$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft File: LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json) Hash identifier: 7DIxognmAriqOdyUHNYrmqgQMs1bYSD2PARbdFm0aWg= Subject key identifier: C6:67:1E:D0:FC:AA:66:EA:79:FC:FF:04:B9:45:D2:18:20:29:5F:4E Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 Certificate issuer: /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Certificate serial: 133E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft Manifest number: 133D Signing time: Fri 31 May 2024 17:48:22 +0000 Manifest this update: Fri 31 May 2024 17:48:21 +0000 Manifest next update: Fri 07 Jun 2024 17:48:21 +0000 Files and hashes: 1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: hBP7iB5gUaMi3i+63q1N79Iq91ddxOI06glsObXtaRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4926 (0x133e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Validity Not Before: May 31 17:48:21 2024 GMT Not After : Jun 7 17:48:21 2024 GMT Subject: CN=665a0d65-c961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:89:fc:f7:82:f3:8b:fc:46:33:a5:3b:37:69: b8:fb:28:b1:cc:01:39:e3:47:18:b8:f1:2b:6b:db: 04:36:2f:db:ec:8d:05:41:09:53:9e:5f:74:0a:82: e9:17:fb:a2:f9:c8:d3:a7:80:dd:0d:b3:a8:42:e8: d8:f3:c1:fb:04:db:f9:22:5e:f7:80:b6:04:f6:52: 59:c4:6b:00:34:20:7a:ef:31:92:89:58:68:40:35: 0e:17:15:0c:df:38:d5:a7:77:c8:45:d7:d9:ff:30: 45:4b:ae:72:c1:b8:3d:4e:a8:ef:bf:a3:7d:b3:62: ff:00:da:63:2a:59:98:6f:72:a2:6c:4c:ab:3d:4f: fd:74:38:ca:a0:39:4b:32:1f:07:1c:1b:08:9b:53: 59:8a:ec:1c:ea:5d:f5:05:0a:4d:b8:34:d5:98:e7: ff:94:0a:28:6d:44:f2:af:e8:50:06:9c:a2:cf:c2: 22:27:b9:99:74:69:17:12:b7:84:4f:81:92:80:36: c3:21:d5:38:3a:84:6b:14:ae:74:ce:07:5e:03:50: a3:d2:8c:15:dd:3d:1f:91:19:f1:95:4d:ae:e2:b2: 6f:3d:cf:f5:48:f0:79:70:e8:6b:1b:6f:d5:4b:6d: 24:76:84:b4:23:f6:2d:c6:37:79:01:e2:50:66:32: 9b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:67:1E:D0:FC:AA:66:EA:79:FC:FF:04:B9:45:D2:18:20:29:5F:4E X509v3 Authority Key Identifier: keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b5:67:12:eb:cf:96:ad:13:eb:36:a3:9a:3f:e5:6f:68:62: 83:6c:be:fe:e9:7e:1c:48:4d:40:49:ae:22:c1:97:83:46:c5: c7:c6:47:b0:9b:cf:2a:65:e1:8b:40:72:2e:98:c6:74:37:56: 05:0a:67:f7:5f:16:65:d2:77:03:dd:db:4d:c7:54:7d:d8:0c: ee:9d:7c:1f:b6:8d:f0:e2:4b:87:40:c0:3f:09:24:e1:bd:ed: 35:3b:fe:43:0d:76:cb:8b:88:95:8b:61:d5:c6:58:01:f5:0d: c5:ce:1a:45:7c:70:f1:bb:97:92:73:27:22:f6:83:57:17:05: 01:75:02:a6:a8:c4:23:cb:a8:09:57:0b:a2:25:4c:85:44:04: ad:7c:1e:e0:57:62:d1:9c:9d:39:37:05:00:59:35:f5:29:34: 90:49:44:5b:93:ba:9c:27:67:e3:ef:12:6f:3a:fb:f6:f0:48: 55:4b:d0:be:2d:7b:13:74:33:d5:e1:32:63:14:90:2c:ad:87: cb:b1:cf:3d:f8:57:4a:18:21:3d:dd:df:51:a5:30:f8:d4:d2: 33:de:b1:aa:14:9a:6a:b9:5c:aa:01:43:21:78:69:f9:0a:46: 81:1b:71:c1:26:ce:4b:e8:c3:9a:f9:37:5f:72:15:37:46:ba: f6:15:cd:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYwRUYxMTAvBgNVBAUTKDJENDJCRjlGRkEzNEUxNDE3RUU2QkNDODk3REE1NTQx NTNDRUVBRTUwHhcNMjQwNTMxMTc0ODIxWhcNMjQwNjA3MTc0ODIxWjAYMRYwFAYD VQQDEw02NjVhMGQ2NS1jOTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4n894Lzi/xGM6U7N2m4+yixzAE540cYuPEra9sENi/b7I0FQQlTnl90CoLp F/ui+cjTp4DdDbOoQujY88H7BNv5Il73gLYE9lJZxGsANCB67zGSiVhoQDUOFxUM 3zjVp3fIRdfZ/zBFS65ywbg9Tqjvv6N9s2L/ANpjKlmYb3KibEyrPU/9dDjKoDlL Mh8HHBsIm1NZiuwc6l31BQpNuDTVmOf/lAoobUTyr+hQBpyiz8IiJ7mZdGkXEreE T4GSgDbDIdU4OoRrFK50zgdeA1Cj0owV3T0fkRnxlU2u4rJvPc/1SPB5cOhrG2/V S20kdoS0I/Ytxjd5AeJQZjKbbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZnHtD8 qmbqefz/BLlF0hggKV9OMB8GA1UdIwQYMBaAFC1Cv5/6NOFBfua8yJfaVUFTzurl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjBFRi83NDBCRTg0NDdG MTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRVRi01cnpJbDlwVlFWUE82 dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVS19uX28wNFVGLTVyeklsOXBWUVZQTzZ1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjBFRi83NDBCRTg0NDdGMTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRV Ri01cnpJbDlwVlFWUE82dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAetWcS68+WrRPrNqOaP+VvaGKDbL7+6X4cSE1ASa4iwZeDRsXHxkew m88qZeGLQHIumMZ0N1YFCmf3XxZl0ncD3dtNx1R92AzunXwfto3w4kuHQMA/CSTh ve01O/5DDXbLi4iVi2HVxlgB9Q3FzhpFfHDxu5eScyci9oNXFwUBdQKmqMQjy6gJ VwuiJUyFRAStfB7gV2LRnJ05NwUAWTX1KTSQSURbk7qcJ2fj7xJvOvv28EhVS9C+ LXsTdDPV4TJjFJAsrYfLsc89+FdKGCE93d9RpTD41NIz3rGqFJpquVyqAUMheGn5 CkaBG3HBJs5L6MOa+TdfchU3Rrr2Fc3i -----END CERTIFICATE-----Generated at Fri May 31 20:34:04 2024 by rpki-client on console-ams.rpki-client.org