Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
File:                     uEHIC-gYxhquhBeUDKPmnMFB348.mft (raw, json)
Hash identifier:          WCdQsqM39lAdMUjzNSQG/lO2dymYGIaOghesJJBK/7Q=
Subject key identifier:   B5:9F:58:B7:29:7C:D1:A1:46:D6:83:67:23:E0:D5:0E:F6:42:83:46
Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F
Certificate issuer:       /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F
Certificate serial:       1068
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
Manifest number:          1056
Signing time:             Wed 22 Jul 2026 17:33:10 +0000
Manifest this update:     Wed 22 Jul 2026 17:33:10 +0000
Manifest next update:     Wed 29 Jul 2026 17:33:10 +0000
Files and hashes:         1: uEHIC-gYxhquhBeUDKPmnMFB348.crl (hash: bZsH4EWvlAmX8+2NCYus+8lb5xoXLLEBt3jR8HZJv7c=)
                          2: 65EADA381A8011ECAD1E4B30C4F9AE02.roa (hash: Btv6VMAjhz/7gHDz8tz5vzOXf88yboA619m83tithOo=)
                          3: FB45F610638211E9A58B4C45C4F9AE02.roa (hash: DdJ/Gda5cLDZgecTbgPAmh+If4SrjgCwjMQ/0F6ywFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl
                          rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4200 (0x1068)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91859A3, serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F
        Validity
            Not Before: Jul 22 17:33:10 2026 GMT
            Not After : Jul 29 17:33:10 2026 GMT
        Subject: CN=6a60fed6-2ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f4:b5:a6:1a:c4:45:96:eb:aa:1e:84:9a:1a:
                    69:00:cb:77:1f:b3:8b:01:4c:04:24:38:11:21:b7:
                    c1:cb:0b:9d:a6:ba:f6:6d:52:fb:98:1a:48:56:d6:
                    54:b4:98:51:86:9e:51:a1:8d:ec:31:a8:2c:6c:4b:
                    ce:0e:e4:f6:5a:b2:a3:72:ae:fa:09:d7:9a:68:75:
                    0f:df:2a:7f:b9:7f:f7:f3:93:be:da:80:99:69:08:
                    c4:e5:85:7b:86:5e:fc:88:06:86:ec:c7:93:dc:a9:
                    f5:5e:1e:52:7c:4b:4e:10:60:aa:64:12:36:bf:59:
                    24:b2:2f:30:6d:7b:52:1c:b2:e1:88:54:ce:85:af:
                    1c:37:94:9a:c9:f9:b1:bc:8b:ed:a6:d0:f6:3a:ee:
                    59:b4:0e:fb:c4:e5:fa:78:a3:5b:9b:6d:e8:7a:ec:
                    54:2d:99:48:97:fc:10:26:f0:69:b8:bf:29:ae:3a:
                    b5:7d:18:40:9d:1a:84:14:c8:bb:b2:dc:3d:9c:f3:
                    fd:1e:c5:11:ec:aa:1b:42:69:1a:22:a2:f7:ae:39:
                    f6:fe:b4:c1:14:9c:cc:82:66:86:c2:d1:eb:96:7f:
                    e0:7a:4c:1a:32:3f:99:df:3c:b5:d7:1f:a9:99:b8:
                    5f:c7:92:e2:78:1f:7d:6b:42:ff:b3:78:06:da:d9:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9F:58:B7:29:7C:D1:A1:46:D6:83:67:23:E0:D5:0E:F6:42:83:46
            X509v3 Authority Key Identifier:
                keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:06:cc:10:66:30:4b:78:87:38:60:b2:8a:cb:56:07:7c:bb:
         2f:50:ad:25:bb:61:05:d2:29:74:c0:4b:d6:90:da:37:c7:6c:
         8f:6f:5b:5e:0a:35:87:be:ee:13:5a:1a:9e:dc:5b:dc:e4:d2:
         45:f6:de:6f:c6:e2:55:b0:12:e7:f0:f3:ef:99:5e:31:05:65:
         1a:1b:e4:2f:1f:3b:14:8b:6a:17:76:f5:9e:ab:5c:5d:ab:00:
         7c:f0:8d:45:b3:27:89:41:62:2b:b4:f2:21:9a:b5:2c:99:e6:
         d7:0e:a2:b3:ec:03:a3:3e:33:2c:ed:f7:8c:c1:58:45:04:32:
         2e:e9:15:77:20:f7:c9:47:0f:8a:05:97:94:e1:93:9f:82:02:
         09:41:5e:04:b5:86:c0:14:1e:f9:c0:6c:93:a2:5a:c9:ba:90:
         88:f3:2c:8a:b1:98:bf:6f:92:84:f8:7a:3f:70:d6:46:a8:7d:
         05:b1:0d:72:cc:62:da:b7:d6:3f:2a:da:6a:8a:43:12:3c:36:
         49:0a:08:6c:f3:91:b9:b4:f7:7a:09:28:ab:d4:74:c0:b1:44:
         2c:72:a3:73:c6:6e:17:e4:b0:e6:bd:78:8f:16:de:11:6b:0f:
         eb:3a:d4:01:b3:80:86:3a:48:0e:9a:57:d1:fe:b3:bb:c2:b3:
         6f:b7:91:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:52:04 2026 by rpki-client