Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
File: LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json)
Hash identifier: 9+duiPAe1wJjDD37CTSWih5hUeFE1uRCx3uudQg4Nos=
Subject key identifier: AA:75:D5:1A:43:1A:A5:1C:8E:40:D7:A7:17:95:5C:7E:C8:D9:35:53
Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5
Certificate issuer: /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5
Certificate serial: 13D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
Manifest number: 13D7
Signing time: Fri 28 Mar 2025 17:03:37 +0000
Manifest this update: Fri 28 Mar 2025 17:03:37 +0000
Manifest next update: Fri 04 Apr 2025 17:03:37 +0000
Files and hashes: 1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: /blz/lBeM1lrNOV+KC+iMKayiJ3ewRpmY9jy3zAOdfU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5080 (0x13d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F0EF
Validity
Not Before: Mar 28 17:03:37 2025 GMT
Not After : Apr 4 17:03:37 2025 GMT
Subject: CN=67e6d669-8134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:9b:fc:f0:6e:46:14:99:f8:7a:25:f1:3a:
5e:bc:e4:26:86:8b:0f:ba:5b:44:a8:f1:1d:0c:fc:
95:6b:47:bb:0d:49:a2:44:7d:ca:53:10:7d:95:28:
52:f1:19:cf:8a:11:f6:28:cd:ea:40:c6:28:b2:22:
0f:fd:44:36:1f:df:a3:ff:9d:36:e4:65:6b:93:a5:
08:fd:7f:82:0e:0c:e6:01:3e:b3:58:7f:e1:46:47:
81:b5:98:f8:45:0b:a6:5d:98:87:be:c0:69:c4:58:
2b:62:c4:1e:42:a6:60:80:1e:18:43:1d:97:de:41:
65:2c:c1:ee:07:d9:ed:04:c2:22:28:b3:fa:e1:18:
92:b0:02:79:dd:aa:e3:b2:6a:ab:2d:38:14:a4:31:
46:15:39:ef:48:c2:90:8c:88:57:a9:09:eb:02:bc:
40:82:c2:9b:3f:0c:75:15:d1:b5:8f:1a:02:d8:53:
6c:9b:ad:9b:e6:a9:63:f2:21:4b:1f:63:ee:ad:ab:
62:97:c4:7f:c1:d3:8a:4b:ff:27:3d:2b:16:03:cd:
49:c8:ef:dc:69:1b:b9:b2:75:19:ab:59:20:27:61:
4e:ef:c3:9d:18:23:91:45:8b:57:d1:0a:e3:0c:ae:
3a:ad:b2:72:77:cc:2f:64:8f:64:8c:9b:c3:81:9e:
50:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:75:D5:1A:43:1A:A5:1C:8E:40:D7:A7:17:95:5C:7E:C8:D9:35:53
X509v3 Authority Key Identifier:
keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:db:6e:c9:45:4c:1f:8a:10:fb:f4:bd:86:c7:1e:80:fd:9f:
04:74:ad:af:62:fa:77:59:b4:5f:77:8b:73:88:2d:08:17:c8:
d6:c5:a2:db:26:81:48:54:19:e2:53:ee:34:08:21:39:e9:52:
15:bb:5f:2d:93:71:b0:03:d2:21:9b:33:d8:94:55:66:72:f0:
23:3c:e3:40:c1:3d:a0:41:2e:53:5c:e9:66:5a:f5:e6:e6:d3:
68:a1:d2:3b:c8:19:47:c7:dd:1b:39:ff:bc:6b:58:06:11:57:
1f:bd:98:ad:93:fe:12:3d:95:31:dd:54:9c:69:14:99:b1:73:
23:66:a5:5a:78:a4:fb:a0:a5:fe:0d:f2:85:03:9a:de:ce:64:
fd:10:da:11:3c:d5:d2:d6:f6:43:43:4b:46:20:2e:41:73:77:
6f:72:c9:44:3a:bc:47:06:e9:66:b8:b6:af:d0:52:db:b7:b3:
ad:b0:f7:7e:a4:73:2f:09:5e:48:b5:80:96:46:56:74:38:c2:
a4:ae:be:c9:b3:5a:91:35:3f:26:94:17:d0:16:1e:c8:d1:49:
6a:f2:c4:95:70:88:54:35:8c:fc:a1:48:f2:ea:91:ee:4f:98:
ce:54:12:cb:77:83:b5:c0:9b:e4:9b:40:c1:ae:dd:f1:3c:c8:
3f:4a:26:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUYwRUYxMTAvBgNVBAUTKDJENDJCRjlGRkEzNEUxNDE3RUU2QkNDODk3REE1NTQx
NTNDRUVBRTUwHhcNMjUwMzI4MTcwMzM3WhcNMjUwNDA0MTcwMzM3WjAYMRYwFAYD
VQQDEw02N2U2ZDY2OS04MTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA19Cb/PBuRhSZ+Hol8TpevOQmhosPultEqPEdDPyVa0e7DUmiRH3KUxB9lShS
8RnPihH2KM3qQMYosiIP/UQ2H9+j/5025GVrk6UI/X+CDgzmAT6zWH/hRkeBtZj4
RQumXZiHvsBpxFgrYsQeQqZggB4YQx2X3kFlLMHuB9ntBMIiKLP64RiSsAJ53arj
smqrLTgUpDFGFTnvSMKQjIhXqQnrArxAgsKbPwx1FdG1jxoC2FNsm62b5qlj8iFL
H2Puratil8R/wdOKS/8nPSsWA81JyO/caRu5snUZq1kgJ2FO78OdGCORRYtX0Qrj
DK46rbJyd8wvZI9kjJvDgZ5QDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKp11RpD
GqUcjkDXpxeVXH7I2TVTMB8GA1UdIwQYMBaAFC1Cv5/6NOFBfua8yJfaVUFTzurl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjBFRi83NDBCRTg0NDdG
MTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRVRi01cnpJbDlwVlFWUE82
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xVS19uX28wNFVGLTVyeklsOXBWUVZQTzZ1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjBFRi83NDBCRTg0NDdGMTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRV
Ri01cnpJbDlwVlFWUE82dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCl227JRUwfihD79L2Gxx6A/Z8EdK2vYvp3WbRfd4tziC0IF8jWxaLb
JoFIVBniU+40CCE56VIVu18tk3GwA9IhmzPYlFVmcvAjPONAwT2gQS5TXOlmWvXm
5tNoodI7yBlHx90bOf+8a1gGEVcfvZitk/4SPZUx3VScaRSZsXMjZqVaeKT7oKX+
DfKFA5rezmT9ENoRPNXS1vZDQ0tGIC5Bc3dvcslEOrxHBulmuLav0FLbt7OtsPd+
pHMvCV5ItYCWRlZ0OMKkrr7Js1qRNT8mlBfQFh7I0Ulq8sSVcIhUNYz8oUjy6pHu
T5jOVBLLd4O1wJvkm0DBrt3xPMg/SiZF
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:59:33 2025 by rpki-client