Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
File:                     CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json)
Hash identifier:          aNk7p3AERQyl+euVwcdvOc0/OG8fh1AtwGPdJf622yk=
Subject key identifier:   A9:17:E7:F2:22:31:08:C2:FC:09:AF:15:82:17:F9:7B:F2:D1:F6:E2
Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37
Certificate issuer:       /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537
Certificate serial:       0D72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
Manifest number:          0D69
Signing time:             Thu 24 Sep 2026 17:58:17 +0000
Manifest this update:     Thu 24 Sep 2026 17:58:17 +0000
Manifest next update:     Thu 01 Oct 2026 17:58:17 +0000
Files and hashes:         1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: rWqXH9C0XIRgS1p3AILxq2WugNqSstEL+wo00IM3u1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl
                          rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3442 (0xd72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537
        Validity
            Not Before: Sep 24 17:58:17 2026 GMT
            Not After : Oct  1 17:58:17 2026 GMT
        Subject: CN=6ab564b9-0013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:85:35:a8:2d:da:46:e8:c7:ca:56:14:9e:
                    37:5e:86:ee:4c:43:11:fa:c2:0d:f8:69:d6:ed:90:
                    a0:b4:5c:07:d5:48:6a:d6:d6:da:da:e2:46:6b:53:
                    09:07:7c:14:10:82:8a:f3:e7:a3:64:6e:f6:0e:b1:
                    a5:0a:65:7f:eb:5a:1e:6e:5b:ba:a0:7b:d5:cd:f0:
                    f3:e7:cb:1d:ab:24:f9:66:78:a1:cb:2c:79:34:00:
                    e7:50:38:f6:d9:3b:85:d8:2d:6a:17:4e:d3:55:03:
                    26:8a:43:14:cc:4d:e0:51:42:25:e9:d8:88:5d:bb:
                    d8:08:2f:0a:a6:53:af:08:19:dc:1d:7b:cb:7f:33:
                    30:4e:f7:08:6d:f6:a6:88:df:53:bb:ac:7c:0f:a4:
                    2a:05:2c:e1:66:f8:93:4e:5d:6e:75:a4:d4:8f:31:
                    d3:e2:6c:6e:9f:67:4e:48:8a:74:16:0e:f8:92:07:
                    43:ed:32:06:a1:59:32:4f:a5:7c:c9:0b:cf:d5:13:
                    64:fe:09:62:bd:fa:50:3f:72:85:3e:7b:40:6a:ed:
                    dd:68:0f:85:c3:62:86:a6:d6:15:59:cd:ce:92:23:
                    e3:9c:56:96:2a:34:19:27:1a:4f:5c:fe:e2:0c:2c:
                    c1:35:7c:15:e2:f7:20:a9:66:de:84:0d:d5:8c:11:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:17:E7:F2:22:31:08:C2:FC:09:AF:15:82:17:F9:7B:F2:D1:F6:E2
            X509v3 Authority Key Identifier:
                keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:14:04:fc:bc:52:fb:61:3e:db:b1:ad:00:c4:ab:d5:17:90:
         b4:28:79:35:e4:7d:46:b7:f1:ad:f3:fb:bb:8c:21:db:1b:34:
         d3:2b:c6:bb:3a:c1:1d:4f:d6:cb:8b:45:c3:89:23:01:77:1d:
         27:95:0e:15:a1:dc:f2:9d:69:a8:47:3b:b8:73:e7:f4:45:39:
         28:ee:59:e0:a4:54:eb:cc:be:46:de:f9:bc:b5:51:75:90:99:
         a1:76:63:5a:9b:3f:82:32:f6:67:78:e4:8c:ed:09:7e:0b:86:
         14:4d:91:7b:2c:ce:d9:72:66:92:d1:d3:bd:a8:0f:ad:50:cd:
         88:d0:cb:8f:ac:9f:5a:f1:d1:32:77:d3:42:33:0b:c3:65:02:
         36:ee:2d:2c:cf:11:c6:13:9a:51:73:2b:66:cf:0e:f2:41:4d:
         c7:1d:41:9e:35:8a:db:62:29:50:62:71:bf:9d:f2:2b:56:c9:
         58:20:9a:3b:73:8e:10:12:cc:4b:8f:11:e8:78:85:b8:86:97:
         f8:4e:89:36:8c:55:bf:65:d5:cf:7b:4a:b8:07:07:5c:c5:99:
         55:97:89:ef:94:58:7c:f6:df:f7:4c:1b:f3:de:42:14:0c:ab:
         45:1f:55:2a:f8:31:e3:af:e5:52:d5:bf:70:41:67:b4:a0:bc:
         4c:de:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:25:08 2026 by rpki-client