Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
File:                     CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json)
Hash identifier:          +4QW0pnV/VF7gdcZI4qFVpqitKLcnfsPjadHR3SxhhY=
Subject key identifier:   95:4C:C1:0C:81:05:FB:A5:06:D0:F0:38:29:D9:B8:56:8B:23:21:33
Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37
Certificate issuer:       /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537
Certificate serial:       0D1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
Manifest number:          0D11
Signing time:             Sat 04 Apr 2026 17:57:48 +0000
Manifest this update:     Sat 04 Apr 2026 17:57:47 +0000
Manifest next update:     Sat 11 Apr 2026 17:57:47 +0000
Files and hashes:         1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: GAgjkK4y7dtUoNEp+OlBjySHRsDLLC8fcrzXgbyOJN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl
                          rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3354 (0xd1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537
        Validity
            Not Before: Apr  4 17:57:47 2026 GMT
            Not After : Apr 11 17:57:47 2026 GMT
        Subject: CN=69d1511c-3cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:d4:72:f3:5d:0c:c4:3f:12:c4:8e:60:e5:
                    91:ed:a5:32:70:f3:91:5b:d4:f0:64:24:0b:ba:0f:
                    58:50:5c:a6:73:9a:d7:bd:e0:7d:28:24:f4:fa:83:
                    a0:43:94:86:7c:d5:ee:f8:47:21:d3:72:49:73:0d:
                    f2:66:4b:3f:d7:d9:4a:fa:aa:1d:91:00:fb:ac:8e:
                    4f:d6:42:c2:5a:45:37:d4:89:86:77:b5:f5:de:4a:
                    0f:12:72:17:6b:29:63:8a:ae:8a:d7:91:24:b3:ac:
                    30:2f:bc:c3:57:3d:6c:7d:0c:3d:01:14:f6:ac:89:
                    91:8a:9b:5b:da:6b:c6:0f:1f:88:4b:d9:bc:9a:b3:
                    50:a8:98:20:db:e3:18:49:55:66:d5:c3:12:81:05:
                    bf:1e:7a:48:09:00:46:f0:ee:58:12:82:12:a9:97:
                    08:56:a6:91:0b:90:f1:0c:f9:30:f2:5b:e2:79:46:
                    bb:4e:b6:fd:a8:f5:fc:82:fe:8b:bb:48:69:32:82:
                    a7:61:5b:51:8a:24:92:7d:b6:ba:b8:66:49:7e:d0:
                    b4:e8:af:4f:51:a2:09:e0:89:d8:36:0f:f5:90:f2:
                    c0:86:57:46:4d:73:e7:01:9b:9f:41:27:fa:f9:39:
                    da:04:c5:40:6f:68:e6:6d:90:af:dd:13:71:55:02:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4C:C1:0C:81:05:FB:A5:06:D0:F0:38:29:D9:B8:56:8B:23:21:33
            X509v3 Authority Key Identifier:
                keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:93:bd:5a:a6:84:77:95:58:58:8b:f1:eb:ff:b1:5d:e1:d2:
         b0:b0:69:b5:87:47:d1:56:82:94:cf:dc:9f:0c:79:d2:14:f7:
         14:f6:7a:db:68:97:a9:be:5f:17:0a:3f:86:34:a5:f1:c4:c7:
         f8:8e:b4:26:9d:01:fc:f6:9f:02:6f:e1:0f:35:e6:d6:d7:1b:
         5f:e6:bc:e8:ac:9c:19:f1:aa:32:da:4a:2d:04:ab:92:dd:eb:
         f0:72:36:86:c1:17:f6:e1:3a:8c:9d:5f:0e:34:7a:0c:62:75:
         67:b1:fd:1b:9f:99:fb:b7:f8:34:50:11:ce:c9:79:2c:55:a2:
         f1:17:58:e7:ca:03:50:c2:f2:ad:91:96:ad:4e:d4:cf:85:5a:
         f4:97:f2:cf:7b:f1:6e:f8:df:ca:7d:79:fb:80:12:ad:2d:6f:
         9e:eb:e8:dc:9e:80:09:44:79:37:df:02:1e:a2:03:30:3f:2e:
         6c:ed:3f:1f:6d:2f:b4:ad:5f:97:b5:2a:2c:aa:a5:af:cd:7a:
         3d:48:e4:f5:a5:fc:fb:b4:3d:fa:aa:1e:d1:3d:36:5e:c0:ca:
         ea:8c:16:2d:8d:46:a9:a9:a8:cb:21:54:e3:10:bc:e0:18:e6:
         45:58:03:7f:13:96:54:07:28:55:b9:8f:67:4c:da:b4:9a:15:
         4e:67:1b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:48 2026 by rpki-client