Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
File:                     iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft (raw, json)
Hash identifier:          /ahMC6JHgsmneE2l0CB7kNbq0XC8Y+/XeFG5j4IM1yQ=
Subject key identifier:   9A:C5:B2:9D:AC:18:7B:8C:30:21:50:F8:21:AF:84:69:59:8D:4B:9A
Authority key identifier: 88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8
Certificate issuer:       /CN=A9182948/serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8
Certificate serial:       10BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
Manifest number:          10B3
Signing time:             Sat 14 Jun 2025 17:15:46 +0000
Manifest this update:     Sat 14 Jun 2025 17:15:46 +0000
Manifest next update:     Sat 21 Jun 2025 17:15:46 +0000
Files and hashes:         1: iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl (hash: vJIBK4RGdtdGfmLF+bCJy+Nd0JrzC6R65uYtxmyPnmo=)
                          2: 2DB6F886286111E9BA245A71C4F9AE02.roa (hash: u+yqPzFm9GwHKpt6ah61N8BF+hT/b/OI4bIwjmc4Bss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl
                          rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4286 (0x10be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182948, serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8
        Validity
            Not Before: Jun 14 17:15:46 2025 GMT
            Not After : Jun 21 17:15:46 2025 GMT
        Subject: CN=684dae42-97ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:f9:09:30:a4:fe:e5:6a:a6:05:41:87:aa:
                    f9:95:ae:77:16:fe:be:bb:0b:91:f6:ed:a8:1c:64:
                    2b:c0:98:e0:08:29:30:ad:14:e8:7e:7e:59:84:63:
                    e2:e0:96:36:92:03:9b:c6:61:5d:b7:f1:38:04:f0:
                    cd:59:f7:22:d7:c8:a1:b9:21:cc:54:39:36:9e:c5:
                    cd:67:d8:ae:51:82:14:7b:14:d7:d0:56:75:b3:f4:
                    2b:a2:7b:1b:c9:e2:e9:4a:f1:6e:31:69:94:92:81:
                    b9:87:46:51:25:8a:5f:8a:20:03:11:ea:4d:0d:0b:
                    1b:ff:d5:5d:16:b2:72:7e:86:3f:ac:ad:19:bb:cb:
                    ac:64:92:d5:0e:33:48:48:9d:25:a1:92:80:16:92:
                    9e:08:13:68:6e:aa:b7:fa:7f:40:d0:45:41:e8:f6:
                    c1:9e:7c:fa:7d:86:e8:a4:f2:a7:8c:b0:5b:83:0c:
                    be:2e:65:8e:2d:d7:cb:d5:22:cd:89:4c:ed:6d:aa:
                    e8:c4:49:4a:84:fb:d9:25:c6:d0:05:27:fc:18:29:
                    1a:c2:f1:21:ac:a4:1a:6d:c9:c7:46:6e:3a:6b:d7:
                    69:ba:4c:68:83:dd:f7:85:04:4f:73:7e:68:52:22:
                    f6:6d:29:88:76:c6:01:96:e8:ab:5c:c2:24:d5:62:
                    e0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C5:B2:9D:AC:18:7B:8C:30:21:50:F8:21:AF:84:69:59:8D:4B:9A
            X509v3 Authority Key Identifier:
                keyid:88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:82:f8:2e:90:f2:19:05:d8:c9:a3:3a:40:ab:20:51:bf:3c:
         20:98:d2:63:5b:5a:f5:57:cf:c5:c8:a6:c1:d9:76:f3:8e:57:
         4a:9d:e3:42:1c:d3:c6:1c:6c:82:e5:5a:45:f8:85:5e:65:bf:
         83:a3:17:88:ec:a1:00:3c:e7:b1:77:68:fb:90:42:3e:d3:1f:
         7f:46:04:22:a5:5e:e3:b2:5c:b7:13:f2:db:49:46:bb:a3:02:
         37:bb:1b:32:04:5f:7e:9f:6c:48:68:79:73:78:df:63:07:80:
         10:12:cb:3d:3e:30:c4:8a:a3:b8:0d:84:e9:8d:b4:35:98:fe:
         65:d0:55:0d:7a:b4:d3:8e:65:4a:f0:75:a5:48:30:2e:75:27:
         e0:67:dc:59:2b:d9:22:c0:8a:61:68:d1:3f:6d:c6:e9:ff:31:
         01:8b:f5:8c:39:a4:b8:93:6d:ac:ae:0b:1f:c3:d1:4d:c1:a5:
         90:85:24:d9:4e:4a:cc:a3:6f:53:ca:ce:60:ee:1e:29:0c:ca:
         05:fb:fa:f7:55:21:0d:77:4c:85:25:ac:e7:ae:c8:b0:1f:c0:
         fb:91:2d:30:02:a2:46:20:e7:1c:a7:1b:08:bf:08:03:c0:43:
         9d:f1:dc:38:c6:25:e8:77:d1:5e:8e:db:13:32:1e:45:12:87:
         7e:84:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:24:23 2025 by rpki-client