Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
File:                     uEHIC-gYxhquhBeUDKPmnMFB348.mft (raw, json)
Hash identifier:          /B8RGoK439qciyq0Ak7erFubL6Jh87B5VR761eKeSTM=
Subject key identifier:   23:FC:D7:3E:E0:43:16:FA:2B:11:78:6F:99:B8:D1:09:1E:A9:7E:17
Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F
Certificate issuer:       /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F
Certificate serial:       106B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
Manifest number:          1059
Signing time:             Tue 28 Jul 2026 17:29:42 +0000
Manifest this update:     Tue 28 Jul 2026 17:29:41 +0000
Manifest next update:     Tue 04 Aug 2026 17:29:41 +0000
Files and hashes:         1: uEHIC-gYxhquhBeUDKPmnMFB348.crl (hash: MxhoarrmKriblgpobB1ufEbkTLswDa37TE7ZgjdfwPQ=)
                          2: FB45F610638211E9A58B4C45C4F9AE02.roa (hash: DdJ/Gda5cLDZgecTbgPAmh+If4SrjgCwjMQ/0F6ywFk=)
                          3: 65EADA381A8011ECAD1E4B30C4F9AE02.roa (hash: Btv6VMAjhz/7gHDz8tz5vzOXf88yboA619m83tithOo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl
                          rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4203 (0x106b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91859A3, serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F
        Validity
            Not Before: Jul 28 17:29:41 2026 GMT
            Not After : Aug  4 17:29:41 2026 GMT
        Subject: CN=6a68e706-4063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ca:0e:8b:20:0f:85:06:3c:ec:12:6c:a1:44:
                    12:2f:7e:3f:64:dd:d7:51:65:c5:1f:75:c4:d8:fc:
                    57:40:05:ce:27:20:66:a8:34:65:5c:b1:2e:78:81:
                    d7:59:b2:66:7b:95:91:08:2f:86:60:d2:38:25:9b:
                    df:21:58:89:64:a5:34:9e:a9:01:7d:7d:56:3f:79:
                    ec:57:9d:ae:80:17:b7:0e:64:b4:28:18:f8:1c:12:
                    b6:d3:f6:ed:1e:7b:bd:8c:e2:62:71:d6:e6:aa:0a:
                    06:31:73:91:e0:88:c1:27:cb:88:9c:4f:a4:7f:99:
                    c1:03:aa:24:0c:32:90:10:14:fc:a1:f6:ea:9a:bd:
                    fa:bd:02:ca:0e:02:f9:ce:c5:95:a8:19:ad:1f:78:
                    e2:00:05:fa:ff:a2:7b:10:a6:d5:d7:9b:b6:66:88:
                    8a:2c:0e:52:2c:8e:59:b3:44:ab:82:20:63:da:65:
                    9d:4a:d1:83:82:1d:2b:1b:96:65:8d:3c:a0:3b:1a:
                    5c:9b:a6:da:9e:6f:08:ff:7b:73:ee:24:2a:0d:27:
                    db:8b:7e:d2:d4:9d:bc:29:d2:07:ae:39:16:29:5d:
                    9f:63:4e:db:82:25:a7:43:e3:37:8b:1d:1b:71:91:
                    0d:50:d0:23:84:72:4a:49:e0:c2:a2:2d:aa:e2:c5:
                    0d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FC:D7:3E:E0:43:16:FA:2B:11:78:6F:99:B8:D1:09:1E:A9:7E:17
            X509v3 Authority Key Identifier:
                keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:30:41:31:e4:f2:89:0e:ad:b7:b3:59:35:9e:af:71:be:10:
         43:b7:9a:68:db:91:91:81:92:19:64:b1:8c:f1:07:3d:b9:ca:
         c6:0c:ca:53:64:15:fc:70:0e:ca:e7:80:6c:33:60:52:08:55:
         79:01:1e:14:b7:c4:a1:47:cc:94:1b:dc:43:81:8d:86:d7:5a:
         b0:f9:95:3b:1c:e5:dd:7f:44:44:62:e3:eb:00:e9:06:8c:6b:
         be:6f:36:a1:f1:a1:14:43:c0:d3:24:94:e2:2e:51:6c:bc:03:
         b1:21:4f:43:77:f6:8f:aa:9c:8f:04:7d:c5:cd:c3:6a:e5:cc:
         ff:88:f1:68:b3:b9:ba:2e:6a:0e:2a:36:56:75:50:e0:62:99:
         84:2e:98:d3:57:d3:70:eb:62:68:fd:92:d9:9a:b8:5b:9b:12:
         08:af:6c:8d:88:76:3a:a8:33:b5:e6:71:0d:f8:a1:67:ad:b2:
         9f:0c:5e:6e:d7:82:37:29:3f:f5:2c:49:02:36:8a:ef:a8:54:
         b2:b1:53:76:8c:82:da:43:28:94:74:7c:86:27:30:91:75:af:
         6c:91:c0:32:94:e9:7c:1c:c5:06:19:f9:db:26:bd:8b:26:b5:
         f5:7e:98:0b:48:e8:b7:68:6c:64:0c:14:ec:2b:33:88:07:04:
         03:ce:d4:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU5QTMxMTAvBgNVBAUTKEI4NDFDODBCRTgxOEM2MUFBRTg0MTc5NDBDQTNFNjlD
QzE0MURGOEYwHhcNMjYwNzI4MTcyOTQxWhcNMjYwODA0MTcyOTQxWjAYMRYwFAYD
VQQDEw02YTY4ZTcwNi00MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1MoOiyAPhQY87BJsoUQSL34/ZN3XUWXFH3XE2PxXQAXOJyBmqDRlXLEueIHX
WbJme5WRCC+GYNI4JZvfIViJZKU0nqkBfX1WP3nsV52ugBe3DmS0KBj4HBK20/bt
Hnu9jOJicdbmqgoGMXOR4IjBJ8uInE+kf5nBA6okDDKQEBT8ofbqmr36vQLKDgL5
zsWVqBmtH3jiAAX6/6J7EKbV15u2ZoiKLA5SLI5Zs0SrgiBj2mWdStGDgh0rG5Zl
jTygOxpcm6banm8I/3tz7iQqDSfbi37S1J28KdIHrjkWKV2fY07bgiWnQ+M3ix0b
cZENUNAjhHJKSeDCoi2q4sUNuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCP81z7g
Qxb6KxF4b5m40QkeqX4XMB8GA1UdIwQYMBaAFLhByAvoGMYaroQXlAyj5pzBQd+P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlBMy83NjQzNUZFRTYz
ODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXhocXVoQmVVREtQbW5NRkIz
NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VFSElDLWdZeGhxdWhCZVVES1Btbk1GQjM0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTlBMy83NjQzNUZFRTYzODExMUU5OUE1MUE2NDJDNEY5QUUwMi91RUhJQy1nWXho
cXVoQmVVREtQbW5NRkIzNDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjTBBMeTyiQ6tt7NZNZ6vcb4QQ7eaaNuRkYGSGWSxjPEHPbnKxgzKU2QV/HAO
yueAbDNgUghVeQEeFLfEoUfMlBvcQ4GNhtdasPmVOxzl3X9ERGLj6wDpBoxrvm82
ofGhFEPA0ySU4i5RbLwDsSFPQ3f2j6qcjwR9xc3DauXM/4jxaLO5ui5qDio2VnVQ
4GKZhC6Y01fTcOtiaP2S2Zq4W5sSCK9sjYh2OqgzteZxDfihZ62ynwxebteCNyk/
9SxJAjaK76hUsrFTdoyC2kMolHR8hicwkXWvbJHAMpTpfBzFBhn52ya9iya19X6Y
C0jot2hsZAwU7CsziAcEA87Upg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:18 2026 by rpki-client