$ rpki-client -vvf rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft File: iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft (raw, json) Hash identifier: NyuG5t4Ml5RVrb7UuT42P4XZteMPrxthtu64yslJ+GI= Subject key identifier: F7:BF:E9:80:82:89:D8:4B:16:DF:FB:36:7A:8D:31:5D:7F:1F:87:66 Authority key identifier: 88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8 Certificate issuer: /CN=A9182948/serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8 Certificate serial: 10B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft Manifest number: 10AB Signing time: Fri 30 May 2025 17:30:20 +0000 Manifest this update: Fri 30 May 2025 17:30:20 +0000 Manifest next update: Fri 06 Jun 2025 17:30:20 +0000 Files and hashes: 1: iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl (hash: wBN/5A03VZwRrhcw6U4y0tPflxELadvRHzfnjL+20ks=) 2: 2DB6F886286111E9BA245A71C4F9AE02.roa (hash: u+yqPzFm9GwHKpt6ah61N8BF+hT/b/OI4bIwjmc4Bss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4278 (0x10b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182948, serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8 Validity Not Before: May 30 17:30:20 2025 GMT Not After : Jun 6 17:30:20 2025 GMT Subject: CN=6839eb2c-066f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:bf:e5:ef:00:56:45:f5:d4:2d:5f:23:1e: 3c:28:14:ec:04:6e:0a:4d:af:b0:96:20:22:60:30: c3:bc:f1:90:b6:bc:f9:d4:35:5f:81:f3:65:fa:38: 72:93:45:10:57:f9:5c:98:d9:62:d1:1b:a5:22:53: 3f:ee:41:ff:3b:9f:63:06:80:da:79:58:6b:0e:a0: 96:07:8e:c9:37:ec:b9:da:b0:3f:75:36:91:1f:8f: b6:69:97:3f:4c:d3:e2:a3:1b:87:4b:d4:5d:98:4b: 0c:32:3a:b7:bd:70:71:c0:a5:1f:12:89:ba:f4:1b: c6:da:50:f2:be:74:c8:2b:aa:63:a9:a0:c7:0f:c2: db:2f:67:05:f5:3c:62:3c:09:75:2b:24:14:06:2e: f0:20:69:77:e0:d2:f6:04:60:d1:ab:27:cf:8d:a1: 45:0f:35:31:62:89:7b:ac:63:92:45:d6:27:39:c1: e0:ca:c0:73:19:99:90:a2:e3:fa:d1:1c:20:38:79: f7:bf:17:9a:09:2d:3b:21:59:35:1f:aa:d4:2f:17: a9:be:77:3b:37:02:00:3e:05:08:a7:5f:21:7e:da: 10:45:3d:6d:3a:8b:64:87:75:38:49:82:ea:a4:23: 28:b2:c3:3c:1c:db:fe:d5:e2:c9:b4:cf:40:e0:ac: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BF:E9:80:82:89:D8:4B:16:DF:FB:36:7A:8D:31:5D:7F:1F:87:66 X509v3 Authority Key Identifier: keyid:88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:41:73:dd:9a:a7:bb:70:91:52:9d:7e:4f:fe:e3:40:d1:4e: be:3e:df:5f:14:db:1f:90:40:79:00:a0:d7:28:5a:a3:9c:65: 20:36:af:7e:84:c2:a3:5a:eb:c5:a3:38:6c:5b:99:d4:f3:f2: e6:18:f6:70:91:99:33:ce:59:8a:ac:ec:76:90:08:a0:a2:67: 79:c3:31:b5:63:d5:0a:c0:5a:fa:86:98:37:fb:a8:45:09:76: ff:fd:63:15:14:6c:c6:56:c0:b7:6c:5c:d8:04:64:85:27:1d: 88:d2:a4:ec:7a:d0:a3:cf:45:d8:1c:e9:6a:15:00:f1:bc:a3: e7:8c:59:5c:be:8e:f9:18:19:d2:ad:30:ee:2d:f0:f6:d9:bb: 42:0c:34:9a:df:64:52:30:8f:85:8a:b9:d5:5b:00:b5:64:35: 84:cf:cf:99:ee:6c:5e:24:59:d9:16:1b:22:a0:80:1b:64:a9: 8c:02:99:3b:2f:d1:08:c4:08:54:c3:ad:ca:44:f3:5d:80:27: dd:c5:c2:8e:14:e6:d1:3f:ea:0b:84:66:e0:2e:86:73:60:3c: 8e:39:b0:ff:c8:b5:a3:4d:2f:d1:8e:f1:9f:7b:5a:6d:71:01: 37:39:ce:a5:74:32:aa:07:92:c8:dd:c3:62:f4:b7:65:b6:9a: fc:d8:81:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5NDgxMTAvBgNVBAUTKDg4MTJDODY3RjZBNjU3ODgwOENEOTJBNTBCQjM5NTJB RjU3Nzc4RjgwHhcNMjUwNTMwMTczMDIwWhcNMjUwNjA2MTczMDIwWjAYMRYwFAYD VQQDEw02ODM5ZWIyYy0wNjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraq/5e8AVkX11C1fIx48KBTsBG4KTa+wliAiYDDDvPGQtrz51DVfgfNl+jhy k0UQV/lcmNli0RulIlM/7kH/O59jBoDaeVhrDqCWB47JN+y52rA/dTaRH4+2aZc/ TNPioxuHS9RdmEsMMjq3vXBxwKUfEom69BvG2lDyvnTIK6pjqaDHD8LbL2cF9Txi PAl1KyQUBi7wIGl34NL2BGDRqyfPjaFFDzUxYol7rGOSRdYnOcHgysBzGZmQouP6 0RwgOHn3vxeaCS07IVk1H6rULxepvnc7NwIAPgUIp18hftoQRT1tOotkh3U4SYLq pCMossM8HNv+1eLJtM9A4KxQ8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPe/6YCC idhLFt/7NnqNMV1/H4dmMB8GA1UdIwQYMBaAFIgSyGf2pleICM2SpQuzlSr1d3j4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjk0OC9FRkE1OEJENjI3 RjAxMUU5ODg0NjhDMUJDNEY5QUUwMi9pQkxJWl9hbVY0Z0l6WktsQzdPVkt2VjNl UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lCTElaX2FtVjRnSXpaS2xDN09WS3ZWM2VQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjk0OC9FRkE1OEJENjI3RjAxMUU5ODg0NjhDMUJDNEY5QUUwMi9pQkxJWl9hbVY0 Z0l6WktsQzdPVkt2VjNlUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFQXPdmqe7cJFSnX5P/uNA0U6+Pt9fFNsfkEB5AKDXKFqjnGUgNq9+ hMKjWuvFozhsW5nU8/LmGPZwkZkzzlmKrOx2kAigomd5wzG1Y9UKwFr6hpg3+6hF CXb//WMVFGzGVsC3bFzYBGSFJx2I0qTsetCjz0XYHOlqFQDxvKPnjFlcvo75GBnS rTDuLfD22btCDDSa32RSMI+FirnVWwC1ZDWEz8+Z7mxeJFnZFhsioIAbZKmMApk7 L9EIxAhUw63KRPNdgCfdxcKOFObRP+oLhGbgLoZzYDyOObD/yLWjTS/RjvGfe1pt cQE3Oc6ldDKqB5LI3cNi9Ldltpr82IFI -----END CERTIFICATE-----Generated at Sat May 31 17:27:59 2025 by rpki-client