Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
File:                     uEHIC-gYxhquhBeUDKPmnMFB348.mft (raw, json)
Hash identifier:          SFhKZJjmlxVPSolVd0FswyMoLTBNooTeD6h/lxxqJ/U=
Subject key identifier:   38:3A:EE:A7:C4:D4:8F:A4:DD:AC:89:1D:90:20:1F:8A:75:59:64:EF
Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F
Certificate issuer:       /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F
Certificate serial:       1048
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
Manifest number:          1036
Signing time:             Wed 20 May 2026 17:25:40 +0000
Manifest this update:     Wed 20 May 2026 17:25:39 +0000
Manifest next update:     Wed 27 May 2026 17:25:39 +0000
Files and hashes:         1: uEHIC-gYxhquhBeUDKPmnMFB348.crl (hash: vpQBo8aSwtTu+72GOhPhYzm9p017Gxfd1AKoEjxKsYM=)
                          2: 65EADA381A8011ECAD1E4B30C4F9AE02.roa (hash: Btv6VMAjhz/7gHDz8tz5vzOXf88yboA619m83tithOo=)
                          3: FB45F610638211E9A58B4C45C4F9AE02.roa (hash: DdJ/Gda5cLDZgecTbgPAmh+If4SrjgCwjMQ/0F6ywFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl
                          rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4168 (0x1048)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91859A3, serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F
        Validity
            Not Before: May 20 17:25:39 2026 GMT
            Not After : May 27 17:25:39 2026 GMT
        Subject: CN=6a0dee94-2e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:bb:f4:98:15:e1:25:e1:9a:cf:6f:39:4b:
                    1c:e8:d9:93:05:b4:33:ae:9d:c1:1b:49:41:a9:00:
                    0d:74:a3:d5:40:c8:1d:7c:b0:27:8f:6d:26:1b:c5:
                    a9:53:a5:54:a4:56:c8:e0:7c:1f:5f:8e:f0:63:fa:
                    4e:45:0c:3e:1d:7a:95:52:c5:c4:fd:31:8e:43:56:
                    ac:3f:da:c8:b7:e9:22:23:fb:5c:d9:d7:e6:55:c9:
                    bb:70:25:fa:e2:68:a2:42:69:03:14:24:3d:09:ef:
                    07:57:55:6d:02:48:78:37:50:63:cd:e9:81:1a:4c:
                    e5:d5:1d:da:cc:7f:fb:6c:62:62:92:b4:9f:8b:67:
                    a6:bf:06:f4:69:d5:4b:78:1e:a0:8e:c2:b4:32:45:
                    98:df:bb:c6:91:9f:f3:11:b3:a8:c2:b0:26:fc:f4:
                    36:2b:19:ff:2e:2b:cc:8d:b8:ed:0e:16:3a:dd:02:
                    fb:17:85:00:ba:58:22:12:59:4b:94:63:a8:3a:ae:
                    b0:96:d9:63:e1:7b:ce:83:71:6a:fc:4f:09:02:6f:
                    6e:c5:a2:e7:c1:d7:cf:30:78:30:6a:08:6c:62:c6:
                    b4:43:a0:8d:7f:a1:cb:7a:a3:7f:23:c1:39:0e:55:
                    09:b4:f7:34:ba:f1:cd:46:74:9b:a8:81:b4:e5:40:
                    d1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3A:EE:A7:C4:D4:8F:A4:DD:AC:89:1D:90:20:1F:8A:75:59:64:EF
            X509v3 Authority Key Identifier:
                keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a0:ad:a8:81:4c:d7:08:84:e7:26:b8:6f:2b:a1:0d:5c:87:
         aa:3e:75:f1:c2:51:1d:48:ba:a3:7d:41:50:52:cb:f1:24:66:
         61:5e:84:72:0a:52:97:b1:1c:b5:02:ab:26:bb:ea:51:5a:4b:
         9b:21:8e:80:c0:5f:23:88:9f:61:6d:04:19:f8:75:30:b8:5d:
         8d:b1:0d:27:97:43:79:01:0b:26:22:3a:b1:89:ba:68:9a:1d:
         49:31:f6:43:a3:76:ed:6a:0e:c3:10:e6:5d:32:92:61:c0:3a:
         b6:f8:d0:c9:3b:41:7d:58:eb:b2:10:14:2d:be:c2:0c:72:87:
         d5:18:c0:0f:16:6c:f9:26:da:f2:10:43:71:f7:a0:5e:dd:04:
         c3:12:73:20:77:2c:7d:8b:49:96:cc:2f:72:16:cc:52:d8:9a:
         9a:23:e2:36:76:d5:16:6b:b5:15:aa:7c:2b:39:3d:31:52:bf:
         79:a6:13:f9:b8:22:b8:88:33:cf:c5:8d:1e:16:dd:a5:90:9e:
         94:73:62:18:53:17:d9:d1:3a:01:ac:e8:17:10:b8:c6:95:ca:
         ff:1a:56:df:54:66:4c:dc:f0:e6:01:f7:d7:ea:81:b6:0c:bc:
         b7:8f:62:0e:27:26:5c:4b:d5:37:5e:4e:29:39:15:01:e4:9f:
         d8:60:8f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:52 2026 by rpki-client