$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft File: LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json) Hash identifier: b3iCKR93/Z1iSJEAlWJPpX9RybDpJNv97134NTZaAMA= Subject key identifier: BD:FB:DF:A0:1C:AB:9E:D5:B3:C2:90:4E:B3:BF:8B:82:B3:98:C3:99 Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 Certificate issuer: /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Certificate serial: 1400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft Manifest number: 13FF Signing time: Sat 14 Jun 2025 16:52:49 +0000 Manifest this update: Sat 14 Jun 2025 16:52:48 +0000 Manifest next update: Sat 21 Jun 2025 16:52:48 +0000 Files and hashes: 1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: k01Q8PRI73QHCZfubWNqPkUsF7Y7nxyAdCZZLuJJXa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5120 (0x1400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F0EF, serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5 Validity Not Before: Jun 14 16:52:48 2025 GMT Not After : Jun 21 16:52:48 2025 GMT Subject: CN=684da8e0-b3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b0:83:92:43:99:43:93:aa:3b:66:80:ae:f9: 8c:8e:7f:6b:ce:22:31:fc:49:41:21:2a:54:39:97: c7:38:37:18:36:bc:2b:e8:30:a3:6b:f3:de:db:0a: b8:4d:ee:0d:00:2a:60:de:5c:b8:dd:46:10:9b:0b: 48:cd:93:d4:a6:18:67:77:e4:4c:50:fc:c9:92:e2: 81:c3:40:5a:56:1b:01:87:6e:0e:fe:5f:bc:b6:d5: 31:0c:b8:df:20:56:76:bf:9a:2a:ea:99:9b:41:c8: 4d:f7:9b:51:d9:92:43:ba:24:06:db:1d:c4:03:a2: 0b:fa:b2:f5:58:19:5a:b2:33:ba:e6:25:1b:b3:c1: 0d:83:63:37:b9:18:dd:37:d1:2d:1f:72:18:46:72: 61:4f:2d:df:c5:fc:70:56:38:62:a6:98:b0:51:e6: 15:18:b6:45:16:6c:25:ca:d1:02:ae:f5:5b:2f:a5: 26:2a:da:83:2a:48:98:3b:c9:1d:b6:d8:32:25:d9: 01:a0:ae:84:8d:fe:11:a2:16:32:96:54:c2:b8:a2: 8c:e0:aa:b8:30:0b:3e:3b:c3:3f:03:d3:75:4c:4c: 8c:b4:0f:76:5a:c5:01:e3:91:85:45:04:c4:36:23: 65:72:07:72:f1:5c:3b:d7:14:fe:f8:8b:e3:a5:02: 60:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FB:DF:A0:1C:AB:9E:D5:B3:C2:90:4E:B3:BF:8B:82:B3:98:C3:99 X509v3 Authority Key Identifier: keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:22:d8:b6:65:90:51:79:37:f6:70:52:dc:ef:e1:d7:50:44: 41:07:a6:c7:c4:52:f6:ab:f8:62:ff:db:b0:fa:84:59:89:d3: 6b:2d:32:6b:d3:79:a4:c1:ed:24:91:fa:2e:68:72:07:d7:3b: 78:30:b5:15:61:51:9a:51:1a:30:e6:c2:3d:aa:7a:42:13:38: 90:7f:2e:87:a2:9b:ee:f5:c3:71:6d:9a:cc:a2:81:bb:fe:eb: b6:61:bf:29:4e:c1:23:e7:70:51:d0:22:ce:f5:5e:bd:0c:7d: b6:ef:e3:77:5a:73:8c:95:6d:39:37:fb:ae:0b:15:d7:33:31: b4:a8:e6:4d:05:7a:07:09:53:39:58:cc:70:71:08:78:6f:f9: 00:72:bb:e2:1a:13:bf:8e:7e:09:f4:28:fc:e8:2d:92:90:ca: 4f:6a:ee:fc:e6:50:2b:9d:5e:2f:d8:2e:c3:f9:94:8b:9f:df: 3d:f1:5f:bb:5a:b3:ee:04:cd:d2:f5:0d:73:ea:6e:a9:99:51: f4:1e:d5:c0:d6:8c:ed:ed:81:75:07:76:9d:99:3e:ee:ee:b8: 5d:a3:77:42:73:d2:eb:d4:c1:b8:4a:2d:26:1e:49:59:68:30: 05:35:71:8b:23:7a:a8:f2:36:5a:34:44:62:3f:b0:d6:01:35: b4:e2:45:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYwRUYxMTAvBgNVBAUTKDJENDJCRjlGRkEzNEUxNDE3RUU2QkNDODk3REE1NTQx NTNDRUVBRTUwHhcNMjUwNjE0MTY1MjQ4WhcNMjUwNjIxMTY1MjQ4WjAYMRYwFAYD VQQDEw02ODRkYThlMC1iM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9LCDkkOZQ5OqO2aArvmMjn9rziIx/ElBISpUOZfHODcYNrwr6DCja/Pe2wq4 Te4NACpg3ly43UYQmwtIzZPUphhnd+RMUPzJkuKBw0BaVhsBh24O/l+8ttUxDLjf IFZ2v5oq6pmbQchN95tR2ZJDuiQG2x3EA6IL+rL1WBlasjO65iUbs8ENg2M3uRjd N9EtH3IYRnJhTy3fxfxwVjhippiwUeYVGLZFFmwlytECrvVbL6UmKtqDKkiYO8kd ttgyJdkBoK6Ejf4RohYyllTCuKKM4Kq4MAs+O8M/A9N1TEyMtA92WsUB45GFRQTE NiNlcgdy8Vw71xT++IvjpQJg3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3736Ac q57Vs8KQTrO/i4KzmMOZMB8GA1UdIwQYMBaAFC1Cv5/6NOFBfua8yJfaVUFTzurl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjBFRi83NDBCRTg0NDdG MTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRVRi01cnpJbDlwVlFWUE82 dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVS19uX28wNFVGLTVyeklsOXBWUVZQTzZ1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjBFRi83NDBCRTg0NDdGMTIxMUU4QTdBNUQ5MTlDNEY5QUUwMi9MVUtfbl9vMDRV Ri01cnpJbDlwVlFWUE82dVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVIti2ZZBReTf2cFLc7+HXUERBB6bHxFL2q/hi/9uw+oRZidNrLTJr 03mkwe0kkfouaHIH1zt4MLUVYVGaURow5sI9qnpCEziQfy6Hopvu9cNxbZrMooG7 /uu2Yb8pTsEj53BR0CLO9V69DH227+N3WnOMlW05N/uuCxXXMzG0qOZNBXoHCVM5 WMxwcQh4b/kAcrviGhO/jn4J9Cj86C2SkMpPau785lArnV4v2C7D+ZSLn9898V+7 WrPuBM3S9Q1z6m6pmVH0HtXA1ozt7YF1B3admT7u7rhdo3dCc9Lr1MG4Si0mHklZ aDAFNXGLI3qo8jZaNERiP7DWATW04kUA -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:02 2025 by rpki-client