$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft File: LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json) Hash identifier: CHV55Q7mv0vKvLNybO72t8cd5r9yYHxw0PvNiZoo9Fw= Subject key identifier: F0:D5:06:D1:F7:80:7E:33:02:EF:A3:94:40:24:E0:43:AB:1F:62:6D Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 Certificate issuer: /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Certificate serial: 13F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft Manifest number: 13F7 Signing time: Fri 30 May 2025 17:06:54 +0000 Manifest this update: Fri 30 May 2025 17:06:54 +0000 Manifest next update: Fri 06 Jun 2025 17:06:54 +0000 Files and hashes: 1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: ZkALECmEBQ7pfoTFVlIBA7yNSydFdAPdrCJDZjq4A3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5112 (0x13f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F0EF, serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Validity Not Before: May 30 17:06:54 2025 GMT Not After : Jun 6 17:06:54 2025 GMT Subject: CN=6839e5ae-b83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d6:b1:56:cf:aa:d5:f6:0f:54:6e:aa:74:97: 87:53:35:01:ca:37:11:d0:23:13:ff:7e:0a:f8:c3: de:81:77:d0:48:b5:30:ab:a7:62:bb:1d:8e:29:1f: 95:20:1a:37:e9:fa:36:e6:1d:ac:e2:ed:2b:74:c6: 4f:21:a3:c1:e9:aa:71:6a:4e:70:18:7b:5d:98:56: 11:ae:67:28:fd:ba:0d:e4:8f:7a:76:b7:79:0f:10: d0:a1:8f:50:41:ce:fa:fa:40:1b:0a:41:9b:56:08: ba:58:f1:54:ec:5a:93:9d:c2:6f:eb:5e:0c:ba:b8: cb:a9:86:33:01:43:39:2f:25:11:77:cc:a9:b4:3b: 3a:36:c1:f8:84:2f:58:fe:f9:90:c0:2d:9f:37:0f: 3b:7e:dd:95:93:6b:24:bd:f6:33:f4:fc:87:0b:49: 74:a8:ba:a5:b5:66:ac:40:ea:c2:2e:0c:0f:9a:50: 93:00:8f:d8:41:73:71:7e:a4:9b:b9:90:9e:d1:e9: 2c:dc:aa:a3:39:78:7e:02:23:7f:22:5b:82:a7:75: b9:1b:7b:e5:77:35:f5:0c:28:aa:7d:2e:e3:ed:0b: ef:b9:d0:78:75:3a:62:8f:ea:11:f6:93:a9:6c:6c: cf:ec:f1:07:4e:94:16:f7:d2:16:8a:6c:8b:ce:ec: 37:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D5:06:D1:F7:80:7E:33:02:EF:A3:94:40:24:E0:43:AB:1F:62:6D X509v3 Authority Key Identifier: keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:64:84:6e:a3:1c:73:e3:d7:08:1e:5f:6b:bb:57:0a:c0:fa: be:1d:de:bd:da:e7:56:1c:0a:2f:6a:29:12:46:98:c7:10:dc: 0d:42:b3:af:25:e7:93:9e:27:9f:5d:d8:e7:c6:83:4d:45:bc: c8:eb:14:8a:89:43:03:43:9c:3b:d2:55:71:3c:65:26:2b:93: 35:ef:c3:05:b3:a7:0b:cc:7a:a2:bf:0f:cf:f7:8c:ec:53:4c: d2:47:81:89:17:34:1b:a9:ee:4a:09:9f:ca:aa:56:ba:ce:45: c5:d6:1d:35:b5:31:5f:75:3b:1f:66:bf:41:d0:f1:e1:7b:7d: 05:b9:2b:97:5a:50:69:81:cb:c8:08:b9:04:11:2f:ce:71:66: fb:d6:db:16:8d:48:72:70:e7:cd:62:13:b5:e4:47:6c:a3:5f: b7:55:30:ae:4e:34:10:b2:1c:de:be:b4:aa:16:bc:37:c7:63: a7:b1:64:a6:90:91:57:eb:4d:cb:20:f0:91:58:e5:b7:3c:db: 07:db:c2:0f:f4:76:90:34:8c:56:51:bd:6a:18:23:a9:c6:45: cd:56:d5:bf:0d:e1:ed:62:5c:cb:af:b4:28:a2:64:68:e5:9f: 5f:dc:d1:71:59:7d:57:48:72:d7:94:4c:c4:a3:39:65:ef:8d: e1:c7:73:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYwRUYxMTAvBgNVBAUTKDJENDJCRjlGRkEzNEUxNDE3RUU2QkNDODk3REE1NTQx NTNDRUVBRTUwHhcNMjUwNTMwMTcwNjU0WhcNMjUwNjA2MTcwNjU0WjAYMRYwFAYD VQQDEw02ODM5ZTVhZS1iODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8NaxVs+q1fYPVG6qdJeHUzUByjcR0CMT/34K+MPegXfQSLUwq6diux2OKR+V IBo36fo25h2s4u0rdMZPIaPB6apxak5wGHtdmFYRrmco/boN5I96drd5DxDQoY9Q Qc76+kAbCkGbVgi6WPFU7FqTncJv614MurjLqYYzAUM5LyURd8yptDs6NsH4hC9Y /vmQwC2fNw87ft2Vk2skvfYz9PyHC0l0qLqltWasQOrCLgwPmlCTAI/YQXNxfqSb uZCe0eks3KqjOXh+AiN/IluCp3W5G3vldzX1DCiqfS7j7QvvudB4dTpij+oR9pOp bGzP7PEHTpQW99IWimyLzuw3mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDVBtH3 gH4zAu+jlEAk4EOrH2JtMB8GA1UdIwQYMBaAFC1Cv5/6NOFBfua8yJfaVUFTzurl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjBFRi83NDBCRTg0NDdG MTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRVRi01cnpJbDlwVlFWUE82 dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVS19uX28wNFVGLTVyeklsOXBWUVZQTzZ1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjBFRi83NDBCRTg0NDdGMTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRV Ri01cnpJbDlwVlFWUE82dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXZIRuoxxz49cIHl9ru1cKwPq+Hd692udWHAovaikSRpjHENwNQrOv JeeTniefXdjnxoNNRbzI6xSKiUMDQ5w70lVxPGUmK5M178MFs6cLzHqivw/P94zs U0zSR4GJFzQbqe5KCZ/Kqla6zkXF1h01tTFfdTsfZr9B0PHhe30FuSuXWlBpgcvI CLkEES/OcWb71tsWjUhycOfNYhO15Edso1+3VTCuTjQQshzevrSqFrw3x2OnsWSm kJFX603LIPCRWOW3PNsH28IP9HaQNIxWUb1qGCOpxkXNVtW/DeHtYlzLr7QoomRo 5Z9f3NFxWX1XSHLXlEzEozll743hx3PV -----END CERTIFICATE-----Generated at Sat May 31 17:49:38 2025 by rpki-client