$ rpki-client -vvf rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft File: iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft (raw, json) Hash identifier: 3EcDt81rRD+kQ7KR0ukEcAXnDn0dGZXJuNjnu6aB4II= Subject key identifier: 3B:20:E8:18:4D:AB:C7:BE:45:AF:D0:6D:02:36:C5:60:9D:6A:73:39 Authority key identifier: 88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8 Certificate issuer: /CN=A9182948/serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8 Certificate serial: 1054 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft Manifest number: 104A Signing time: Fri 22 Nov 2024 17:22:30 +0000 Manifest this update: Fri 22 Nov 2024 17:22:30 +0000 Manifest next update: Fri 29 Nov 2024 17:22:30 +0000 Files and hashes: 1: iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl (hash: UdOopXnZRnRd0YBTEJ8EX82hsrjrODcJiH6+gsUAv10=) 2: 2DB6F886286111E9BA245A71C4F9AE02.roa (hash: pV9KN5MeTOu2qmu0WIHii3a+U30QMLMqCUvjqN3GmOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4180 (0x1054) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182948/serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8 Validity Not Before: Nov 22 17:22:30 2024 GMT Not After : Nov 29 17:22:30 2024 GMT Subject: CN=6740bdd6-9a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:f6:52:67:2b:9c:bc:46:09:72:32:c4:94: a9:31:71:56:0e:17:8a:64:c3:01:fa:8e:0e:5c:64: 18:13:ed:c5:3b:dc:9e:6f:4f:f4:89:56:ec:bc:89: f1:d3:8c:be:99:de:04:df:87:b3:c2:f6:85:71:f4: cf:9a:6d:a1:51:c8:fe:a7:05:70:a8:f7:bb:14:c1: dd:e1:3d:4c:cd:56:24:92:52:4b:7d:17:41:d9:b4: f0:38:9c:58:cb:f4:2b:71:9b:52:70:c1:f3:32:b5: 1e:17:8a:cc:ec:bd:96:7b:01:cf:11:7f:19:d4:da: f7:73:2a:84:83:dd:33:48:c5:93:75:17:cd:74:02: ff:b9:21:d9:42:69:0a:79:f4:fd:51:fe:09:08:54: 85:d7:6f:26:b2:89:a8:43:8e:cc:ec:dc:c4:cf:9f: 45:46:a1:eb:7f:69:62:1b:72:2e:c6:45:84:7e:52: 41:67:2c:0c:1d:43:74:e8:5b:3f:e2:a0:31:02:03: 74:8f:89:e2:6f:6c:20:f8:ef:a6:89:2c:28:ef:2b: a4:81:b0:b9:47:1a:82:47:37:24:b1:1d:cb:52:c5: 8d:34:04:02:2f:8f:21:a7:6b:b0:45:2b:f3:0f:74: cd:d0:3a:69:71:e5:31:eb:40:8a:4b:77:74:7b:5d: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:20:E8:18:4D:AB:C7:BE:45:AF:D0:6D:02:36:C5:60:9D:6A:73:39 X509v3 Authority Key Identifier: keyid:88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:04:3f:9f:ba:db:be:72:6d:9d:cc:d5:f4:c3:b6:5b:ef:33: 0d:be:e8:96:4d:13:32:54:d6:26:5b:ff:40:c5:04:9b:8e:29: 15:2e:e1:a1:d3:73:5f:ca:71:c3:3c:cb:ce:00:10:43:4c:05: b8:88:86:9c:f5:56:e2:55:af:f4:dc:c7:8d:b9:e1:ad:d5:0d: d0:d5:21:05:79:4c:4c:11:ea:b9:b4:a2:aa:4a:a6:71:58:82: 24:9f:76:05:db:f9:6f:c9:2c:21:bc:5e:9b:6b:3e:43:d8:18: 9d:78:02:28:f4:6f:e3:5e:c9:93:14:90:b3:51:95:d0:91:f5: ed:23:8c:cf:6e:be:2a:66:92:1b:4d:e3:44:3a:f2:3c:3d:d4: 47:6c:48:c2:e7:cf:f7:f4:29:0a:6a:0d:a5:3c:ba:21:25:22: 24:12:77:27:d9:6f:f2:f2:99:8f:50:60:84:9b:41:73:dc:c8: 8f:89:ee:c3:d1:6e:a7:07:2f:50:15:86:6e:b0:f5:6d:7a:08: 29:e2:bf:68:75:55:fa:7a:51:d7:58:5f:c1:8d:c8:1b:e5:4c: 46:aa:39:8d:d0:e4:46:67:48:40:38:6e:c9:13:11:31:23:c3: 16:0e:12:0f:6b:63:c8:2b:8e:3f:96:d3:94:39:b2:fc:24:0e: 5f:2d:42:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5NDgxMTAvBgNVBAUTKDg4MTJDODY3RjZBNjU3ODgwOENEOTJBNTBCQjM5NTJB RjU3Nzc4RjgwHhcNMjQxMTIyMTcyMjMwWhcNMjQxMTI5MTcyMjMwWjAYMRYwFAYD VQQDEw02NzQwYmRkNi05YTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfn2UmcrnLxGCXIyxJSpMXFWDheKZMMB+o4OXGQYE+3FO9yeb0/0iVbsvInx 04y+md4E34ezwvaFcfTPmm2hUcj+pwVwqPe7FMHd4T1MzVYkklJLfRdB2bTwOJxY y/QrcZtScMHzMrUeF4rM7L2WewHPEX8Z1Nr3cyqEg90zSMWTdRfNdAL/uSHZQmkK efT9Uf4JCFSF128msomoQ47M7NzEz59FRqHrf2liG3IuxkWEflJBZywMHUN06Fs/ 4qAxAgN0j4nib2wg+O+miSwo7yukgbC5RxqCRzcksR3LUsWNNAQCL48hp2uwRSvz D3TN0DppceUx60CKS3d0e11TuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsg6BhN q8e+Ra/QbQI2xWCdanM5MB8GA1UdIwQYMBaAFIgSyGf2pleICM2SpQuzlSr1d3j4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjk0OC9FRkE1OEJENjI3 RjAxMUU5ODg0NjhDMUJDNEY5QUUwMi9pQkxJWl9hbVY0Z0l6WktsQzdPVkt2VjNl UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lCTElaX2FtVjRnSXpaS2xDN09WS3ZWM2VQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjk0OC9FRkE1OEJENjI3RjAxMUU5ODg0NjhDMUJDNEY5QUUwMi9pQkxJWl9hbVY0 Z0l6WktsQzdPVkt2VjNlUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlBD+futu+cm2dzNX0w7Zb7zMNvuiWTRMyVNYmW/9AxQSbjikVLuGh 03NfynHDPMvOABBDTAW4iIac9VbiVa/03MeNueGt1Q3Q1SEFeUxMEeq5tKKqSqZx WIIkn3YF2/lvySwhvF6baz5D2BideAIo9G/jXsmTFJCzUZXQkfXtI4zPbr4qZpIb TeNEOvI8PdRHbEjC58/39CkKag2lPLohJSIkEncn2W/y8pmPUGCEm0Fz3MiPie7D 0W6nBy9QFYZusPVteggp4r9odVX6elHXWF/Bjcgb5UxGqjmN0ORGZ0hAOG7JExEx I8MWDhIPa2PIK44/ltOUObL8JA5fLUIl -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org