8d:fb:82:e3:60: 7d:15:60:ab:75:37:86:07:0a:6b:3a:dd:57:e2:16: e3:b2:db:b9:31:72:26:c0:b9:61:88:c4:9a:d9:df: a8:da:77:1e:7d:c2:42:d4:15:ee:a2:99:35:79:b9: e7:78:5b:97:82:06:fb:5c:72:94:24:ba:7e:76:9b: ac:0d:a7:1c:f9:74:73:06:ee:14:9b:15:11:59:eb: c6:b8:94:81:8b:cc:c6:78:92:f9:8c:f2:c8:8b:8e: c3:5d:b2:c6:a9:4c:f0:3b:ec:d2:9a:1e:15:49:58: 7a:60:98:ad:86:b1:da:f3:17:13:b7:e7:0f:65:2f: 68:d9:ab:07:af:3c:76:6a:3f:42:29:92:e3:8a:73: 27:5a:ff:76:3b:07:ff:fb:93:a3:4d:64:a5:4a:7d: 84:56:43:5d:99:25:d0:d1:f6:37:60:75:18:a3:f7: 77:7f:ea:23:59:5f:68:4d:16:e6:68:f8:d8:6c:09: 0f:b1:68:6c:fd:d5:59:dc:3b:bd:77:4b:c6:27:dc: d4:9e:cf:bd:95:ff:e9:40:1f:e8:ee:f5:6a:66:1a: 6e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BF:D8:CA:88:18:1E:89:3E:03:B6:51:C2:CB:62:3E:8E:B2:96:06 X509v3 Authority Key Identifier: keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ff:7f:95:f3:5c:e9:48:17:f0:2e:b6:28:d2:d5:de:24:ee: 28:35:c0:e0:ea:e9:3b:6c:86:40:e5:be:28:af:34:92:08:49: 34:e2:49:be:98:30:78:35:a0:41:af:87:03:a4:04:1d:e3:02: 15:44:81:d5:2f:d5:44:9e:15:f7:61:93:f0:58:eb:65:af:3a: aa:ac:43:f3:88:13:39:31:9a:67:f0:0c:f3:1e:91:84:e2:a4: f7:cd:fa:52:2f:7b:b8:00:ac:bb:c1:22:9c:6c:20:78:75:da: df:ca:ba:15:e5:2a:14:90:bc:ee:f8:ce:99:bd:4b:88:85:aa: 9a:2d:3f:9c:a1:7f:df:9f:c6:ed:c2:fb:21:6b:88:87:cb:ae: b1:ed:18:ea:28:c4:2e:38:69:d0:cd:86:0f:7f:7c:ec:cf:48: 4f:f3:b2:4e:b3:74:af:6a:9f:61:80:cf:75:74:81:35:13:e2: 3a:5a:03:3b:cf:76:af:c8:89:0b:cd:b9:ed:fc:b3:71:ed:b0: 12:22:0a:d0:73:1b:c1:ef:2b:af:4b:28:3c:c1:cf:68:fc:29: b4:ab:72:c8:e8:34:94:e6:96:dd:ef:0a:03:cc:ce:e4:77:de: 80:59:2f:64:e6:46:0c:7c:91:bf:4f:2f:bf:0f:12:49:3a:c2: f1:8b:2e:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC RjZCMTIyQUUwHhcNMjUwNDI2MTkwMjMwWhcNMjUwNTAzMTkwMjMwWjAYMRYwFAYD VQQDEw02ODBkMmRjNi1jMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/5BCkbUPpKPPerbOcvCDz+5pWHDE2jXzocSi945a/AvXFDmGCj6jfuC42B9 FWCrdTeGBwprOt1X4hbjstu5MXImwLlhiMSa2d+o2ncefcJC1BXuopk1ebnneFuX ggb7XHKUJLp+dpusDacc+XRzBu4UmxURWevGuJSBi8zGeJL5jPLIi47DXbLGqUzw O+zSmh4VSVh6YJithrHa8xcTt+cPZS9o2asHrzx2aj9CKZLjinMnWv92Owf/+5Oj TWSlSn2EVkNdmSXQ0fY3YHUYo/d3f+ojWV9oTRbmaPjYbAkPsWhs/dVZ3Du9d0vG J9zUns+9lf/pQB/o7vVqZhpuwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAm/2MqI GB6JPgO2UcLLYj6OspYGMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3 OFlZaUhScVpnbnlfYXhJcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk/3+V81zpSBfwLrYo0tXeJO4oNcDg6uk7bIZA5b4orzSSCEk04km+ mDB4NaBBr4cDpAQd4wIVRIHVL9VEnhX3YZPwWOtlrzqqrEPziBM5MZpn8AzzHpGE 4qT3zfpSL3u4AKy7wSKcbCB4ddrfyroV5SoUkLzu+M6ZvUuIhaqaLT+coX/fn8bt wvsha4iHy66x7RjqKMQuOGnQzYYPf3zsz0hP87JOs3Svap9hgM91dIE1E+I6WgM7 z3avyIkLzbnt/LNx7bASIgrQcxvB7yuvSyg8wc9o/Cm0q3LI6DSU5pbd7woDzM7k d96AWS9k5kYMfJG/Ty+/DxJJOsLxiy6p -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:56 2025 by rpki-client on console.sobornost.net