Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
File:                     LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json)
Hash identifier:          lLy8Y7gmhwkToqdfasadrpbWhrD/zX/aBOTeSSEULN0=
Subject key identifier:   D6:37:94:0B:62:54:B0:EA:A2:A0:8C:0E:CF:45:75:3E:2F:60:9D:B2
Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5
Certificate issuer:       /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5
Certificate serial:       14D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
Manifest number:          14D1
Signing time:             Wed 22 Jul 2026 16:56:17 +0000
Manifest this update:     Wed 22 Jul 2026 16:56:17 +0000
Manifest next update:     Wed 29 Jul 2026 16:56:17 +0000
Files and hashes:         1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: cYFwt99crBs4HaXIBDYs7EDvDKM2jmBZkP8lhCv4vb4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl
                          rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5330 (0x14d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F0EF, serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5
        Validity
            Not Before: Jul 22 16:56:17 2026 GMT
            Not After : Jul 29 16:56:17 2026 GMT
        Subject: CN=6a60f631-dfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:90:2d:8a:15:c2:d2:06:3a:a6:c5:75:fc:f8:
                    1a:6b:5f:3b:38:4e:0b:40:bf:d4:8f:73:ef:8b:ad:
                    6c:58:30:b4:37:7f:85:30:e2:ff:2a:54:06:08:03:
                    49:f1:22:72:52:1b:17:34:87:29:1a:83:5b:e9:bb:
                    1b:87:e4:21:a3:74:54:51:0c:82:0f:f3:94:f9:5b:
                    a2:fd:34:43:be:22:7c:d7:0c:77:5f:d9:0d:5b:62:
                    7a:f7:54:19:0c:7e:7e:fd:8f:11:6e:4b:55:de:e3:
                    03:a8:e4:6a:cb:7b:ae:fe:b3:ec:2e:4d:20:c0:35:
                    53:85:ab:39:04:3d:2d:a5:12:69:9d:da:9e:23:8b:
                    93:49:7d:eb:16:fd:66:52:84:bf:a7:d2:f9:c9:c1:
                    16:b5:60:e7:85:fd:61:86:32:42:5e:3c:3e:06:ca:
                    09:d2:09:d9:28:14:1f:5f:3e:f1:8a:99:de:79:a4:
                    11:7d:cd:dc:36:34:e6:65:f8:ca:a3:10:b5:52:bf:
                    e2:ce:90:98:d2:75:07:b1:fb:9a:72:96:46:44:df:
                    58:8d:06:35:40:7d:da:42:e9:ff:aa:a9:81:b2:d1:
                    fe:f9:a4:5a:9a:4c:36:a3:2f:7b:14:81:bb:cb:8e:
                    ad:15:91:d9:bb:97:3c:8a:ad:4f:bf:f8:33:6e:57:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:37:94:0B:62:54:B0:EA:A2:A0:8C:0E:CF:45:75:3E:2F:60:9D:B2
            X509v3 Authority Key Identifier:
                keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f9:25:e9:90:3f:38:38:c6:c5:64:be:ac:f4:20:b4:1f:c5:
         92:65:3b:67:39:1d:9b:bd:0d:34:a2:d2:72:6e:f3:70:a6:a2:
         91:f7:a8:ef:ae:cb:09:1a:52:1b:4e:40:50:4d:c3:40:a8:e8:
         c8:9d:dc:8f:c0:49:33:73:f5:9c:0c:2a:74:07:a6:26:87:af:
         64:05:0a:f5:e8:31:f5:ff:92:67:1b:f4:8c:12:95:26:c5:f4:
         6c:a1:20:39:fe:cb:9e:dd:a2:f8:3d:92:22:de:61:c4:7a:90:
         83:61:d8:73:16:90:d8:95:90:ce:3d:40:07:e9:29:d8:df:a0:
         e9:60:7c:5b:b7:16:8f:48:29:31:74:c6:b2:0a:58:75:de:6c:
         d0:a6:dc:dd:ca:d4:52:c0:91:3c:eb:bc:83:11:a0:b7:d8:8e:
         8d:b2:1b:62:58:31:3c:c1:a5:eb:a7:ab:83:b5:1b:3d:1b:c0:
         00:6d:42:d9:b8:15:5c:e6:2b:8e:ac:43:6e:bf:f8:2a:a0:9a:
         a3:2a:a5:fc:65:24:7b:62:a1:1c:ed:83:a3:00:de:7e:18:8a:
         e6:f4:28:c6:b6:30:68:0f:ab:80:1b:1e:7b:a5:ce:a4:a9:de:
         68:79:58:d9:55:2f:1d:56:7d:59:e5:78:63:5d:d6:19:75:19:
         86:c2:91:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUYwRUYxMTAvBgNVBAUTKDJENDJCRjlGRkEzNEUxNDE3RUU2QkNDODk3REE1NTQx
NTNDRUVBRTUwHhcNMjYwNzIyMTY1NjE3WhcNMjYwNzI5MTY1NjE3WjAYMRYwFAYD
VQQDEw02YTYwZjYzMS1kZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl5AtihXC0gY6psV1/Pgaa187OE4LQL/Uj3Pvi61sWDC0N3+FMOL/KlQGCANJ
8SJyUhsXNIcpGoNb6bsbh+Qho3RUUQyCD/OU+Vui/TRDviJ81wx3X9kNW2J691QZ
DH5+/Y8RbktV3uMDqORqy3uu/rPsLk0gwDVThas5BD0tpRJpndqeI4uTSX3rFv1m
UoS/p9L5ycEWtWDnhf1hhjJCXjw+BsoJ0gnZKBQfXz7xipneeaQRfc3cNjTmZfjK
oxC1Ur/izpCY0nUHsfuacpZGRN9YjQY1QH3aQun/qqmBstH++aRamkw2oy97FIG7
y46tFZHZu5c8iq1Pv/gzbldCtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNY3lAti
VLDqoqCMDs9FdT4vYJ2yMB8GA1UdIwQYMBaAFC1Cv5/6NOFBfua8yJfaVUFTzurl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjBFRi83NDBCRTg0NDdG
MTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRVRi01cnpJbDlwVlFWUE82
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xVS19uX28wNFVGLTVyeklsOXBWUVZQTzZ1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjBFRi83NDBCRTg0NDdGMTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRV
Ri01cnpJbDlwVlFWUE82dVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPfkl6ZA/ODjGxWS+rPQgtB/FkmU7Zzkdm70NNKLScm7zcKaikfeo767LCRpS
G05AUE3DQKjoyJ3cj8BJM3P1nAwqdAemJoevZAUK9egx9f+SZxv0jBKVJsX0bKEg
Of7Lnt2i+D2SIt5hxHqQg2HYcxaQ2JWQzj1AB+kp2N+g6WB8W7cWj0gpMXTGsgpY
dd5s0Kbc3crUUsCRPOu8gxGgt9iOjbIbYlgxPMGl66erg7UbPRvAAG1C2bgVXOYr
jqxDbr/4KqCaoyql/GUke2KhHO2DowDefhiK5vQoxrYwaA+rgBsee6XOpKneaHlY
2VUvHVZ9WeV4Y13WGXUZhsKRsQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:09:28 2026 by rpki-client