Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
File:                     N-24AKVpn6hX9211S38vQXXuqF0.mft (raw, json)
Hash identifier:          vS+sGOC+soFzl839jtPpMHKvHwFq/xs2H6I5mxGD5HY=
Subject key identifier:   B5:CB:99:02:17:22:46:8E:A4:EB:5F:4F:62:A2:DA:09:68:98:EF:8E
Authority key identifier: 37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D
Certificate issuer:       /CN=A91E6F07/serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D
Certificate serial:       08EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
Manifest number:          15BE
Signing time:             Thu 26 Mar 2026 18:10:59 +0000
Manifest this update:     Thu 26 Mar 2026 18:10:59 +0000
Manifest next update:     Thu 02 Apr 2026 18:10:59 +0000
Files and hashes:         1: N-24AKVpn6hX9211S38vQXXuqF0.crl (hash: 3TlPgfQWfoYqKwZTwvXqATB4quCeBY0L2gmsTKyp7uY=)
                          2: 6E570966CD1B11EA9613AA1DC4F9AE02.roa (hash: uA63ElczLstUjGozGXTpC8tAbSwvPvhDg8Ef6vahK6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl
                          rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286 (0x8ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6F07, serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D
        Validity
            Not Before: Mar 26 18:10:59 2026 GMT
            Not After : Apr  2 18:10:59 2026 GMT
        Subject: CN=69c576b3-1226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:8c:2e:06:f5:87:1e:6b:f5:b7:3a:49:56:
                    f5:3f:79:f2:10:df:5c:a7:51:29:ff:90:e9:e4:1e:
                    9a:91:ed:ae:8d:ab:95:b9:d6:17:13:f4:a4:32:c4:
                    aa:86:1d:49:ac:c4:53:1d:65:6d:22:9c:57:95:4e:
                    1e:86:ca:11:ce:37:95:b6:4d:e1:2e:cd:6b:87:94:
                    3e:2e:7b:72:79:f6:8b:bd:d9:98:b2:9f:a3:b5:37:
                    6e:bf:73:23:ab:2f:e2:85:28:89:ad:89:68:b6:7c:
                    c8:74:54:c2:8a:4c:18:44:51:f1:e5:6a:04:8b:a8:
                    f5:1f:13:4e:11:86:42:60:d0:f2:73:86:af:a1:59:
                    d5:9b:9b:05:53:fd:50:b4:c3:82:bc:df:26:9b:9d:
                    89:12:ae:82:e6:0a:2f:c7:09:c0:b6:ab:cd:a9:23:
                    c9:ea:71:f9:52:40:26:e7:57:10:22:21:fb:03:77:
                    d1:ad:e3:c6:ed:d8:74:46:87:3f:49:8e:44:c6:1f:
                    7b:bb:89:25:e7:6a:09:f0:c6:41:b2:40:17:31:ba:
                    11:3b:46:b0:28:b9:9c:13:59:75:90:f8:f0:11:f0:
                    fe:78:49:ec:ba:a8:52:10:88:97:82:3e:be:ae:b9:
                    59:ad:11:ac:d6:b2:f7:14:36:fe:24:c7:39:ce:42:
                    45:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CB:99:02:17:22:46:8E:A4:EB:5F:4F:62:A2:DA:09:68:98:EF:8E
            X509v3 Authority Key Identifier:
                keyid:37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:d1:e1:ce:45:7b:42:cd:c0:4c:02:6e:2d:ad:ab:c7:94:3f:
         4a:5e:c5:fa:8d:fa:8f:a5:ba:4e:3e:dc:09:b3:67:5e:5f:e1:
         0f:be:75:88:a2:80:68:8d:65:61:8a:9a:7a:fe:af:d8:93:7a:
         da:5e:b0:c7:82:82:13:48:af:84:2e:ba:91:ed:f1:b6:ce:41:
         90:03:46:b0:3b:cf:39:21:e6:88:d8:6f:72:61:8b:5f:70:31:
         fd:17:9c:ec:53:4c:8b:f0:44:fc:a1:8b:36:ca:6d:bd:3a:94:
         1e:22:35:f5:05:23:6b:f7:d7:3c:60:41:53:56:e2:99:d5:a4:
         41:19:e5:4b:4d:fc:70:00:01:32:c5:78:6d:3e:f2:da:cf:23:
         c3:b3:a2:c7:6c:cc:28:fd:3e:1d:e0:bb:37:56:0b:09:da:2c:
         06:90:bf:7c:b4:79:d0:c8:76:59:fc:ee:da:6b:30:ae:bb:42:
         74:84:35:5d:17:83:32:c2:e7:c0:4c:0e:fd:a9:c6:cf:4a:69:
         4c:aa:0b:b6:74:d1:86:29:01:8c:93:b5:d9:28:5e:f1:1f:0e:
         50:89:7c:dc:94:4a:fb:9b:b7:ad:04:d0:0c:53:ee:65:f5:9b:
         db:e7:91:d2:c5:29:88:92:97:e9:f1:14:af:0f:d4:7f:5f:c1:
         36:66:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:58:51 2026 by rpki-client