$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft File: LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json) Hash identifier: QT/1WYos98skB2F2xmDlpY4G2oXeQdqKSW6I+j/Ab30= Subject key identifier: FB:41:24:30:58:6F:5E:38:64:27:DB:52:ED:22:BA:CB:4D:05:55:81 Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 Certificate issuer: /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Certificate serial: 13E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft Manifest number: 13E5 Signing time: Thu 24 Apr 2025 16:57:02 +0000 Manifest this update: Thu 24 Apr 2025 16:57:01 +0000 Manifest next update: Thu 01 May 2025 16:57:01 +0000 Files and hashes: 1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: 5MngOzpGbiDBUiuRC9KBNvXhg/DMARtgA8TsLlf+YQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5094 (0x13e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F0EF, serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Validity Not Before: Apr 24 16:57:01 2025 GMT Not After : May 1 16:57:01 2025 GMT Subject: CN=680a6d5e-2b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:97:67:f4:f5:48:bd:f6:d4:bf:c8:c6:dc: a0:58:33:81:78:39:f2:82:dc:8a:6a:6e:93:d4:43: 6e:70:ca:a5:52:b2:ce:74:36:e6:f3:13:a8:58:ce: 6f:1e:46:70:5c:83:af:45:e1:2f:07:ea:f9:00:ac: 38:0d:ab:43:e9:23:4b:29:f5:d7:b5:b7:0b:14:dd: f9:96:ab:8e:2d:70:8a:da:2f:2e:45:04:36:82:6a: 1b:09:54:65:ae:59:af:b8:34:f4:f2:07:cd:a1:81: b5:ca:e6:f8:19:0f:83:47:ac:c9:18:6f:6f:01:e7: 5e:86:f0:25:ce:6b:ba:f9:a3:be:ea:99:8d:fc:dc: 6e:48:dc:86:5d:15:14:d0:31:79:87:2f:f8:c3:f4: 0a:ed:48:c7:7b:89:93:5c:c5:4c:ac:76:e1:a8:a6: f9:fd:ca:98:79:dd:e2:51:02:ef:fe:64:ae:e1:38: 1d:40:5d:6a:da:00:60:1f:3b:d4:07:e4:ca:ac:ec: 17:4b:70:57:d0:ec:68:68:91:9a:e4:a2:09:ae:03: 40:ed:51:68:c7:16:86:65:aa:09:c9:de:82:61:5e: 90:d4:c8:f3:86:74:d1:97:b7:ef:e7:93:52:a4:5c: bf:f4:fb:1a:73:04:47:ae:62:e3:d8:67:06:7f:3a: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:41:24:30:58:6F:5E:38:64:27:DB:52:ED:22:BA:CB:4D:05:55:81 X509v3 Authority Key Identifier: keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:d2:79:c2:c1:d0:6d:80:bd:13:17:19:cb:12:62:de:32:bf: 3a:c9:4e:76:3b:d4:f3:34:dd:85:c2:ef:ce:e2:30:8d:e0:17: e3:a2:76:ad:ca:f2:92:c2:49:8a:a3:62:f9:35:6b:f0:b0:c3: fe:86:8f:88:34:61:15:01:6b:be:2a:fb:23:d1:55:42:01:b0: 36:ec:8e:2d:99:fc:56:78:2d:97:ea:a4:fa:89:64:5f:f9:82: 15:5a:19:b7:b4:e1:8c:09:4b:ba:92:06:a9:f8:c5:e0:69:95: a7:69:02:af:a5:e5:76:40:44:cb:c8:a5:fe:32:e8:5f:94:d8: 02:45:d0:a3:56:52:b0:00:66:a8:57:d1:c7:b5:18:45:d3:02: 31:bf:3e:56:e2:8e:5c:cd:a9:ac:e6:c7:cb:b4:04:fe:ff:bd: f0:eb:47:ea:17:2c:0e:f1:c1:0c:4f:0e:98:fe:3d:03:db:07: d9:20:5a:4f:ae:38:73:85:60:b6:39:df:47:65:9d:e6:2e:c5: 6f:21:3e:f6:6b:ea:ef:b9:6f:13:67:40:2c:54:a3:73:6d:a7: cf:6b:f6:8e:a3:93:ba:34:bd:38:09:b3:5b:fe:67:71:f2:53: a4:f5:7f:c0:60:b3:f8:e7:92:cc:94:f0:8b:3d:c4:a0:04:a7: db:8f:f5:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYwRUYxMTAvBgNVBAUTKDJENDJCRjlGRkEzNEUxNDE3RUU2QkNDODk3REE1NTQx NTNDRUVBRTUwHhcNMjUwNDI0MTY1NzAxWhcNMjUwNTAxMTY1NzAxWjAYMRYwFAYD VQQDEw02ODBhNmQ1ZS0yYjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxmXZ/T1SL321L/IxtygWDOBeDnygtyKam6T1ENucMqlUrLOdDbm8xOoWM5v HkZwXIOvReEvB+r5AKw4DatD6SNLKfXXtbcLFN35lquOLXCK2i8uRQQ2gmobCVRl rlmvuDT08gfNoYG1yub4GQ+DR6zJGG9vAedehvAlzmu6+aO+6pmN/NxuSNyGXRUU 0DF5hy/4w/QK7UjHe4mTXMVMrHbhqKb5/cqYed3iUQLv/mSu4TgdQF1q2gBgHzvU B+TKrOwXS3BX0OxoaJGa5KIJrgNA7VFoxxaGZaoJyd6CYV6Q1MjzhnTRl7fv55NS pFy/9PsacwRHrmLj2GcGfzo0rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtBJDBY b144ZCfbUu0iustNBVWBMB8GA1UdIwQYMBaAFC1Cv5/6NOFBfua8yJfaVUFTzurl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjBFRi83NDBCRTg0NDdG MTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRVRi01cnpJbDlwVlFWUE82 dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVS19uX28wNFVGLTVyeklsOXBWUVZQTzZ1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjBFRi83NDBCRTg0NDdGMTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRV Ri01cnpJbDlwVlFWUE82dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx0nnCwdBtgL0TFxnLEmLeMr86yU52O9TzNN2Fwu/O4jCN4Bfjonat yvKSwkmKo2L5NWvwsMP+ho+INGEVAWu+Kvsj0VVCAbA27I4tmfxWeC2X6qT6iWRf +YIVWhm3tOGMCUu6kgap+MXgaZWnaQKvpeV2QETLyKX+MuhflNgCRdCjVlKwAGao V9HHtRhF0wIxvz5W4o5czams5sfLtAT+/73w60fqFywO8cEMTw6Y/j0D2wfZIFpP rjhzhWC2Od9HZZ3mLsVvIT72a+rvuW8TZ0AsVKNzbafPa/aOo5O6NL04CbNb/mdx 8lOk9X/AYLP455LMlPCLPcSgBKfbj/UQ -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:38 2025 by rpki-client