Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
File:                     LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json)
Hash identifier:          TOGNd1nef9QFitg8bOzjgOvvXFXXuHswq4DYHMi3q5c=
Subject key identifier:   53:E9:B9:A6:49:EA:32:8C:C7:0E:4F:A7:F2:67:E4:BD:FA:47:25:5F
Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5
Certificate issuer:       /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5
Certificate serial:       1496
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
Manifest number:          1495
Signing time:             Thu 26 Mar 2026 16:49:46 +0000
Manifest this update:     Thu 26 Mar 2026 16:49:45 +0000
Manifest next update:     Thu 02 Apr 2026 16:49:45 +0000
Files and hashes:         1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: RHWOqAfQqAmk1U1FyOalVsB1nVVc8Xju2l9QwW57bhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl
                          rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5270 (0x1496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F0EF, serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5
        Validity
            Not Before: Mar 26 16:49:45 2026 GMT
            Not After : Apr  2 16:49:45 2026 GMT
        Subject: CN=69c563aa-d591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:39:af:6c:ce:4f:1f:b4:2e:58:fe:96:96:fe:
                    8e:d6:42:0c:95:e4:95:3b:53:7a:24:09:17:9a:78:
                    63:36:fb:f2:fa:f2:df:35:83:55:2f:f6:ca:f7:7f:
                    cc:3a:d6:03:0b:e3:d7:83:bd:fd:bc:3a:96:c1:fe:
                    ba:80:97:a2:08:a5:76:b1:ac:5e:e7:52:27:6f:bb:
                    a4:74:eb:eb:8a:54:d6:36:c3:01:4a:89:2b:a3:eb:
                    57:2b:2f:e8:d8:b2:9d:40:5e:38:7a:c9:56:03:53:
                    a6:2b:3c:6e:c0:f5:7a:29:6e:1f:e7:fd:54:ee:eb:
                    52:b7:c9:23:9e:35:16:bd:28:4f:a8:8d:f3:41:bb:
                    ae:66:21:d1:2e:93:56:00:bb:4a:71:66:93:fb:66:
                    a9:7f:c4:6d:22:8f:85:ee:67:1c:38:74:00:ae:a5:
                    75:f8:17:26:19:96:92:37:22:1b:b2:d7:15:52:8f:
                    e1:1d:4d:19:04:df:7f:80:0f:e6:39:1e:c4:7b:1b:
                    3a:ce:23:46:ff:99:ea:fb:a5:b2:0e:68:c3:e2:4b:
                    31:49:b4:39:15:3f:0c:37:80:ab:89:30:8f:51:e6:
                    0b:d4:d5:9b:90:ea:fa:e0:21:fa:49:35:45:5e:41:
                    a2:8f:24:01:87:09:85:b9:a9:14:0d:f6:b8:b5:6c:
                    67:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E9:B9:A6:49:EA:32:8C:C7:0E:4F:A7:F2:67:E4:BD:FA:47:25:5F
            X509v3 Authority Key Identifier:
                keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:5b:05:3f:fa:a7:7e:e3:e1:b5:64:33:12:a7:15:fb:92:54:
         2f:a3:57:5c:8f:23:57:73:87:17:f3:09:31:15:35:20:cc:5f:
         6d:e0:73:07:05:a5:3a:40:6e:00:5e:ba:1e:c4:5e:82:e7:e5:
         a6:5b:e9:a9:a1:04:b9:fe:a8:b0:4f:a2:e5:38:2c:39:82:2d:
         19:d2:dd:09:e3:cf:53:ed:2f:db:db:8b:3a:3c:8d:10:de:fb:
         55:c9:fc:14:17:45:0d:eb:91:fa:a4:4f:85:c5:1a:d5:b7:fb:
         8f:b4:98:d9:81:68:db:a5:51:a1:36:9b:c9:95:88:a4:4e:d4:
         4e:53:07:17:5d:22:3c:08:67:92:85:81:65:49:40:60:11:51:
         31:31:d2:37:ef:65:94:76:c8:56:af:bf:da:0b:cd:20:30:aa:
         cc:0e:81:5b:16:2e:46:11:84:c7:50:e6:6d:77:eb:b1:d8:aa:
         e2:cd:fc:36:92:1c:4a:41:fb:a6:6d:a8:81:9b:6e:5d:cf:3a:
         9d:19:c9:6c:67:5f:f7:9e:ed:6e:c8:c8:1e:02:d0:6c:d2:9f:
         92:f5:f0:65:14:a6:0b:df:f3:4f:9e:7f:b4:e5:44:ba:55:e8:
         ba:35:5a:61:b5:16:f1:7e:7c:01:74:f4:5c:c1:9e:fa:f1:a1:
         3c:22:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:44:52 2026 by rpki-client