$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft File: LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json) Hash identifier: TKLs63by1tpKkIc1lXprUVK5IoMb1tTG/WPLkBEQ0fs= Subject key identifier: F7:CA:E0:F3:96:07:B1:2E:EF:84:E7:74:D4:BE:B8:24:3B:C7:E7:2A Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 Certificate issuer: /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Certificate serial: 133F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft Manifest number: 133E Signing time: Sun 02 Jun 2024 17:44:48 +0000 Manifest this update: Sun 02 Jun 2024 17:44:47 +0000 Manifest next update: Sun 09 Jun 2024 17:44:47 +0000 Files and hashes: 1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: IeX69G+NbIoXOWzz/93HtHOobscNjFsqEO9066VTz8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 17:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4927 (0x133f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Validity Not Before: Jun 2 17:44:47 2024 GMT Not After : Jun 9 17:44:47 2024 GMT Subject: CN=665caf90-42f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:6d:ac:14:f5:a5:33:c2:5d:04:21:14:1a: 7a:30:83:a3:d4:65:2b:3b:8e:76:57:52:c1:22:cd: 20:ea:4b:7c:c9:70:bc:ec:53:f8:fa:15:a8:83:d7: d7:6b:78:d7:33:60:f2:65:ad:c7:8d:2b:3b:11:e7: 0d:32:92:78:5d:38:2d:3d:0e:8d:9a:58:1a:89:a7: 68:6d:6e:3b:13:36:0c:51:d8:f4:9b:59:3f:6e:7d: 91:6f:86:06:30:59:82:ce:eb:4f:05:c7:c3:fc:08: 88:c0:d7:a4:64:66:44:e0:4b:77:01:31:d3:a8:70: 48:fe:70:cf:9a:22:88:8a:7c:61:2b:27:18:7e:f9: 09:d3:85:77:d7:dd:89:5b:d0:d0:b3:c9:70:05:2d: 63:4a:7d:18:6b:0f:e9:10:bc:0a:26:f5:20:a0:8e: 9a:65:d3:62:1a:a0:56:2b:e0:d0:18:52:4b:19:ad: b5:8d:bd:6d:96:5a:32:ef:8d:31:ff:cc:9b:b5:8a: ef:80:0d:6b:f3:1e:82:e0:f6:0d:08:28:13:45:c9: d8:3f:8b:4f:8a:3e:ff:e1:94:3a:34:c7:88:83:1f: 8c:9f:8e:ff:2d:bd:17:0f:1a:3c:93:94:e5:4e:b0: 8f:4a:ba:e3:b7:a5:81:66:e6:7d:c8:7d:e1:4c:22: fd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CA:E0:F3:96:07:B1:2E:EF:84:E7:74:D4:BE:B8:24:3B:C7:E7:2A X509v3 Authority Key Identifier: keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a8:19:01:9b:dd:c1:e2:1f:a7:d3:e4:92:fe:33:1e:d4:23: a3:48:cd:70:88:a6:53:50:b8:72:2c:0c:09:bf:72:a3:56:bb: 8f:9d:97:fa:6f:d4:49:38:2d:7c:ba:92:89:01:53:58:2c:d1: 41:29:e7:20:4c:2d:5d:84:1e:02:a9:34:59:e3:89:83:9f:1c: a1:be:c6:72:19:da:ef:c3:7a:05:b1:17:5c:a3:11:60:f0:44: db:5c:0d:23:ff:26:d8:20:9d:95:a4:85:25:be:51:c3:c1:73: 4e:e3:22:04:9c:48:e5:dd:9b:38:47:39:6c:76:2d:5b:06:d7: 51:5c:7f:8c:3e:cf:c7:e4:18:20:45:e8:28:1c:3f:2e:a7:71: 84:e4:d9:f4:b7:d0:0f:b7:2d:22:de:06:06:f1:01:1b:18:c2: 20:6d:db:7a:f0:12:94:09:29:c4:a2:e9:b1:15:dc:cb:13:73: f6:32:98:f0:8d:e2:be:83:f8:eb:54:65:26:b4:1e:f8:4c:0c: 3d:24:ab:ad:38:32:16:fe:5b:60:36:6d:ed:06:16:8e:ab:21: 8b:fc:b9:16:40:08:f9:4c:72:d0:5b:47:45:b6:83:6c:e7:66: 54:a6:00:eb:e8:a2:9a:12:49:15:91:cb:77:67:02:e0:b9:e2: da:9e:b1:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYwRUYxMTAvBgNVBAUTKDJENDJCRjlGRkEzNEUxNDE3RUU2QkNDODk3REE1NTQx NTNDRUVBRTUwHhcNMjQwNjAyMTc0NDQ3WhcNMjQwNjA5MTc0NDQ3WjAYMRYwFAYD VQQDEw02NjVjYWY5MC00MmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7ltrBT1pTPCXQQhFBp6MIOj1GUrO452V1LBIs0g6kt8yXC87FP4+hWog9fX a3jXM2DyZa3HjSs7EecNMpJ4XTgtPQ6NmlgaiadobW47EzYMUdj0m1k/bn2Rb4YG MFmCzutPBcfD/AiIwNekZGZE4Et3ATHTqHBI/nDPmiKIinxhKycYfvkJ04V3192J W9DQs8lwBS1jSn0Yaw/pELwKJvUgoI6aZdNiGqBWK+DQGFJLGa21jb1tlloy740x /8ybtYrvgA1r8x6C4PYNCCgTRcnYP4tPij7/4ZQ6NMeIgx+Mn47/Lb0XDxo8k5Tl TrCPSrrjt6WBZuZ9yH3hTCL9hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfK4POW B7Eu74TndNS+uCQ7x+cqMB8GA1UdIwQYMBaAFC1Cv5/6NOFBfua8yJfaVUFTzurl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjBFRi83NDBCRTg0NDdG MTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRVRi01cnpJbDlwVlFWUE82 dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVS19uX28wNFVGLTVyeklsOXBWUVZQTzZ1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjBFRi83NDBCRTg0NDdGMTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRV Ri01cnpJbDlwVlFWUE82dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxqBkBm93B4h+n0+SS/jMe1COjSM1wiKZTULhyLAwJv3KjVruPnZf6 b9RJOC18upKJAVNYLNFBKecgTC1dhB4CqTRZ44mDnxyhvsZyGdrvw3oFsRdcoxFg 8ETbXA0j/ybYIJ2VpIUlvlHDwXNO4yIEnEjl3Zs4Rzlsdi1bBtdRXH+MPs/H5Bgg RegoHD8up3GE5Nn0t9APty0i3gYG8QEbGMIgbdt68BKUCSnEoumxFdzLE3P2Mpjw jeK+g/jrVGUmtB74TAw9JKutODIW/ltgNm3tBhaOqyGL/LkWQAj5THLQW0dFtoNs 52ZUpgDr6KKaEkkVkct3ZwLgueLanrEE -----END CERTIFICATE-----Generated at Sun Jun 2 18:46:21 2024 by rpki-client on console-ams.rpki-client.org