Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
File:                     iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft (raw, json)
Hash identifier:          MeUM3MVkAwiyeo5EkxB6aPvcnKuGPCjVw7TOdUd3eo4=
Subject key identifier:   6A:2E:15:8F:63:CE:E8:66:32:71:BC:0D:A6:30:13:8D:1F:08:A4:36
Authority key identifier: 88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8
Certificate issuer:       /CN=A9182948/serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8
Certificate serial:       115C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
Manifest number:          114E
Signing time:             Sat 04 Apr 2026 17:07:17 +0000
Manifest this update:     Sat 04 Apr 2026 17:07:16 +0000
Manifest next update:     Sat 11 Apr 2026 17:07:16 +0000
Files and hashes:         1: iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl (hash: YQked1KA++n+x+VyjL2DAt1J6qpSFF4weYIxl5i8n5g=)
                          2: 2DB6F886286111E9BA245A71C4F9AE02.roa (hash: zv7GfIY09Bk5QRI+ruOoctPMaKFJVRdn6Yb3uhIbOaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl
                          rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4444 (0x115c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182948, serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8
        Validity
            Not Before: Apr  4 17:07:16 2026 GMT
            Not After : Apr 11 17:07:16 2026 GMT
        Subject: CN=69d14544-294a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d1:ec:76:dd:0c:1f:43:b4:0f:5e:80:82:f6:
                    00:53:6b:63:bf:df:7c:b9:b1:5c:c2:e9:ed:17:50:
                    cb:8c:60:af:9d:4d:bc:b6:91:e1:b1:53:c3:48:03:
                    81:1e:45:08:04:bc:7e:ac:8c:19:c3:6a:a3:4d:72:
                    a5:81:66:cf:2f:ee:70:20:52:86:c7:2c:8d:3e:e4:
                    5a:f2:b9:62:13:94:24:21:1a:59:72:a7:7f:08:9d:
                    eb:7c:4d:3f:7d:7c:39:b7:5f:3b:86:9f:cd:ad:f2:
                    49:ed:98:68:9e:3e:93:af:35:22:45:f6:2f:aa:fb:
                    bd:da:45:8f:6d:4f:c2:9a:4b:e7:14:cc:17:96:32:
                    39:d0:64:ac:2e:fb:0c:21:ae:73:e8:28:50:be:c9:
                    91:57:e6:39:a5:3c:d6:e0:85:6e:b0:28:49:b5:fa:
                    12:5d:7e:2d:8d:0f:fc:90:70:06:d2:86:55:c0:75:
                    38:eb:ee:e0:7d:ff:cb:e3:ef:0c:25:83:41:93:75:
                    ea:24:8f:45:0f:47:47:7b:85:af:55:d4:01:c0:ee:
                    b9:f7:b5:8d:20:ce:80:a4:68:24:51:21:b2:88:20:
                    d9:c1:97:f2:be:39:84:53:01:44:f0:2b:22:bf:ad:
                    02:3f:03:dd:2e:f6:37:55:a0:a1:4f:a6:dc:05:36:
                    dd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2E:15:8F:63:CE:E8:66:32:71:BC:0D:A6:30:13:8D:1F:08:A4:36
            X509v3 Authority Key Identifier:
                keyid:88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5f:ba:ca:97:bb:ee:48:aa:18:75:a7:01:4e:f4:40:06:05:
         e0:d6:f8:c5:5f:57:4c:5c:02:ec:15:04:b3:7a:8c:0c:f1:17:
         b7:f8:fd:8c:b6:41:3c:9b:d2:5d:37:20:e8:1f:8b:1e:5b:51:
         9b:ea:1d:27:3a:30:58:9b:2e:3b:c0:fc:c0:3b:26:ae:a4:c9:
         52:6d:c8:ed:d6:55:bc:7a:08:ca:41:f2:7d:45:4a:e1:56:72:
         7e:a4:2a:ca:ef:d4:e7:f0:54:83:d1:1d:ca:6e:45:cd:c5:9d:
         4d:50:ff:32:a3:80:ea:75:61:03:87:78:0d:2f:70:fe:d8:b5:
         a3:20:73:63:4c:46:33:d2:bd:02:87:ed:8f:b9:61:c3:de:c8:
         11:e5:4b:ed:4a:08:7c:a0:22:62:71:98:a4:bb:25:ea:ed:c9:
         9d:8a:1c:d1:8e:69:18:91:9d:c3:1b:b2:4e:60:32:d0:3f:10:
         55:58:08:93:87:ca:c7:b5:60:3c:7e:d6:ca:6d:85:85:b7:6a:
         21:14:6f:3b:e3:66:23:d2:19:9c:ae:67:67:e9:6e:66:93:3a:
         88:64:38:8d:f8:55:77:89:08:1c:fb:52:9d:6b:bc:f8:9c:47:
         8c:f2:63:36:4e:74:a8:f7:55:94:ac:a2:b9:22:03:e8:7a:46:
         38:c8:55:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:12:16 2026 by rpki-client