
$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
File: uEHIC-gYxhquhBeUDKPmnMFB348.mft (raw, json)
Hash identifier: /B8RGoK439qciyq0Ak7erFubL6Jh87B5VR761eKeSTM=
Subject key identifier: 23:FC:D7:3E:E0:43:16:FA:2B:11:78:6F:99:B8:D1:09:1E:A9:7E:17
Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F
Certificate issuer: /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F
Certificate serial: 106B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
Manifest number: 1059
Signing time: Tue 28 Jul 2026 17:29:42 +0000
Manifest this update: Tue 28 Jul 2026 17:29:41 +0000
Manifest next update: Tue 04 Aug 2026 17:29:41 +0000
Files and hashes: 1: uEHIC-gYxhquhBeUDKPmnMFB348.crl (hash: MxhoarrmKriblgpobB1ufEbkTLswDa37TE7ZgjdfwPQ=)
2: FB45F610638211E9A58B4C45C4F9AE02.roa (hash: DdJ/Gda5cLDZgecTbgPAmh+If4SrjgCwjMQ/0F6ywFk=)
3: 65EADA381A8011ECAD1E4B30C4F9AE02.roa (hash: Btv6VMAjhz/7gHDz8tz5vzOXf88yboA619m83tithOo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl
rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4203 (0x106b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91859A3, serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F
Validity
Not Before: Jul 28 17:29:41 2026 GMT
Not After : Aug 4 17:29:41 2026 GMT
Subject: CN=6a68e706-4063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:0e:8b:20:0f:85:06:3c:ec:12:6c:a1:44:
12:2f:7e:3f:64:dd:d7:51:65:c5:1f:75:c4:d8:fc:
57:40:05:ce:27:20:66:a8:34:65:5c:b1:2e:78:81:
d7:59:b2:66:7b:95:91:08:2f:86:60:d2:38:25:9b:
df:21:58:89:64:a5:34:9e:a9:01:7d:7d:56:3f:79:
ec:57:9d:ae:80:17:b7:0e:64:b4:28:18:f8:1c:12:
b6:d3:f6:ed:1e:7b:bd:8c:e2:62:71:d6:e6:aa:0a:
06:31:73:91:e0:88:c1:27:cb:88:9c:4f:a4:7f:99:
c1:03:aa:24:0c:32:90:10:14:fc:a1:f6:ea:9a:bd:
fa:bd:02:ca:0e:02:f9:ce:c5:95:a8:19:ad:1f:78:
e2:00:05:fa:ff:a2:7b:10:a6:d5:d7:9b:b6:66:88:
8a:2c:0e:52:2c:8e:59:b3:44:ab:82:20:63:da:65:
9d:4a:d1:83:82:1d:2b:1b:96:65:8d:3c:a0:3b:1a:
5c:9b:a6:da:9e:6f:08:ff:7b:73:ee:24:2a:0d:27:
db:8b:7e:d2:d4:9d:bc:29:d2:07:ae:39:16:29:5d:
9f:63:4e:db:82:25:a7:43:e3:37:8b:1d:1b:71:91:
0d:50:d0:23:84:72:4a:49:e0:c2:a2:2d:aa:e2:c5:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FC:D7:3E:E0:43:16:FA:2B:11:78:6F:99:B8:D1:09:1E:A9:7E:17
X509v3 Authority Key Identifier:
keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:30:41:31:e4:f2:89:0e:ad:b7:b3:59:35:9e:af:71:be:10:
43:b7:9a:68:db:91:91:81:92:19:64:b1:8c:f1:07:3d:b9:ca:
c6:0c:ca:53:64:15:fc:70:0e:ca:e7:80:6c:33:60:52:08:55:
79:01:1e:14:b7:c4:a1:47:cc:94:1b:dc:43:81:8d:86:d7:5a:
b0:f9:95:3b:1c:e5:dd:7f:44:44:62:e3:eb:00:e9:06:8c:6b:
be:6f:36:a1:f1:a1:14:43:c0:d3:24:94:e2:2e:51:6c:bc:03:
b1:21:4f:43:77:f6:8f:aa:9c:8f:04:7d:c5:cd:c3:6a:e5:cc:
ff:88:f1:68:b3:b9:ba:2e:6a:0e:2a:36:56:75:50:e0:62:99:
84:2e:98:d3:57:d3:70:eb:62:68:fd:92:d9:9a:b8:5b:9b:12:
08:af:6c:8d:88:76:3a:a8:33:b5:e6:71:0d:f8:a1:67:ad:b2:
9f:0c:5e:6e:d7:82:37:29:3f:f5:2c:49:02:36:8a:ef:a8:54:
b2:b1:53:76:8c:82:da:43:28:94:74:7c:86:27:30:91:75:af:
6c:91:c0:32:94:e9:7c:1c:c5:06:19:f9:db:26:bd:8b:26:b5:
f5:7e:98:0b:48:e8:b7:68:6c:64:0c:14:ec:2b:33:88:07:04:
03:ce:d4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:18 2026 by rpki-client