$ rpki-client -vvf rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft File: iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft (raw, json) Hash identifier: nPHnlXWBcYPqK8mOw/MJ3oojPL4/0Z5vCYTrfBLh3aA= Subject key identifier: 07:19:EC:37:62:51:1B:95:73:38:2C:8B:85:96:1C:6A:07:EB:2A:AF Authority key identifier: 88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8 Certificate issuer: /CN=A9182948/serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8 Certificate serial: 0FE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft Manifest number: 0FDF Signing time: Fri 26 Apr 2024 18:02:34 +0000 Manifest this update: Fri 26 Apr 2024 18:02:34 +0000 Manifest next update: Fri 03 May 2024 18:02:34 +0000 Files and hashes: 1: iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl (hash: o2H0J5PoAZ5xtn+LgwR5mFr9aa2g598qAM+Fhz8uQA8=) 2: 2DB6F886286111E9BA245A71C4F9AE02.roa (hash: pV9KN5MeTOu2qmu0WIHii3a+U30QMLMqCUvjqN3GmOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 18:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4073 (0xfe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182948/serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8 Validity Not Before: Apr 26 18:02:34 2024 GMT Not After : May 3 18:02:34 2024 GMT Subject: CN=662bec3a-516d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:fa:11:3d:34:72:97:ea:b5:8c:06:9f:7e: f9:0c:5b:a6:b7:cc:53:d0:1a:bc:66:1e:52:6a:6b: ff:fb:6f:84:9c:11:8e:2c:55:c7:52:38:ef:5c:59: ed:96:c6:dd:ca:62:93:c3:1e:5c:5e:8f:b2:10:47: 9b:55:7c:10:af:b1:35:48:b5:2f:33:62:af:31:32: 9f:3c:57:c8:d8:90:bc:fc:24:57:8e:c7:4d:c6:5a: 8b:df:99:d8:4c:fa:8e:7b:24:68:8d:a5:f3:73:7c: e6:19:07:f2:86:9e:5b:3a:cf:6a:67:4b:b4:fe:e0: eb:98:63:98:94:3d:9c:ba:92:52:88:61:fa:94:de: c9:ac:b8:f4:c8:0c:cf:79:3b:0d:85:73:db:df:04: 5c:b1:98:15:a3:d0:32:1f:fc:53:a8:c6:ed:b3:38: 28:c3:1f:9c:bc:a1:ad:2a:8c:13:90:d7:35:22:6a: 8f:cf:55:6f:fd:7f:fe:21:93:d6:07:61:7f:a1:92: c6:6a:73:65:e8:37:a5:a5:ab:8d:23:4c:c0:99:0a: 7b:92:e9:cc:9d:a8:48:af:92:00:11:db:d9:5d:d8: ca:a9:ad:37:9c:c9:eb:91:b5:9e:56:a0:fa:2b:21: 70:83:0b:f4:f2:41:2d:16:46:3d:ae:f5:c6:d2:c7: d1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:19:EC:37:62:51:1B:95:73:38:2C:8B:85:96:1C:6A:07:EB:2A:AF X509v3 Authority Key Identifier: keyid:88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:bb:00:77:02:e6:28:3a:e1:d9:cf:e2:67:73:b5:12:38:b6: 85:96:ed:f0:6a:6a:a5:55:e8:f5:cd:b6:5f:ae:d3:3e:17:c9: 49:0d:f5:f1:c0:3c:63:77:23:c6:fd:9d:97:c4:89:e4:fc:22: 75:8b:cf:22:a8:2b:28:79:9b:3d:86:64:bc:ab:90:ef:b9:29: 1e:56:c1:72:1e:b8:b3:13:a9:35:1b:76:62:12:86:43:53:dd: 79:6c:62:29:23:ad:de:8b:4b:f7:41:f8:d1:61:bb:49:aa:53: ba:3d:e6:f9:a1:d2:0e:94:82:09:5c:49:16:3c:05:8d:61:00: 87:18:17:08:d3:3e:9b:4d:a1:05:74:bf:ee:15:36:02:23:79: 02:4c:66:5e:3f:79:e3:6e:5b:6b:44:40:4f:d9:fd:a0:01:c3: 07:c3:49:46:6d:2e:39:0b:84:e3:a1:a4:d0:d0:c8:3d:3a:42: 64:47:0f:e3:1a:ae:46:e9:05:26:72:50:6d:cd:fc:b6:8f:a1: 2c:a5:e0:aa:02:30:10:80:69:9c:48:01:c0:c1:2a:ba:5d:d6: e5:04:88:1e:1a:77:59:25:c7:90:e2:56:86:a7:b8:08:84:ea: a5:b3:73:87:1d:04:f4:d5:c4:29:bf:93:e3:1e:d5:9a:b9:e8: ba:3b:60:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5NDgxMTAvBgNVBAUTKDg4MTJDODY3RjZBNjU3ODgwOENEOTJBNTBCQjM5NTJB RjU3Nzc4RjgwHhcNMjQwNDI2MTgwMjM0WhcNMjQwNTAzMTgwMjM0WjAYMRYwFAYD VQQDEw02NjJiZWMzYS01MTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaP6ET00cpfqtYwGn375DFumt8xT0Bq8Zh5Samv/+2+EnBGOLFXHUjjvXFnt lsbdymKTwx5cXo+yEEebVXwQr7E1SLUvM2KvMTKfPFfI2JC8/CRXjsdNxlqL35nY TPqOeyRojaXzc3zmGQfyhp5bOs9qZ0u0/uDrmGOYlD2cupJSiGH6lN7JrLj0yAzP eTsNhXPb3wRcsZgVo9AyH/xTqMbtszgowx+cvKGtKowTkNc1ImqPz1Vv/X/+IZPW B2F/oZLGanNl6DelpauNI0zAmQp7kunMnahIr5IAEdvZXdjKqa03nMnrkbWeVqD6 KyFwgwv08kEtFkY9rvXG0sfR0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcZ7Ddi URuVczgsi4WWHGoH6yqvMB8GA1UdIwQYMBaAFIgSyGf2pleICM2SpQuzlSr1d3j4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjk0OC9FRkE1OEJENjI3 RjAxMUU5ODg0NjhDMUJDNEY5QUUwMi9pQkxJWl9hbVY0Z0l6WktsQzdPVkt2VjNl UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lCTElaX2FtVjRnSXpaS2xDN09WS3ZWM2VQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjk0OC9FRkE1OEJENjI3RjAxMUU5ODg0NjhDMUJDNEY5QUUwMi9pQkxJWl9hbVY0 Z0l6WktsQzdPVkt2VjNlUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUuwB3AuYoOuHZz+Jnc7USOLaFlu3wamqlVej1zbZfrtM+F8lJDfXx wDxjdyPG/Z2XxInk/CJ1i88iqCsoeZs9hmS8q5DvuSkeVsFyHrizE6k1G3ZiEoZD U915bGIpI63ei0v3QfjRYbtJqlO6Peb5odIOlIIJXEkWPAWNYQCHGBcI0z6bTaEF dL/uFTYCI3kCTGZeP3njbltrREBP2f2gAcMHw0lGbS45C4TjoaTQ0Mg9OkJkRw/j Gq5G6QUmclBtzfy2j6EspeCqAjAQgGmcSAHAwSq6XdblBIgeGndZJceQ4laGp7gI hOqls3OHHQT01cQpv5PjHtWauei6O2Cn -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:05 2024 by rpki-client on console-fra.rpki-client.org