
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
File: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft (raw, json)
Hash identifier: VvzjUxK+vXNiZlx1NEEsn4Z8ORy04lAh+YeEvKEDuGM=
Subject key identifier: B0:4A:D1:D7:FB:3B:B4:BD:97:34:5C:17:E3:B2:D2:5C:1D:00:96:5B
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Certificate issuer: /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial: 6D8DAFAD47C70B416FA049A08390EA5A72498668
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
Manifest number: 03C7
Signing time: Wed 28 Oct 2026 09:22:07 +0000
Manifest this update: Wed 28 Oct 2026 09:17:07 +0000
Manifest next update: Thu 29 Oct 2026 10:33:07 +0000
Files and hashes: 1: 3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa (hash: y74Xp0XnuK3wa2JG/fegow7q2dM6xNH74OfC4cT3Puo=)
2: 3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (hash: 8cy0UaVY60Z81DDBpMzdqMzJ47APJ86cTC64lEWbf+Y=)
3: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl (hash: TKxyiQ/xi4bJDDSAEGpvaHJ5ouwz4bxg9Rzb5QXalqI=)
4: 323430313a323132303a3a2f33322d3438203d3e20393833.roa (hash: SxmJwsibLfwV0c1rkWz0beNWzlJs3/zzs1R9szS3c5s=)
5: 323430313a323132303a3a2f33322d3438203d3e203338313336.roa (hash: xC/0UEjSOYZpMz9+VViFGyauiXbq8xb0rDqCP2kRbhQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 10:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:8d:af:ad:47:c7:0b:41:6f:a0:49:a0:83:90:ea:5a:72:49:86:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Validity
Not Before: Oct 28 09:17:07 2026 GMT
Not After : Oct 29 10:33:07 2026 GMT
Subject: CN=B04AD1D7FB3BB4BD97345C17E3B2D25C1D00965B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ff:85:ee:39:c6:35:d3:8a:41:34:19:fb:45:
97:0c:6d:77:51:18:5e:9c:e3:b5:a6:e1:b8:df:cb:
c1:e2:cf:f5:1b:86:1f:68:b1:1f:e2:f6:b2:ab:24:
96:b5:0a:6f:58:81:6d:86:fc:00:24:79:21:0b:41:
3f:3f:a5:0a:e7:e8:88:58:53:60:3f:64:15:7b:aa:
cc:c3:be:9d:ea:3c:0d:01:a8:b2:8c:83:34:bd:05:
9b:1a:ac:8a:76:f3:de:7a:c4:ef:6f:51:5a:2c:72:
09:78:2e:60:84:a2:64:95:06:97:23:a9:f9:44:fa:
14:ab:cc:36:cb:9a:f8:07:7f:6f:d2:33:79:bd:08:
8c:4c:ac:e6:41:bd:bd:ea:9b:7b:90:9e:ad:08:9f:
4b:8d:4d:30:3a:5b:78:b6:76:77:34:85:cc:45:ec:
0a:97:fa:5b:34:3d:a6:ff:a6:b2:b1:ef:10:03:73:
b6:50:a7:67:15:f2:2a:75:3e:46:31:37:82:50:b5:
9f:02:1a:71:c1:82:a4:0d:0f:10:78:5a:11:f0:b5:
38:bf:2d:f4:a6:5a:20:32:43:32:ee:f2:15:bc:43:
5a:b7:6e:a4:ac:59:ec:97:90:f6:b2:70:27:0b:31:
21:d6:8b:a0:2e:cb:a5:53:e7:52:df:a3:19:cf:06:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4A:D1:D7:FB:3B:B4:BD:97:34:5C:17:E3:B2:D2:5C:1D:00:96:5B
X509v3 Authority Key Identifier:
keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:26:93:ab:f0:6b:11:22:9a:8a:97:cc:7c:c2:3b:bf:1b:ce:
88:61:35:48:f4:fe:de:01:a2:a9:dd:77:4a:09:40:16:99:25:
44:c7:05:9f:0d:c7:7d:ba:8e:28:91:af:60:ec:a2:7f:16:8d:
d9:fb:f6:2a:2e:a5:69:2c:d3:34:1a:7b:09:d2:aa:00:78:22:
fe:a0:2d:67:54:4f:ed:d0:77:a6:e6:10:e0:21:b9:ff:bc:7b:
24:cf:e6:70:3a:26:bb:21:0b:83:9c:8a:73:7f:f6:46:eb:5c:
d8:ae:00:b6:01:59:d3:a7:7f:9b:c7:87:2e:f8:46:de:97:ce:
8b:d5:5b:a7:da:76:65:52:ad:cf:dd:7c:ac:d2:eb:43:ab:d8:
6a:7f:9b:c1:b4:8a:ec:f0:82:97:ab:fd:b6:47:de:1b:43:47:
af:9e:48:7f:46:76:62:ef:6e:fb:5b:e8:2e:59:f6:9b:c7:d7:
56:e4:63:fe:4c:e3:f7:a8:cf:fe:6b:4f:6d:b2:a4:a4:f2:89:
bf:30:c8:07:35:eb:b7:74:49:0f:0d:fc:ca:49:56:03:43:16:
0d:a1:7a:cb:bc:b6:05:9f:1e:d9:70:ac:79:1d:1b:81:df:da:
34:8c:2a:02:ff:fa:0f:24:c9:f1:84:01:04:5a:75:69:21:51:
b4:75:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:42:11 2026 by rpki-client