$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft File: LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json) Hash identifier: DKVnhNLCd01R4//MjjFOt2IQ7Lrcb4EOBlPzZdPlCwc= Subject key identifier: D8:81:97:13:06:B3:51:0C:C0:1F:6F:93:C6:F0:94:36:42:54:93:BC Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 Certificate issuer: /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Certificate serial: 1409 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft Manifest number: 1408 Signing time: Wed 02 Jul 2025 17:06:42 +0000 Manifest this update: Wed 02 Jul 2025 17:06:41 +0000 Manifest next update: Wed 09 Jul 2025 17:06:41 +0000 Files and hashes: 1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: WwwRtU2f/YgN7buOtjoxcUD+K9IsRWY2ktH5ShyJ+qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5129 (0x1409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F0EF, serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Validity Not Before: Jul 2 17:06:41 2025 GMT Not After : Jul 9 17:06:41 2025 GMT Subject: CN=68656722-d653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:72:59:73:1b:b0:87:9c:47:9c:4c:d8:8a: ce:8b:45:76:27:6a:dd:61:9f:21:d3:4b:15:fd:04: 73:90:9f:cf:fa:a1:79:01:89:8e:64:39:98:9a:39: bb:84:9e:0b:6e:f3:42:2f:2c:80:33:8f:98:2b:82: aa:d2:9b:b3:2e:a5:43:38:cf:67:f7:a9:c7:1e:fa: 08:00:9b:33:57:b5:6a:23:52:3f:36:eb:d2:98:0a: 2b:51:8b:d9:02:07:84:ee:97:1e:4b:26:ee:52:7c: 20:1c:cd:72:d4:27:8a:e8:be:7f:47:86:9c:1b:5b: ff:9e:86:3c:fd:2a:a9:55:57:d2:ed:4b:39:19:4e: 64:86:0b:6f:a4:6a:4a:f9:a9:51:2e:42:ed:95:ee: 4a:d8:ff:30:38:d8:18:c6:99:b6:3e:ce:66:77:43: ca:77:7f:39:47:44:3e:3e:34:ec:98:62:9a:48:29: fe:22:af:ba:3f:af:6e:24:92:9b:ba:fb:29:2c:73: f1:af:68:1b:c7:f8:34:4c:ae:53:6d:71:e2:f2:31: 82:e7:4e:87:c6:f5:d1:ca:c6:7c:45:20:90:e6:09: 72:46:b3:09:58:0a:6c:67:c5:f2:0c:3a:96:80:94: ed:71:36:6c:fe:c6:6d:58:fa:55:bd:15:b3:2c:c6: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:81:97:13:06:B3:51:0C:C0:1F:6F:93:C6:F0:94:36:42:54:93:BC X509v3 Authority Key Identifier: keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:b4:9b:2c:8e:79:47:3f:b1:9a:4e:9a:77:50:65:ba:78:f2: 32:fe:fb:9e:54:f8:30:20:2d:5a:04:c6:a6:98:fb:6d:43:93: 08:1f:0b:10:df:fb:b9:99:82:db:68:c8:ab:80:01:c1:48:42: 17:b2:89:a8:08:0b:61:a7:75:0c:b7:0f:b4:2a:54:09:ef:af: 7b:5f:1a:55:22:cf:37:38:dd:9b:ca:fd:98:9b:24:6e:8c:a6: 1a:40:28:3b:5b:12:6f:6c:65:cc:6e:ed:7e:1a:34:61:26:cd: 31:8f:22:3b:68:35:b1:3b:44:82:93:c7:2b:7c:4e:2b:eb:65: 22:b1:ed:a3:78:d2:b0:2e:88:7f:5f:94:b3:07:ec:0c:af:54: 4c:a3:00:65:76:3a:b8:b4:63:37:f1:c7:03:2e:a0:fd:0b:28: 78:6c:fd:35:25:f0:89:c7:7e:08:c5:10:8d:a1:03:fc:27:7d: 99:92:6b:92:66:1e:93:58:44:e0:4f:f1:2c:aa:a9:e3:53:91: b5:3f:89:15:09:81:c1:dd:56:f7:98:e2:5b:a3:66:cb:30:ed: 1e:65:4e:7f:78:55:11:c5:3c:07:16:39:63:49:c3:e6:c5:ef: db:93:db:d0:08:90:69:25:41:32:40:a4:ea:80:d1:32:c6:42: 85:86:d0:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYwRUYxMTAvBgNVBAUTKDJENDJCRjlGRkEzNEUxNDE3RUU2QkNDODk3REE1NTQx NTNDRUVBRTUwHhcNMjUwNzAyMTcwNjQxWhcNMjUwNzA5MTcwNjQxWjAYMRYwFAYD VQQDEw02ODY1NjcyMi1kNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAVyWXMbsIecR5xM2IrOi0V2J2rdYZ8h00sV/QRzkJ/P+qF5AYmOZDmYmjm7 hJ4LbvNCLyyAM4+YK4Kq0puzLqVDOM9n96nHHvoIAJszV7VqI1I/NuvSmAorUYvZ AgeE7pceSybuUnwgHM1y1CeK6L5/R4acG1v/noY8/SqpVVfS7Us5GU5khgtvpGpK +alRLkLtle5K2P8wONgYxpm2Ps5md0PKd385R0Q+PjTsmGKaSCn+Iq+6P69uJJKb uvspLHPxr2gbx/g0TK5TbXHi8jGC506HxvXRysZ8RSCQ5glyRrMJWApsZ8XyDDqW gJTtcTZs/sZtWPpVvRWzLMbPIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiBlxMG s1EMwB9vk8bwlDZCVJO8MB8GA1UdIwQYMBaAFC1Cv5/6NOFBfua8yJfaVUFTzurl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjBFRi83NDBCRTg0NDdG MTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRVRi01cnpJbDlwVlFWUE82 dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVS19uX28wNFVGLTVyeklsOXBWUVZQTzZ1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjBFRi83NDBCRTg0NDdGMTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRV Ri01cnpJbDlwVlFWUE82dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwtJssjnlHP7GaTpp3UGW6ePIy/vueVPgwIC1aBMammPttQ5MIHwsQ 3/u5mYLbaMirgAHBSEIXsomoCAthp3UMtw+0KlQJ7697XxpVIs83ON2byv2YmyRu jKYaQCg7WxJvbGXMbu1+GjRhJs0xjyI7aDWxO0SCk8crfE4r62Uise2jeNKwLoh/ X5SzB+wMr1RMowBldjq4tGM38ccDLqD9Cyh4bP01JfCJx34IxRCNoQP8J32ZkmuS Zh6TWETgT/EsqqnjU5G1P4kVCYHB3Vb3mOJbo2bLMO0eZU5/eFURxTwHFjljScPm xe/bk9vQCJBpJUEyQKTqgNEyxkKFhtAk -----END CERTIFICATE-----Generated at Thu Jul 3 11:24:20 2025 by rpki-client