$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft File: LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json) Hash identifier: ElGpp4SfqrLsXBwqG6r58IkBH14EX+H79yDMGSrE9fg= Subject key identifier: 30:C3:5B:17:24:A9:EB:DC:A8:E2:DC:BC:53:E6:CB:84:F7:3B:C7:DB Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 Certificate issuer: /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Certificate serial: 13F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft Manifest number: 13F0 Signing time: Fri 16 May 2025 17:10:28 +0000 Manifest this update: Fri 16 May 2025 17:10:28 +0000 Manifest next update: Fri 23 May 2025 17:10:28 +0000 Files and hashes: 1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: kSvh/b5Q+bSMd20jZhyP4th9YjsntkZT3Je+xgB0nag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5105 (0x13f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F0EF, serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Validity Not Before: May 16 17:10:28 2025 GMT Not After : May 23 17:10:28 2025 GMT Subject: CN=68277184-88a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:7a:98:1b:a1:35:7d:24:43:7c:f1:03:46: 0e:32:22:b3:e1:59:d6:bf:4b:52:d0:c4:4e:18:c4: 04:76:a8:ac:e0:9e:95:e7:eb:09:71:08:13:c1:05: b7:fc:b8:ca:0e:f6:61:44:74:29:11:79:4a:2c:51: da:43:85:8b:dd:7b:5c:37:a4:5e:b2:1f:1c:f4:e2: 96:57:40:a8:c2:eb:77:9b:42:79:d1:a9:42:64:cd: c0:36:22:65:78:76:ee:91:6e:4d:08:f6:af:8f:07: a8:3a:36:ea:8b:1b:3b:2e:fc:dd:65:b4:f0:a2:2c: 3e:60:cb:13:a5:67:1e:74:73:2c:1e:2c:4c:6d:25: 24:33:71:dc:6c:23:75:72:8e:c2:a5:96:40:d6:da: 7e:8a:36:5c:89:5c:0c:97:46:e6:24:49:ac:49:9d: 61:a4:12:a7:ba:34:3f:0b:ae:20:19:a1:a8:ed:ce: 00:4a:83:8c:d7:46:f3:8f:13:f5:9f:05:f2:5b:19: bb:14:4e:59:33:e1:6b:dc:74:e1:53:8d:77:d3:09: b3:02:9d:b1:1c:a0:d3:75:b4:a2:15:38:6b:a4:24: 46:5f:3f:30:43:ce:88:9b:29:0b:11:ad:47:fc:79: f1:22:a1:8f:f1:98:1f:57:e3:94:78:dd:53:f9:a9: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C3:5B:17:24:A9:EB:DC:A8:E2:DC:BC:53:E6:CB:84:F7:3B:C7:DB X509v3 Authority Key Identifier: keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:5f:06:ac:c1:28:63:5e:3e:6b:bb:78:66:3b:8e:0a:2f:54: bb:2e:3f:e6:49:a0:65:dc:e1:e9:e5:b8:c7:a9:54:d3:e7:b9: 21:83:9e:00:2a:9e:a8:b9:57:96:87:87:9f:e3:00:d6:a5:45: db:c1:ac:02:e6:a0:9c:81:1f:0f:05:65:7a:96:8e:65:73:be: bc:10:f5:ae:42:d9:92:31:78:0b:7f:df:d1:c0:d1:a8:26:18: ac:51:3a:64:8f:81:87:ee:68:31:b5:24:d5:ce:11:36:63:b5: 8b:04:96:61:65:f1:99:02:56:60:ed:33:c3:b3:95:b1:e7:91: 53:3b:07:5c:eb:8e:7b:4d:8b:5d:4e:24:be:a1:06:3a:d2:ee: 53:6c:65:26:88:5f:10:af:bb:17:79:fb:5d:7b:25:e1:85:2b: fc:e2:24:46:c3:5c:13:03:ce:9f:eb:61:5f:93:f1:e9:ff:08: cf:77:84:a3:79:00:6e:ea:c3:6c:73:83:d5:b8:75:17:19:64: 3c:57:47:3c:95:61:8a:67:8e:02:16:af:8c:c7:68:60:e5:e4: 02:89:ff:e8:dd:df:1e:bd:8d:79:ce:fd:7c:1c:54:6b:b9:ec: 9a:4e:3a:24:d5:d0:6f:d6:28:bf:a6:85:bb:de:3a:d9:c5:c4: ea:bf:ec:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYwRUYxMTAvBgNVBAUTKDJENDJCRjlGRkEzNEUxNDE3RUU2QkNDODk3REE1NTQx NTNDRUVBRTUwHhcNMjUwNTE2MTcxMDI4WhcNMjUwNTIzMTcxMDI4WjAYMRYwFAYD VQQDEw02ODI3NzE4NC04OGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAN6mBuhNX0kQ3zxA0YOMiKz4VnWv0tS0MROGMQEdqis4J6V5+sJcQgTwQW3 /LjKDvZhRHQpEXlKLFHaQ4WL3XtcN6Resh8c9OKWV0Cowut3m0J50alCZM3ANiJl eHbukW5NCPavjweoOjbqixs7LvzdZbTwoiw+YMsTpWcedHMsHixMbSUkM3HcbCN1 co7CpZZA1tp+ijZciVwMl0bmJEmsSZ1hpBKnujQ/C64gGaGo7c4ASoOM10bzjxP1 nwXyWxm7FE5ZM+Fr3HThU4130wmzAp2xHKDTdbSiFThrpCRGXz8wQ86ImykLEa1H /HnxIqGP8ZgfV+OUeN1T+aljXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDDWxck qevcqOLcvFPmy4T3O8fbMB8GA1UdIwQYMBaAFC1Cv5/6NOFBfua8yJfaVUFTzurl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjBFRi83NDBCRTg0NDdG MTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRVRi01cnpJbDlwVlFWUE82 dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVS19uX28wNFVGLTVyeklsOXBWUVZQTzZ1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjBFRi83NDBCRTg0NDdGMTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRV Ri01cnpJbDlwVlFWUE82dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIXwaswShjXj5ru3hmO44KL1S7Lj/mSaBl3OHp5bjHqVTT57khg54A Kp6ouVeWh4ef4wDWpUXbwawC5qCcgR8PBWV6lo5lc768EPWuQtmSMXgLf9/RwNGo JhisUTpkj4GH7mgxtSTVzhE2Y7WLBJZhZfGZAlZg7TPDs5Wx55FTOwdc6457TYtd TiS+oQY60u5TbGUmiF8Qr7sXeftdeyXhhSv84iRGw1wTA86f62Ffk/Hp/wjPd4Sj eQBu6sNsc4PVuHUXGWQ8V0c8lWGKZ44CFq+Mx2hg5eQCif/o3d8evY15zv18HFRr ueyaTjok1dBv1ii/poW73jrZxcTqv+wF -----END CERTIFICATE-----Generated at Fri May 16 20:55:46 2025 by rpki-client