Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
File:                     uEHIC-gYxhquhBeUDKPmnMFB348.mft (raw, json)
Hash identifier:          AYeVqxG/xQxM0nWkGzfn95H8UQiOUiSuR87PHL0qYAM=
Subject key identifier:   30:EF:2A:49:5B:45:63:3E:D3:87:80:35:5B:42:97:52:26:DB:88:CA
Authority key identifier: B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F
Certificate issuer:       /CN=A91859A3/serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F
Certificate serial:       108E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
Manifest number:          107C
Signing time:             Sun 04 Oct 2026 17:24:35 +0000
Manifest this update:     Sun 04 Oct 2026 17:24:34 +0000
Manifest next update:     Sun 11 Oct 2026 17:24:34 +0000
Files and hashes:         1: uEHIC-gYxhquhBeUDKPmnMFB348.crl (hash: nvcD8roiIxQTMR0N4lbfFJMyRl6CsZcG+/peJ7TSqdc=)
                          2: FB45F610638211E9A58B4C45C4F9AE02.roa (hash: DdJ/Gda5cLDZgecTbgPAmh+If4SrjgCwjMQ/0F6ywFk=)
                          3: 65EADA381A8011ECAD1E4B30C4F9AE02.roa (hash: Btv6VMAjhz/7gHDz8tz5vzOXf88yboA619m83tithOo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl
                          rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 17:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4238 (0x108e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91859A3, serialNumber=B841C80BE818C61AAE8417940CA3E69CC141DF8F
        Validity
            Not Before: Oct  4 17:24:34 2026 GMT
            Not After : Oct 11 17:24:34 2026 GMT
        Subject: CN=6ac28bd3-ba18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7c:e6:56:8b:f9:a6:57:f1:59:b1:ba:14:08:
                    f6:29:23:0c:0c:ec:ee:84:ef:b8:70:ee:db:29:46:
                    0b:70:bb:00:0c:2a:63:77:da:24:68:80:e1:49:64:
                    bf:3e:e2:bf:48:8e:0e:de:76:6b:90:07:5c:5c:02:
                    32:95:f0:9d:8b:75:3f:12:eb:19:3f:f5:a4:63:6b:
                    05:f4:bb:93:77:c7:dc:c0:5e:1c:f1:63:85:07:44:
                    f7:d2:a7:f0:7c:0d:a2:6f:99:c5:db:a0:39:41:d4:
                    d2:5d:21:42:43:96:39:33:e3:81:4f:7c:31:b4:e6:
                    96:ab:8a:ea:01:98:2a:5c:51:25:2a:d5:67:8d:46:
                    d4:c8:b6:da:d3:8a:40:95:f9:31:7f:3e:57:5c:82:
                    d2:12:da:02:9a:26:a4:47:2c:32:24:e0:99:28:cb:
                    56:97:62:1b:e9:07:d6:1f:0a:b8:1c:c2:9c:b5:f8:
                    ab:69:e5:5a:dd:db:d6:4c:b3:49:6b:2d:cf:23:2e:
                    70:7b:f2:ac:88:98:f1:86:e0:40:54:98:41:1d:05:
                    03:6e:4a:54:4f:de:de:7d:9c:f3:83:06:18:e4:2b:
                    2c:3b:1b:60:45:2a:12:42:44:6c:f9:b2:a2:e1:be:
                    bd:34:bd:08:39:c8:fe:76:eb:bf:a5:2f:c0:6a:e2:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EF:2A:49:5B:45:63:3E:D3:87:80:35:5B:42:97:52:26:DB:88:CA
            X509v3 Authority Key Identifier:
                keyid:B8:41:C8:0B:E8:18:C6:1A:AE:84:17:94:0C:A3:E6:9C:C1:41:DF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uEHIC-gYxhquhBeUDKPmnMFB348.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859A3/76435FEE638111E99A51A642C4F9AE02/uEHIC-gYxhquhBeUDKPmnMFB348.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:97:d5:d3:46:06:d1:81:e7:03:f0:a4:0b:9c:73:10:cc:93:
         90:52:b2:5a:8b:82:cd:f5:05:06:a0:3d:58:6a:dd:e0:f9:e1:
         8b:75:60:90:6a:e7:8c:a6:d2:ab:e7:aa:53:3d:4a:b8:d8:5a:
         4f:ef:ba:e2:ce:d0:cd:06:f5:9d:a5:5b:f1:d3:38:d7:be:c5:
         d0:1e:3b:94:5d:ae:19:e9:8f:3e:2e:ff:3b:28:e1:93:8a:20:
         6f:86:60:e4:c7:fd:fb:3e:f9:24:bc:7a:3f:2c:d4:1c:6b:69:
         29:14:cc:bc:bc:3b:c4:40:3d:33:2e:83:90:e2:56:b3:25:fc:
         4c:ac:a1:15:1c:36:de:ef:2a:ab:08:fe:bb:a7:54:ba:ca:1a:
         b9:e9:a0:fd:e0:77:17:50:44:80:f8:4d:6a:bc:c7:aa:eb:2a:
         05:5b:59:7f:33:f4:09:40:e4:4e:19:4c:67:e8:f0:53:dc:32:
         82:82:85:ea:60:42:7e:93:95:20:1b:28:40:36:96:ee:1c:90:
         10:fe:87:90:40:cd:dd:d6:d2:8d:c5:53:e6:bf:4d:16:bc:81:
         11:72:dc:24:af:36:a7:24:7d:28:11:be:f2:b2:02:e9:ec:3e:
         31:a5:b9:60:27:11:86:ad:8c:b7:12:ca:a1:30:e5:01:71:50:
         b8:1b:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:35:25 2026 by rpki-client