Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
File:                     N-24AKVpn6hX9211S38vQXXuqF0.mft (raw, json)
Hash identifier:          5M0nmfXYd1YGTTb6P9GVvkRL7V6/tsXk4QqV/urFIu8=
Subject key identifier:   C3:A4:15:B6:58:49:22:98:9A:A6:C7:8F:87:B4:37:60:BA:DA:62:A6
Authority key identifier: 37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D
Certificate issuer:       /CN=A91E6F07/serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D
Certificate serial:       0951
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
Manifest number:          1684
Signing time:             Tue 06 Oct 2026 18:14:57 +0000
Manifest this update:     Tue 06 Oct 2026 18:14:57 +0000
Manifest next update:     Tue 13 Oct 2026 18:14:57 +0000
Files and hashes:         1: N-24AKVpn6hX9211S38vQXXuqF0.crl (hash: ac4mYppkH3K0CveqC5Qq3Lq70yiryObXRBil9K+NNOo=)
                          2: 6E570966CD1B11EA9613AA1DC4F9AE02.roa (hash: uA63ElczLstUjGozGXTpC8tAbSwvPvhDg8Ef6vahK6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl
                          rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2385 (0x951)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6F07, serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D
        Validity
            Not Before: Oct  6 18:14:57 2026 GMT
            Not After : Oct 13 18:14:57 2026 GMT
        Subject: CN=6ac53aa1-caad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:53:5d:cc:ff:62:2d:6b:54:e7:1d:b2:4a:
                    1a:59:0d:a9:04:0c:65:72:76:cf:59:94:c1:2a:8a:
                    ba:3b:cd:f4:ab:5f:5a:e4:2f:88:72:79:99:62:24:
                    5c:97:2d:5b:55:7e:0c:1f:2b:7c:28:f2:aa:21:8f:
                    d4:39:b4:1a:ee:ee:4e:46:32:d7:4e:18:3b:34:bf:
                    04:52:fb:69:e2:99:f2:96:99:88:29:71:15:7f:0a:
                    20:72:e5:ec:a3:2a:53:f6:fe:44:23:b0:be:46:39:
                    c9:0e:01:d4:3f:d0:b9:9e:5d:3f:54:57:67:ff:92:
                    34:47:99:18:c9:76:09:24:0f:1e:d7:38:19:ce:38:
                    ce:6a:a4:89:dd:04:f0:cd:07:f7:18:82:ba:89:55:
                    ab:72:2d:d1:49:8a:87:05:70:11:3b:74:2f:86:9e:
                    b9:8e:13:2b:73:e6:82:ac:8d:e2:fd:a6:8d:4a:5d:
                    58:f1:87:69:9b:84:45:6a:09:f8:ab:c5:2f:d9:39:
                    1e:d6:8c:62:fd:e8:96:dd:c7:c1:69:61:7a:62:b4:
                    d2:aa:e2:4a:fe:d5:fc:68:7c:f8:f2:60:f6:ed:8e:
                    f0:b1:cd:d3:52:3a:d7:54:3c:eb:b1:ee:a3:ec:4d:
                    61:b8:f1:e2:c0:a1:90:06:17:c9:55:24:cd:c3:be:
                    86:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A4:15:B6:58:49:22:98:9A:A6:C7:8F:87:B4:37:60:BA:DA:62:A6
            X509v3 Authority Key Identifier:
                keyid:37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:18:18:9e:97:70:06:cd:5e:74:5b:61:5c:7a:f7:a4:7d:67:
         45:ec:46:bc:39:56:43:1f:89:dd:32:58:73:e4:69:38:7b:a9:
         37:69:87:54:5d:a2:a6:c0:c5:d0:58:36:62:82:9f:ec:a4:97:
         3f:37:17:45:a2:6f:7d:e0:71:87:9e:e6:ef:d1:21:2d:11:a9:
         ca:46:39:23:30:57:6f:86:0c:d3:79:29:dd:99:03:dd:77:d1:
         d4:02:92:5b:eb:7e:c8:41:4e:75:49:e2:81:3d:c6:cb:fb:88:
         5f:51:ad:90:f4:3d:f0:9d:59:74:9c:9f:5d:60:53:a4:e6:0f:
         60:88:d7:eb:77:e5:4d:11:5b:34:53:cb:2b:6c:88:ae:55:a3:
         d5:ed:a0:a3:62:f3:b9:dd:f7:3a:fb:32:f7:68:59:db:af:ad:
         bc:f5:b5:e7:4c:3b:a5:c2:89:ef:87:9a:f8:be:6b:f3:16:d5:
         89:28:b7:f2:29:ea:83:68:2b:2e:8e:40:1a:2a:73:a3:2b:a1:
         43:a9:50:8d:92:5a:32:9d:9a:5f:f3:76:cc:5e:6f:ce:ff:a9:
         b6:f7:08:71:58:e8:96:23:37:d5:3d:e1:99:34:2b:96:de:32:
         a9:b0:1a:77:f6:81:bb:2e:23:1e:8e:ae:fe:a4:94:7d:e3:31:
         b1:03:60:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:24:41 2026 by rpki-client