Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
File:                     iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft (raw, json)
Hash identifier:          uDyQ75BKjHdj2Gpug05r5iblwzd/AdB4GZ+BiIU/G88=
Subject key identifier:   E6:AA:6C:CB:08:F7:EB:8C:8C:CD:06:80:F8:9B:BC:01:9B:9D:FC:C0
Authority key identifier: 88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8
Certificate issuer:       /CN=A9182948/serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8
Certificate serial:       1162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
Manifest number:          1154
Signing time:             Thu 16 Apr 2026 17:09:36 +0000
Manifest this update:     Thu 16 Apr 2026 17:09:36 +0000
Manifest next update:     Thu 23 Apr 2026 17:09:36 +0000
Files and hashes:         1: iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl (hash: g5bIVSGD2+/L5z8ksw2U9nguv7NM3LKDdAfVgZgRqUU=)
                          2: 2DB6F886286111E9BA245A71C4F9AE02.roa (hash: zv7GfIY09Bk5QRI+ruOoctPMaKFJVRdn6Yb3uhIbOaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl
                          rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4450 (0x1162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182948, serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8
        Validity
            Not Before: Apr 16 17:09:36 2026 GMT
            Not After : Apr 23 17:09:36 2026 GMT
        Subject: CN=69e117d0-86e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:cd:30:c3:8d:06:cd:00:5f:e4:3e:50:9f:
                    02:e0:d1:d1:e1:6e:54:8f:be:85:a6:4d:32:fd:f4:
                    28:ab:83:d7:df:2e:c7:fc:8f:d4:de:af:32:20:5f:
                    a9:b6:07:ba:a8:97:2d:2c:a9:c5:88:37:90:e3:c9:
                    1f:d7:57:be:ce:db:2c:2c:7c:02:e3:fd:c8:56:ba:
                    35:2b:1e:21:28:26:19:60:82:80:e9:3a:91:6f:27:
                    98:a8:57:f3:0b:81:98:0e:6f:28:d8:cb:f8:8d:ef:
                    0c:6b:e4:6d:9a:1e:78:0c:4f:d5:6e:95:d6:80:b9:
                    08:fb:4c:67:85:45:6d:4b:a5:de:4a:2b:92:76:cc:
                    e7:b8:15:3a:6a:e3:b4:f7:06:76:ab:8f:57:9b:51:
                    ea:09:c9:4e:c7:f0:41:e2:0b:08:60:ae:fe:bd:40:
                    22:28:30:b0:39:0c:d3:dc:2f:c6:69:de:13:43:82:
                    92:a2:c5:21:f3:35:08:5b:79:04:75:74:5e:f5:32:
                    aa:c5:b8:c2:c7:25:fe:35:ec:b6:e5:a0:2b:9b:65:
                    da:e2:d3:45:d3:f7:c4:64:74:1d:2c:45:fe:08:5c:
                    d3:f7:01:3a:e5:62:8f:89:6e:8f:47:c6:81:0f:2f:
                    91:5c:39:bc:d3:3a:64:2b:1b:0d:ce:bd:aa:e3:8d:
                    3e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AA:6C:CB:08:F7:EB:8C:8C:CD:06:80:F8:9B:BC:01:9B:9D:FC:C0
            X509v3 Authority Key Identifier:
                keyid:88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:57:28:3e:83:ff:65:62:ff:55:fc:b9:36:9a:3b:87:6f:71:
         d9:73:c2:1f:a6:94:8b:47:1e:89:4c:ec:23:a0:9a:e2:53:0a:
         3b:e8:88:78:a0:b1:0c:14:a5:1e:ac:0e:71:97:9a:3a:fb:9b:
         a2:3b:2d:ce:9e:63:48:79:7d:42:ad:19:90:e0:16:b4:f9:f5:
         61:b5:8d:90:46:b8:7b:a7:14:65:bd:5e:45:18:ed:b1:94:be:
         00:7d:8e:d7:46:00:c4:97:98:73:96:9c:48:cb:56:53:7d:86:
         81:af:a0:e8:c6:4b:ea:35:99:1f:a2:a6:aa:55:d7:2f:77:20:
         bd:4c:30:21:36:32:ae:2e:29:cc:60:39:41:77:a8:e6:70:06:
         58:76:77:26:70:cd:aa:50:19:8b:5c:41:70:52:74:eb:a8:61:
         9e:65:5b:f1:3c:13:61:13:7a:b0:4a:bc:24:96:2c:e9:9c:6f:
         63:41:1b:c7:be:8d:7f:87:a2:58:d2:f3:5e:ed:d8:b1:64:0b:
         f6:a4:87:6f:4a:ab:6b:6d:5c:33:76:50:55:d0:f3:42:70:05:
         c4:60:c7:ec:8a:08:24:20:1a:61:92:38:7f:97:8c:55:f3:54:
         4d:50:b8:c4:7b:f1:86:a9:cf:16:02:da:a2:49:50:a8:fa:f4:
         24:66:d9:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI5NDgxMTAvBgNVBAUTKDg4MTJDODY3RjZBNjU3ODgwOENEOTJBNTBCQjM5NTJB
RjU3Nzc4RjgwHhcNMjYwNDE2MTcwOTM2WhcNMjYwNDIzMTcwOTM2WjAYMRYwFAYD
VQQDEw02OWUxMTdkMC04NmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAptfNMMONBs0AX+Q+UJ8C4NHR4W5Uj76Fpk0y/fQoq4PX3y7H/I/U3q8yIF+p
tge6qJctLKnFiDeQ48kf11e+ztssLHwC4/3IVro1Kx4hKCYZYIKA6TqRbyeYqFfz
C4GYDm8o2Mv4je8Ma+Rtmh54DE/VbpXWgLkI+0xnhUVtS6XeSiuSdsznuBU6auO0
9wZ2q49Xm1HqCclOx/BB4gsIYK7+vUAiKDCwOQzT3C/Gad4TQ4KSosUh8zUIW3kE
dXRe9TKqxbjCxyX+Ney25aArm2Xa4tNF0/fEZHQdLEX+CFzT9wE65WKPiW6PR8aB
Dy+RXDm80zpkKxsNzr2q440+ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaqbMsI
9+uMjM0GgPibvAGbnfzAMB8GA1UdIwQYMBaAFIgSyGf2pleICM2SpQuzlSr1d3j4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjk0OC9FRkE1OEJENjI3
RjAxMUU5ODg0NjhDMUJDNEY5QUUwMi9pQkxJWl9hbVY0Z0l6WktsQzdPVkt2VjNl
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lCTElaX2FtVjRnSXpaS2xDN09WS3ZWM2VQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mjk0OC9FRkE1OEJENjI3RjAxMUU5ODg0NjhDMUJDNEY5QUUwMi9pQkxJWl9hbVY0
Z0l6WktsQzdPVkt2VjNlUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASVcoPoP/ZWL/Vfy5Npo7h29x2XPCH6aUi0ceiUzsI6Ca4lMKO+iIeKCxDBSl
HqwOcZeaOvubojstzp5jSHl9Qq0ZkOAWtPn1YbWNkEa4e6cUZb1eRRjtsZS+AH2O
10YAxJeYc5acSMtWU32Gga+g6MZL6jWZH6KmqlXXL3cgvUwwITYyri4pzGA5QXeo
5nAGWHZ3JnDNqlAZi1xBcFJ066hhnmVb8TwTYRN6sEq8JJYs6ZxvY0Ebx76Nf4ei
WNLzXu3YsWQL9qSHb0qra21cM3ZQVdDzQnAFxGDH7IoIJCAaYZI4f5eMVfNUTVC4
xHvxhqnPFgLaoklQqPr0JGbZeg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:51:53 2026 by rpki-client