$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft File: LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json) Hash identifier: 1OYe/moVkjjyol2ccc/OSRgbRMbmKruZRa7SzgYW33U= Subject key identifier: A5:61:0E:37:BA:26:AE:3B:C4:6E:3E:BE:3D:E5:0D:97:65:84:94:71 Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 Certificate issuer: /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Certificate serial: 1398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft Manifest number: 1397 Signing time: Fri 22 Nov 2024 16:58:27 +0000 Manifest this update: Fri 22 Nov 2024 16:58:26 +0000 Manifest next update: Fri 29 Nov 2024 16:58:26 +0000 Files and hashes: 1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: oLFxKhyF90J6CFs870FnplK2rUDdBBZAGkKiCiLlImM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5016 (0x1398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Validity Not Before: Nov 22 16:58:26 2024 GMT Not After : Nov 29 16:58:26 2024 GMT Subject: CN=6740b832-17dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e5:ee:c8:ce:ce:b4:6e:03:85:9b:8c:0b:44: 1b:74:39:d7:66:8b:60:92:54:cf:b8:3f:af:74:a0: e8:06:f4:35:80:21:56:f4:f9:a2:ab:85:4c:00:a6: c2:8b:bf:7c:fa:b4:5c:12:f4:a4:e9:7e:11:75:bf: 43:4d:59:93:0c:b2:3e:c0:f9:50:a3:c0:12:4c:0d: 42:8a:c2:1f:6e:5a:a9:d6:ed:57:10:f7:fc:14:6b: f4:53:43:b4:78:c9:7b:99:cc:ef:07:d7:b5:64:da: 58:3f:82:bb:f5:c1:74:2f:6e:a6:fc:c7:26:47:1f: 96:25:30:a5:22:e4:12:9a:c0:d7:8b:f7:93:2a:fc: 56:f0:65:d0:37:ea:5e:f0:c2:7a:6d:8e:73:2d:3f: 47:25:25:cf:08:f7:0c:fd:0a:15:39:10:b0:a4:1c: b0:4b:99:bf:d2:d8:be:05:93:8e:8f:31:58:e7:c9: 46:a3:b4:64:6d:1e:3a:db:ae:17:f7:b1:05:cb:64: 10:81:7f:21:53:c0:9f:eb:af:3f:a9:2f:6d:eb:f8: 79:7b:91:ee:04:8e:60:89:81:25:eb:ff:76:e9:61: 98:90:08:22:76:5b:6f:94:4f:09:d5:d3:ad:08:c9: c8:48:92:48:0d:54:0f:25:67:2e:69:f2:b1:82:13: 8b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:61:0E:37:BA:26:AE:3B:C4:6E:3E:BE:3D:E5:0D:97:65:84:94:71 X509v3 Authority Key Identifier: keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6d:67:15:20:37:db:16:b3:64:e6:7d:62:50:e2:7c:b4:ac: a4:22:dc:b3:44:31:f7:e1:57:09:1f:c1:83:e9:ff:ae:85:c6: 23:fd:d0:d4:97:73:c4:84:fd:d8:0f:56:ce:0f:5d:e0:91:03: f1:65:5a:b4:49:25:f5:01:bc:0c:64:19:e2:3e:13:a2:2d:21: eb:17:92:29:c8:db:03:7e:b4:14:b0:a4:60:97:ce:5d:73:81: 38:74:8c:19:f0:22:a6:80:41:ce:6b:80:5e:6b:8c:64:7d:1f: d9:cf:ba:0e:92:ed:69:49:d2:d9:44:50:5e:74:3a:a0:41:5c: 70:bd:ef:34:d7:f3:8b:37:26:84:fd:af:56:5a:c1:23:ab:14: 4a:5d:1e:54:da:0d:06:92:4b:ad:47:77:1f:9c:2d:f8:54:86: 89:5f:0a:3a:ee:30:f6:15:4f:41:f7:1f:2a:a0:fa:82:07:1d: 68:84:4d:ef:8f:28:63:95:1e:93:be:ff:bb:fa:15:25:b7:45: 10:ce:49:b8:e4:8a:65:a0:f8:86:e1:9e:1d:0b:fb:59:b1:84: 81:c2:ae:62:c8:96:8e:d3:e1:79:8a:bc:40:77:01:af:0d:d4: 07:b9:16:ae:ae:6b:65:e0:22:3f:ea:fa:b3:c6:02:ac:55:e7: ac:c4:6d:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYwRUYxMTAvBgNVBAUTKDJENDJCRjlGRkEzNEUxNDE3RUU2QkNDODk3REE1NTQx NTNDRUVBRTUwHhcNMjQxMTIyMTY1ODI2WhcNMjQxMTI5MTY1ODI2WjAYMRYwFAYD VQQDEw02NzQwYjgzMi0xN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuXuyM7OtG4DhZuMC0QbdDnXZotgklTPuD+vdKDoBvQ1gCFW9Pmiq4VMAKbC i798+rRcEvSk6X4Rdb9DTVmTDLI+wPlQo8ASTA1CisIfblqp1u1XEPf8FGv0U0O0 eMl7mczvB9e1ZNpYP4K79cF0L26m/McmRx+WJTClIuQSmsDXi/eTKvxW8GXQN+pe 8MJ6bY5zLT9HJSXPCPcM/QoVORCwpBywS5m/0ti+BZOOjzFY58lGo7RkbR46264X 97EFy2QQgX8hU8Cf668/qS9t6/h5e5HuBI5giYEl6/926WGYkAgidltvlE8J1dOt CMnISJJIDVQPJWcuafKxghOL5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVhDje6 Jq47xG4+vj3lDZdlhJRxMB8GA1UdIwQYMBaAFC1Cv5/6NOFBfua8yJfaVUFTzurl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjBFRi83NDBCRTg0NDdG MTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRVRi01cnpJbDlwVlFWUE82 dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVS19uX28wNFVGLTVyeklsOXBWUVZQTzZ1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjBFRi83NDBCRTg0NDdGMTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRV Ri01cnpJbDlwVlFWUE82dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbbWcVIDfbFrNk5n1iUOJ8tKykItyzRDH34VcJH8GD6f+uhcYj/dDU l3PEhP3YD1bOD13gkQPxZVq0SSX1AbwMZBniPhOiLSHrF5IpyNsDfrQUsKRgl85d c4E4dIwZ8CKmgEHOa4Bea4xkfR/Zz7oOku1pSdLZRFBedDqgQVxwve801/OLNyaE /a9WWsEjqxRKXR5U2g0GkkutR3cfnC34VIaJXwo67jD2FU9B9x8qoPqCBx1ohE3v jyhjlR6Tvv+7+hUlt0UQzkm45IploPiG4Z4dC/tZsYSBwq5iyJaO0+F5irxAdwGv DdQHuRaurmtl4CI/6vqzxgKsVeesxG2c -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org