
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
File: LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json)
Hash identifier: Kf4YefhKwpFZRU+nOZCqJ12iNVdD4bVbuvgNLiJ85rY=
Subject key identifier: 09:F2:90:DF:1C:19:9C:78:9B:9B:A5:42:BF:08:F4:24:CF:5D:70:60
Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5
Certificate issuer: /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5
Certificate serial: 1449
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
Manifest number: 1448
Signing time: Sun 02 Nov 2025 16:53:41 +0000
Manifest this update: Sun 02 Nov 2025 16:53:41 +0000
Manifest next update: Sun 09 Nov 2025 16:53:41 +0000
Files and hashes: 1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: XvsOPtBLXZlh71ioZS3+ZlZSZeNAU7m71iiwSql2hO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl
rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5193 (0x1449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F0EF, serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5
Validity
Not Before: Nov 2 16:53:41 2025 GMT
Not After : Nov 9 16:53:41 2025 GMT
Subject: CN=69078c95-427c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:0d:8c:32:6d:8f:bf:21:3d:bf:b9:72:0d:
21:e9:75:99:a7:42:f0:48:33:48:5b:43:b4:f9:71:
c6:e7:73:af:27:48:c3:8d:f5:84:3f:07:12:e8:5e:
38:52:d0:3d:9f:4c:e5:44:a1:bf:96:6a:29:db:f5:
fe:ce:25:10:1b:ef:61:ce:f3:15:2f:65:1b:96:e8:
5a:5c:da:e0:ce:69:0a:ad:38:71:33:5a:9a:f8:db:
cb:f2:c4:76:73:ab:8f:4e:0d:3c:b1:71:0b:ea:e8:
c2:4f:28:71:c9:ac:09:ec:a0:e1:72:16:f4:7a:26:
a9:6f:ce:4f:12:b3:3b:4c:20:45:0e:c5:0f:66:7c:
96:12:cd:8f:7d:fc:32:e7:d4:44:1d:1f:b6:94:be:
a5:a3:68:07:5c:dc:07:54:68:ec:e6:b1:fc:7c:bc:
ed:96:6c:9f:1d:b9:5d:b7:0f:84:12:dd:e2:43:7e:
07:28:7c:40:65:54:e0:2a:22:67:4c:57:b2:51:96:
e3:2f:a2:41:48:98:fe:3a:ea:6f:89:ae:3e:83:1f:
8b:32:60:4e:ff:13:e8:5c:79:e3:7a:4d:d5:76:2d:
76:e0:75:8c:14:3d:2b:eb:dc:08:bb:29:26:94:22:
a7:9e:5c:7d:63:b6:d2:ed:63:8c:ec:91:a7:5c:e5:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F2:90:DF:1C:19:9C:78:9B:9B:A5:42:BF:08:F4:24:CF:5D:70:60
X509v3 Authority Key Identifier:
keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7c:ed:f5:88:81:74:64:1a:d6:76:dd:97:45:3c:b7:2e:e5:
01:61:bb:c1:73:fe:15:6d:de:13:d9:f1:2e:ed:e7:fa:ac:3e:
df:a4:0c:7e:af:7f:54:29:1c:5b:63:7c:73:da:86:99:0d:30:
73:03:4d:19:7b:aa:73:9a:ca:a8:7f:0f:6c:f0:02:0a:0e:cc:
5f:be:1c:fa:24:f4:b2:ad:a2:24:fb:67:6d:47:e9:5c:2f:40:
99:94:b3:50:04:56:eb:9d:9d:45:d7:a4:e7:1a:a0:1e:d2:54:
98:e6:da:1b:51:22:6b:25:30:e4:8c:9a:05:07:50:f2:d7:b7:
21:b9:3e:8b:e7:8e:dc:48:57:4d:85:29:7a:9b:fa:96:c7:c3:
49:26:f0:9d:9b:2e:b2:8f:55:5b:c2:a7:d6:78:ee:7b:49:2f:
92:a2:ea:05:f5:8a:eb:cf:70:1e:fc:55:7b:dd:2b:29:5b:67:
ca:a9:12:4f:e0:7f:8a:4e:29:92:94:e4:47:f3:a5:a9:a3:89:
12:88:f1:01:b8:e4:96:bb:dd:c5:27:db:eb:2e:57:d0:c2:63:
cf:02:7c:36:40:df:42:bb:72:25:6f:6c:8d:62:eb:5f:b8:5c:
4b:d4:1c:32:df:ca:96:ca:59:a0:00:78:4c:10:d3:a6:20:dd:
1d:37:1b:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUYwRUYxMTAvBgNVBAUTKDJENDJCRjlGRkEzNEUxNDE3RUU2QkNDODk3REE1NTQx
NTNDRUVBRTUwHhcNMjUxMTAyMTY1MzQxWhcNMjUxMTA5MTY1MzQxWjAYMRYwFAYD
VQQDEw02OTA3OGM5NS00MjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArGQNjDJtj78hPb+5cg0h6XWZp0LwSDNIW0O0+XHG53OvJ0jDjfWEPwcS6F44
UtA9n0zlRKG/lmop2/X+ziUQG+9hzvMVL2UbluhaXNrgzmkKrThxM1qa+NvL8sR2
c6uPTg08sXEL6ujCTyhxyawJ7KDhchb0eiapb85PErM7TCBFDsUPZnyWEs2Pffwy
59REHR+2lL6lo2gHXNwHVGjs5rH8fLztlmyfHbldtw+EEt3iQ34HKHxAZVTgKiJn
TFeyUZbjL6JBSJj+Oupvia4+gx+LMmBO/xPoXHnjek3Vdi124HWMFD0r69wIuykm
lCKnnlx9Y7bS7WOM7JGnXOU/CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnykN8c
GZx4m5ulQr8I9CTPXXBgMB8GA1UdIwQYMBaAFC1Cv5/6NOFBfua8yJfaVUFTzurl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjBFRi83NDBCRTg0NDdG
MTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRVRi01cnpJbDlwVlFWUE82
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xVS19uX28wNFVGLTVyeklsOXBWUVZQTzZ1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjBFRi83NDBCRTg0NDdGMTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRV
Ri01cnpJbDlwVlFWUE82dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtfO31iIF0ZBrWdt2XRTy3LuUBYbvBc/4Vbd4T2fEu7ef6rD7fpAx+
r39UKRxbY3xz2oaZDTBzA00Ze6pzmsqofw9s8AIKDsxfvhz6JPSyraIk+2dtR+lc
L0CZlLNQBFbrnZ1F16TnGqAe0lSY5tobUSJrJTDkjJoFB1Dy17chuT6L547cSFdN
hSl6m/qWx8NJJvCdmy6yj1VbwqfWeO57SS+SouoF9Yrrz3Ae/FV73SspW2fKqRJP
4H+KTimSlORH86Wpo4kSiPEBuOSWu93FJ9vrLlfQwmPPAnw2QN9Cu3Ilb2yNYutf
uFxL1Bwy38qWylmgAHhMENOmIN0dNxvP
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:14:36 2025 by rpki-client