
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
File: LUK_n_o04UF-5rzIl9pVQVPO6uU.mft (raw, json)
Hash identifier: jPw+ALLONJdXD96d6bBKVDzkKzaLYz5pLlG7IKWUhu0=
Subject key identifier: 1D:71:DD:0A:D3:46:F7:A3:93:23:63:56:77:36:9B:B3:AB:70:0C:44
Authority key identifier: 2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5
Certificate issuer: /CN=A915F0EF/serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5
Certificate serial: 1488
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
Manifest number: 1487
Signing time: Sat 28 Feb 2026 16:56:17 +0000
Manifest this update: Sat 28 Feb 2026 16:56:16 +0000
Manifest next update: Sat 07 Mar 2026 16:56:16 +0000
Files and hashes: 1: LUK_n_o04UF-5rzIl9pVQVPO6uU.crl (hash: eGdmuqbUIvkZ+TgZT3IdnPecaxtF+VI9RCMDPFJnpQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl
rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5256 (0x1488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F0EF, serialNumber=2D42BF9FFA34E1417EE6BCC897DA554153CEEAE5
Validity
Not Before: Feb 28 16:56:16 2026 GMT
Not After : Mar 7 16:56:16 2026 GMT
Subject: CN=69a31e31-45d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:ba:29:8c:46:36:1d:61:69:22:1c:d9:f3:
c4:66:2c:96:4e:4c:cf:b6:79:c8:4b:a3:38:9d:fb:
85:4e:3c:a2:8c:9c:d6:46:90:a3:7f:f7:b9:18:53:
90:ed:58:30:1d:ae:8c:53:e5:b0:cf:65:46:8a:32:
a5:33:dd:b9:da:6b:26:81:9c:2a:17:1c:72:3d:1b:
e3:46:01:e8:44:97:07:cd:d1:b9:49:01:31:f8:86:
3e:cc:71:cf:23:d4:6e:7b:e8:64:69:82:c2:30:52:
ed:27:b2:1e:68:b8:00:65:e0:30:10:3d:98:ba:31:
cb:22:5c:79:7b:b3:8f:d9:6a:68:d3:78:27:cc:b8:
1b:01:a3:c4:0a:82:52:90:7b:43:b5:d8:63:ed:c2:
58:3e:e4:21:1e:8b:3a:7d:78:ac:0d:3b:9e:df:56:
f2:5b:f5:85:45:50:c4:31:0d:ee:9f:8f:12:71:3d:
fe:12:48:38:4e:d6:f7:ef:48:80:d5:ea:4f:91:f9:
3b:90:76:8e:fd:46:25:41:da:5e:45:47:6d:86:1e:
a4:a0:e0:67:63:59:31:bf:87:12:7b:d9:a1:79:ae:
11:8d:d8:05:fa:31:73:85:8c:bd:fb:2e:cf:dd:6e:
d0:50:71:ac:11:d2:bb:f5:ec:5d:28:75:92:7a:09:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:71:DD:0A:D3:46:F7:A3:93:23:63:56:77:36:9B:B3:AB:70:0C:44
X509v3 Authority Key Identifier:
keyid:2D:42:BF:9F:FA:34:E1:41:7E:E6:BC:C8:97:DA:55:41:53:CE:EA:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LUK_n_o04UF-5rzIl9pVQVPO6uU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F0EF/740BE8447F1211E8A7A5D919C4F9AE02/LUK_n_o04UF-5rzIl9pVQVPO6uU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b9:7e:e6:08:ec:90:90:ae:be:0b:da:9e:f7:ba:5a:74:bd:
60:af:64:7e:54:c3:fd:ad:45:fc:1a:b3:ab:8f:00:7b:cb:4c:
7f:ab:53:c3:1b:f6:cc:43:af:ea:e6:da:fc:1a:59:f6:f0:3b:
dd:aa:7d:70:f7:e5:6a:82:3b:f9:d3:e4:2c:c2:44:81:ad:39:
01:4d:41:78:bc:fc:3f:c0:21:b6:dc:c6:fb:a0:74:35:dd:dd:
e7:40:c7:a5:55:75:f9:cb:92:d1:a8:8e:b7:23:86:2a:37:8e:
cc:b1:8c:1c:ef:45:e9:d8:0a:5e:39:bd:1a:72:69:1b:30:82:
a4:f7:8b:cd:f6:26:5d:9c:8c:21:5f:4d:af:c3:41:95:85:07:
65:76:cc:d9:41:ed:ce:b9:33:5e:66:6d:62:33:37:04:91:68:
6f:53:93:8f:44:03:ac:d9:62:e8:88:d4:a0:10:0a:4e:23:20:
fe:a0:91:d4:48:fb:9b:d4:a0:a5:81:be:ad:9b:cb:eb:c1:9a:
f2:9e:25:25:0a:e6:8c:a7:74:9a:02:78:f6:7f:2e:f0:f7:34:
66:eb:11:91:a1:8c:ee:60:4e:70:75:32:24:a3:34:61:ca:25:
d5:c4:3f:f4:9f:13:68:24:8e:0f:94:87:eb:93:a7:f5:23:1a:
6a:68:bb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:00:59 2026 by rpki-client