$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft File: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json) Hash identifier: M45/PeeO1bqhtvM75xpD+waYpWobBced8RTJIOLsGno= Subject key identifier: F7:1D:DD:D8:04:55:24:95:33:3C:12:68:C6:08:05:7F:C0:CC:53:B4 Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4 Certificate issuer: /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4 Certificate serial: 7ACF61EC8871719EF2BC40599447E18622B5745B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft Manifest number: 05D5 Signing time: Sun 05 Apr 2026 19:29:20 +0000 Manifest this update: Sun 05 Apr 2026 19:24:20 +0000 Manifest next update: Mon 06 Apr 2026 19:59:20 +0000 Files and hashes: 1: 3130332e3230382e38342e302f32322d3332203d3e20313531383137.roa (hash: JCDln+JMBGtNGpBy8g4kVtJ9W6HwLOH1eY/2mhO+3kc=) 2: 3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa (hash: wj8P1MYtL5SU/gbF1C+95xRc/98DFaAZ1cBCDWKIMNI=) 3: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: /aOlc8I/0CHKi/6G0Y+xmQPKNpbfH7TJpDudUDSjzhw=) 4: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=) 5: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=) 6: 3130332e3230382e38342e302f32322d3332203d3e203631313338.roa (hash: FjLx2GQm7zO0Ax8do1MldUsAWWJvi9/fJiwqLS8UXI8=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 19:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:cf:61:ec:88:71:71:9e:f2:bc:40:59:94:47:e1:86:22:b5:74:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4 Validity Not Before: Apr 5 19:24:20 2026 GMT Not After : Apr 6 19:59:20 2026 GMT Subject: CN=F71DDDD804552495333C1268C608057FC0CC53B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:7c:ed:c1:08:a1:c5:48:81:67:71:8e:20: 5b:df:dc:eb:5c:28:8a:61:ca:23:89:48:76:98:60: 9b:18:1a:22:2b:d4:d7:73:90:53:88:de:dc:99:93: 2f:42:8f:11:e2:6e:9b:ec:66:d7:5e:ee:c0:5c:0d: be:4e:6b:99:c2:c4:a6:62:4b:5c:6f:91:2d:b8:a6: f5:25:ce:76:c8:8d:44:a9:be:32:7d:f4:fb:1b:f2: a6:05:1e:04:98:53:f4:15:3b:b7:23:62:07:e8:94: de:bf:73:ac:ba:03:6a:c4:7e:ed:cf:41:51:74:4e: 26:8f:52:79:9a:52:05:3a:8c:14:83:32:1a:8c:e4: 04:0d:44:47:a3:6c:26:cb:94:83:04:7c:23:43:36: d2:7a:32:bc:28:1d:30:86:ba:77:9f:14:9a:d3:9e: d0:67:59:cc:63:7c:06:0b:7d:17:23:f1:7b:fd:98: f0:ed:52:af:3a:b4:1d:16:c4:9b:b0:3d:bc:13:cc: 6f:69:ac:65:02:8a:62:41:e1:5b:93:f8:fb:a3:68: a5:19:f8:8a:31:7b:1d:3d:c3:fb:c5:a3:0a:6c:44: d5:e2:39:bb:31:ff:b2:8e:70:ae:1d:3b:7c:df:fd: 47:4d:22:26:3e:94:4f:7f:8a:a3:35:84:dd:c0:4d: fd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1D:DD:D8:04:55:24:95:33:3C:12:68:C6:08:05:7F:C0:CC:53:B4 X509v3 Authority Key Identifier: keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4e:80:1e:f3:2d:b3:ef:01:e8:46:d0:36:03:a4:79:f1:66: 80:1e:ab:11:39:ad:26:2b:5c:ed:58:20:9e:b9:71:07:b2:7c: d9:47:b4:20:1c:18:ac:49:b5:2b:70:6e:9f:05:d4:52:ad:85: 49:8c:8f:6c:d4:98:f2:a4:fd:b6:a6:44:06:aa:9f:e2:03:f5: 5b:6b:9b:90:cf:88:b7:b4:15:54:69:ad:ac:81:1e:ed:93:13: e9:42:21:9f:36:c9:05:90:f3:9c:26:1d:d4:4e:05:30:1c:92: da:b5:38:ff:ed:62:be:bd:bd:bc:55:30:fc:bb:5b:0b:36:7f: e3:6e:68:e0:20:0b:3d:5f:ad:89:12:d9:61:82:46:66:a9:a0: a9:84:2b:eb:76:20:c4:bb:10:20:87:96:a0:b6:6e:b4:4e:03: ba:fe:fc:56:89:e4:aa:2e:27:7c:f1:e0:71:74:2d:3b:b4:ab: 0a:3b:91:7a:f2:cf:48:6c:78:9a:70:42:fa:95:d3:36:8b:a6: c3:b2:a3:8c:09:96:eb:50:18:68:9a:e1:2c:20:d7:f8:e3:01: fb:0f:8d:5e:f3:32:93:b6:51:46:f9:5d:c7:30:27:b1:d5:c5: 84:d8:83:f5:df:7b:ac:9e:2a:5f:a4:e5:4b:ab:ba:4c:fe:cf: 4d:34:73:5a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUes9h7IhxcZ7yvEBZlEfhhiK1dFswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg5Q0RBNzExMTZF MjI4MTJBREY2MEI3NTAwRjkyRDdFNENCQjJCOUI0MB4XDTI2MDQwNTE5MjQyMFoX DTI2MDQwNjE5NTkyMFowMzExMC8GA1UEAxMoRjcxRERERDgwNDU1MjQ5NTMzM0Mx MjY4QzYwODA1N0ZDMENDNTNCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTyfO3BCKHFSIFncY4gW9/c61woimHKI4lIdphgmxgaIivU13OQU4je3JmT L0KPEeJum+xm117uwFwNvk5rmcLEpmJLXG+RLbim9SXOdsiNRKm+Mn30+xvypgUe BJhT9BU7tyNiB+iU3r9zrLoDasR+7c9BUXROJo9SeZpSBTqMFIMyGozkBA1ER6Ns JsuUgwR8I0M20noyvCgdMIa6d58UmtOe0GdZzGN8Bgt9FyPxe/2Y8O1Srzq0HRbE m7A9vBPMb2msZQKKYkHhW5P4+6NopRn4ijF7HT3D+8WjCmxE1eI5uzH/so5wrh07 fN/9R00iJj6UT3+KozWE3cBN/YkCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBT3Hd3Y BFUklTM8EmjGCAV/wMxTtDAfBgNVHSMEGDAWgBSc2nERbiKBKt9gt1APktfky7K5 tDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1 NWM5MWJlM2Y5ZC84LzlDREE3MTExNkUyMjgxMkFERjYwQjc1MDBGOTJEN0U0Q0JC MkI5QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL25OcHhFVzRpZ1NyZllMZFFENUxYNU11eXViUS5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk LzgvOUNEQTcxMTE2RTIyODEyQURGNjBCNzUwMEY5MkQ3RTRDQkIyQjlCNC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1OgB7zLbPvAehG0DYDpHnxZoAeqxE5rSYrXO1YIJ65cQeyfNlHtCAc GKxJtStwbp8F1FKthUmMj2zUmPKk/bamRAaqn+ID9Vtrm5DPiLe0FVRprayBHu2T E+lCIZ82yQWQ85wmHdROBTAcktq1OP/tYr69vbxVMPy7Wws2f+NuaOAgCz1frYkS 2WGCRmapoKmEK+t2IMS7ECCHlqC2brROA7r+/FaJ5KouJ3zx4HF0LTu0qwo7kXry z0hseJpwQvqV0zaLpsOyo4wJlutQGGia4Swg1/jjAfsPjV7zMpO2UUb5XccwJ7HV xYTYg/Xfe6yeKl+k5Uurukz+z000c1o= -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:41 2026 by rpki-client