Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
File:                     CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json)
Hash identifier:          F2xv3ntcAwvTNyQ/R0AACAwKfKa6xgx2+rPt8IU+1QY=
Subject key identifier:   9D:59:D1:44:9D:1A:A6:F4:FF:A8:2F:B5:71:74:D3:EB:3A:E6:A5:8C
Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37
Certificate issuer:       /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537
Certificate serial:       0D54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
Manifest number:          0D4B
Signing time:             Tue 28 Jul 2026 18:11:23 +0000
Manifest this update:     Tue 28 Jul 2026 18:11:23 +0000
Manifest next update:     Tue 04 Aug 2026 18:11:23 +0000
Files and hashes:         1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: b8jTsnLuPS6+ZLLP8oFLCTy4CsRmuOyeBPE4ljT9/GQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl
                          rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3412 (0xd54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537
        Validity
            Not Before: Jul 28 18:11:23 2026 GMT
            Not After : Aug  4 18:11:23 2026 GMT
        Subject: CN=6a68f0cb-ab78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:7d:22:74:cf:86:89:1e:ed:50:6f:5a:96:
                    97:99:1e:4d:78:e8:d3:25:bd:0f:15:86:a1:6b:6b:
                    29:27:91:14:4e:1f:d6:b8:f6:0f:af:9e:c6:aa:9b:
                    c2:43:3e:1b:1e:99:30:5b:1c:af:d7:d3:9b:34:3c:
                    40:34:f4:82:06:ff:cf:9e:39:a9:81:b1:0a:05:dc:
                    f6:e6:6d:31:9c:18:2b:1c:78:1d:52:2d:10:47:24:
                    ff:d6:83:fd:28:9f:c6:85:66:99:e0:df:c0:c2:32:
                    84:59:7b:7e:7b:4f:4c:78:7f:6d:2a:41:2a:07:e6:
                    13:be:f0:4d:2c:31:5e:24:2a:00:00:8a:dc:15:e3:
                    f1:01:23:27:b4:6e:15:36:c7:bb:e6:b1:23:ff:73:
                    84:b3:60:05:93:55:a8:72:bc:14:7e:04:cb:6b:60:
                    af:dc:73:24:af:ac:32:a5:2d:d1:5d:a7:7c:9b:51:
                    e8:02:05:7b:e7:70:1a:e2:75:1b:b2:60:39:ac:6d:
                    5c:d9:a4:c7:fc:b0:3f:53:28:f2:bf:ea:14:48:13:
                    86:2e:b5:ce:68:2e:a5:bc:64:0d:0d:e8:ba:ba:ec:
                    74:69:f4:a0:6e:3e:fc:74:d2:f8:34:10:3d:58:ac:
                    3e:23:95:1a:a5:f4:14:c6:17:60:dc:99:df:ee:35:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:59:D1:44:9D:1A:A6:F4:FF:A8:2F:B5:71:74:D3:EB:3A:E6:A5:8C
            X509v3 Authority Key Identifier:
                keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:cd:b3:fd:9f:37:c3:ca:d3:d0:e6:bd:ff:72:ff:39:ed:61:
         dc:ec:01:ae:95:a8:cf:2d:a8:bf:a5:75:ed:9c:b5:0e:0a:e8:
         97:86:62:0b:21:aa:11:62:d2:29:2a:43:b2:4c:6a:89:8e:ff:
         1a:0f:83:67:a1:bb:0f:13:57:35:b6:7d:e3:c5:da:16:a1:51:
         0b:a6:3f:e1:35:bf:20:7a:5b:fc:7c:a6:d8:57:c8:3b:69:d0:
         17:7b:c8:2b:e7:1b:41:ca:4a:07:65:12:f7:36:47:ae:7b:d2:
         6b:64:ff:5a:e4:58:49:1f:ab:06:29:c0:c5:19:72:0c:52:6e:
         7f:28:39:41:5d:95:36:a0:b1:ca:71:d0:86:ad:5c:f8:b8:d2:
         60:da:a7:8d:17:c5:87:b1:1c:34:78:8b:7b:f7:ab:22:63:48:
         d7:6a:c0:75:b0:14:b7:38:b2:30:8d:2d:f6:d0:fa:a3:8a:9f:
         a6:79:f5:1e:c5:36:2d:0b:14:4d:97:35:f6:9d:c0:39:5a:6c:
         2e:f4:01:61:76:6e:4e:b7:91:cc:1c:75:65:24:7e:e6:10:11:
         c0:0b:8a:b8:e3:f1:19:ec:64:07:10:98:1c:d8:26:2a:fa:af:
         f8:a6:78:90:fc:e5:6a:76:b6:c2:14:02:28:f7:b7:01:28:62:
         e7:c8:56:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:19 2026 by rpki-client