$ rpki-client -vvf rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft File: iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft (raw, json) Hash identifier: XLjaG+pvByw2Yep2V1FpvgOJBHMHEA8WJa04DwlLzt4= Subject key identifier: A3:58:D1:3D:B9:21:98:66:DD:86:54:D3:47:11:7C:9C:5F:35:39:BB Authority key identifier: 88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8 Certificate issuer: /CN=A9182948/serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8 Certificate serial: 10EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft Manifest number: 10E4 Signing time: Thu 18 Sep 2025 17:27:24 +0000 Manifest this update: Thu 18 Sep 2025 17:27:24 +0000 Manifest next update: Thu 25 Sep 2025 17:27:24 +0000 Files and hashes: 1: iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl (hash: N0NjkBWEr0umf/1aSBfMoLsQTHC14CByWQ389XEWhQM=) 2: 2DB6F886286111E9BA245A71C4F9AE02.roa (hash: u+yqPzFm9GwHKpt6ah61N8BF+hT/b/OI4bIwjmc4Bss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4335 (0x10ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182948, serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8 Validity Not Before: Sep 18 17:27:24 2025 GMT Not After : Sep 25 17:27:24 2025 GMT Subject: CN=68cc40fc-32ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:1a:4d:33:f3:73:df:45:57:6a:87:b6:41: ae:1d:09:34:53:e2:b9:78:83:4b:64:76:33:d5:81: bc:a1:90:c2:be:66:62:2b:6a:b8:88:56:ea:e0:f9: dc:57:a4:c7:c4:84:0a:3f:bf:d7:1c:cf:7b:79:8a: 6c:90:67:61:b0:d2:46:8a:ab:cc:42:e5:89:7b:5f: 37:88:2f:97:11:07:9b:31:5e:05:95:1f:97:8a:62: 2b:4d:df:85:84:63:ea:21:1c:e6:c7:fc:ae:39:57: 50:dd:d7:e5:7e:7b:12:69:bd:a5:7e:21:6b:a8:f5: e7:0b:89:6c:39:fe:8b:1a:b9:d0:36:57:1c:cc:6f: b5:2e:30:36:3f:38:c9:37:5a:90:e8:0a:7a:cb:09: 2f:be:8b:45:1f:86:34:07:87:6c:b5:34:28:0a:f9: 74:93:39:6e:24:7c:17:23:3a:29:3e:a4:a6:59:64: df:92:d0:38:cb:18:b5:9d:f1:3e:a0:b2:07:b3:93: 6f:ff:3c:9b:5d:d2:31:17:90:df:69:0a:28:10:75: dc:e5:d8:78:91:8f:71:24:ea:a7:fa:29:81:4f:c7: aa:0a:b6:30:55:59:61:af:55:4a:fc:49:d6:e8:6f: e6:21:07:b8:36:21:80:04:9c:74:74:22:8a:40:0f: 9d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:58:D1:3D:B9:21:98:66:DD:86:54:D3:47:11:7C:9C:5F:35:39:BB X509v3 Authority Key Identifier: keyid:88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:1f:58:b2:45:87:d5:14:be:43:94:44:3c:78:95:50:da:cf: 54:21:71:ac:10:bb:3a:dc:56:09:01:10:d9:55:bf:39:32:0c: 03:0a:7f:43:df:a1:7d:5e:da:1c:2c:5a:ba:44:41:86:1b:58: da:f7:8a:30:07:38:64:93:4d:b0:cd:38:08:13:90:62:ce:98: 7c:c6:f0:9f:0d:0c:fc:2b:f1:af:63:19:fa:5c:68:07:d9:ad: 24:b0:55:ad:a6:cc:54:44:2d:23:21:ef:82:38:40:fc:95:9e: 7b:34:f3:73:75:7c:0e:e6:f3:63:23:42:40:83:88:5e:9c:eb: f3:53:1b:a1:32:ba:f8:29:38:67:fa:b7:82:c7:73:e0:b7:3c: 01:51:55:0f:9d:90:c5:1e:99:5b:c5:8a:a6:dd:69:8f:4a:a3: b1:f4:8f:b4:57:fa:9a:23:9d:18:cb:95:59:28:26:9a:a4:22: 49:c0:9d:14:7b:2c:19:de:17:e5:3b:fb:62:60:23:9f:c5:04: 18:e1:c5:42:d6:d0:f5:5c:34:0a:6e:73:af:c0:35:e3:e7:9c: f2:54:6f:36:38:ec:3b:c3:c9:ce:de:e6:e5:54:ab:af:40:fd: 81:62:39:90:03:df:43:bd:b7:c6:06:b8:0d:43:68:1a:bd:27: 80:a3:5e:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5NDgxMTAvBgNVBAUTKDg4MTJDODY3RjZBNjU3ODgwOENEOTJBNTBCQjM5NTJB RjU3Nzc4RjgwHhcNMjUwOTE4MTcyNzI0WhcNMjUwOTI1MTcyNzI0WjAYMRYwFAYD VQQDEw02OGNjNDBmYy0zMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqYaTTPzc99FV2qHtkGuHQk0U+K5eINLZHYz1YG8oZDCvmZiK2q4iFbq4Pnc V6THxIQKP7/XHM97eYpskGdhsNJGiqvMQuWJe183iC+XEQebMV4FlR+XimIrTd+F hGPqIRzmx/yuOVdQ3dflfnsSab2lfiFrqPXnC4lsOf6LGrnQNlcczG+1LjA2PzjJ N1qQ6Ap6ywkvvotFH4Y0B4dstTQoCvl0kzluJHwXIzopPqSmWWTfktA4yxi1nfE+ oLIHs5Nv/zybXdIxF5DfaQooEHXc5dh4kY9xJOqn+imBT8eqCrYwVVlhr1VK/EnW 6G/mIQe4NiGABJx0dCKKQA+d3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNY0T25 IZhm3YZU00cRfJxfNTm7MB8GA1UdIwQYMBaAFIgSyGf2pleICM2SpQuzlSr1d3j4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjk0OC9FRkE1OEJENjI3 RjAxMUU5ODg0NjhDMUJDNEY5QUUwMi9pQkxJWl9hbVY0Z0l6WktsQzdPVkt2VjNl UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lCTElaX2FtVjRnSXpaS2xDN09WS3ZWM2VQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjk0OC9FRkE1OEJENjI3RjAxMUU5ODg0NjhDMUJDNEY5QUUwMi9pQkxJWl9hbVY0 Z0l6WktsQzdPVkt2VjNlUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYH1iyRYfVFL5DlEQ8eJVQ2s9UIXGsELs63FYJARDZVb85MgwDCn9D 36F9XtocLFq6REGGG1ja94owBzhkk02wzTgIE5Bizph8xvCfDQz8K/GvYxn6XGgH 2a0ksFWtpsxURC0jIe+COED8lZ57NPNzdXwO5vNjI0JAg4henOvzUxuhMrr4KThn +reCx3PgtzwBUVUPnZDFHplbxYqm3WmPSqOx9I+0V/qaI50Yy5VZKCaapCJJwJ0U eywZ3hflO/tiYCOfxQQY4cVC1tD1XDQKbnOvwDXj55zyVG82OOw7w8nO3ublVKuv QP2BYjmQA99DvbfGBrgNQ2gavSeAo16X -----END CERTIFICATE-----Generated at Fri Sep 19 05:21:05 2025 by rpki-client