Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
File:                     5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft (raw, json)
Hash identifier:          oF/wIbtnMjEZcl4LBXkKT/jLFF0TL04sOmN+DsIWODU=
Subject key identifier:   27:10:F2:B2:36:41:D1:B4:9E:28:8B:07:52:60:B6:AC:34:BE:14:10
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       05595256E09D5EE4FDDB0076FA6E8547F68A94AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
Manifest number:          08D3
Signing time:             Fri 09 Oct 2026 18:17:36 +0000
Manifest this update:     Fri 09 Oct 2026 18:12:36 +0000
Manifest next update:     Sat 10 Oct 2026 19:30:36 +0000
Files and hashes:         1: 3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa (hash: FP2GcPl1oqzQ+eRkIyENNz9EPh4eTbzn4nru1plQMo8=)
                          2: 3139322e36342e3230332e302f32342d3234203d3e203336323336.roa (hash: UA31leNR+0mj8/zdmcjnYvU1v4hTPJ5jiqPEKStBAY4=)
                          3: 5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl (hash: R6Pe/qc/SPxBzH7hZOb6uAJcQo98HvJhMNYxCCP/qlU=)
                          4: 3139322e36342e3230342e302f32342d3234203d3e203336323336.roa (hash: jbMUD8UxhBCZnxEMR5BRGXYMTKz3FSqJjbwVaWABIzA=)
                          5: 3139382e3137392e3232352e302f32342d3234203d3e203336323336.roa (hash: 1pb6iRZh2u+VRf6t/MOcNiNfWkPg0JFXwGKHzeC9LoI=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 19:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:59:52:56:e0:9d:5e:e4:fd:db:00:76:fa:6e:85:47:f6:8a:94:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Oct  9 18:12:36 2026 GMT
            Not After : Oct 10 19:30:36 2026 GMT
        Subject: CN=2710F2B23641D1B49E288B075260B6AC34BE1410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:97:9a:3d:c1:8f:c3:71:0a:86:55:62:33:78:
                    c2:35:57:78:00:e2:ba:b6:e2:94:77:ba:d0:e1:e9:
                    6e:8a:b1:d3:e4:81:8b:d1:ad:40:98:d0:fe:f9:a0:
                    df:67:7e:69:a2:b7:a2:3f:6f:21:79:a9:20:fe:d6:
                    85:32:b6:df:65:2d:1c:63:ca:0f:11:14:b6:7b:8e:
                    17:ad:eb:ac:fc:12:c9:1a:46:59:b1:fa:30:5e:4e:
                    d2:65:c2:00:33:04:a7:eb:b4:d8:13:98:03:9a:6f:
                    5b:9b:ae:32:62:90:5d:78:a7:b6:cd:57:02:1d:96:
                    fb:36:7d:d0:67:b6:59:e5:df:cf:a7:03:ae:94:a8:
                    05:f4:ea:62:46:b2:5e:b5:6c:62:75:98:50:f3:82:
                    96:78:c6:a0:a3:11:40:b8:15:4a:71:9b:b4:51:45:
                    00:a6:93:b6:99:de:64:9f:47:60:6b:77:b6:01:76:
                    ed:17:b4:4d:e2:4a:43:a0:27:5a:dc:2c:56:ee:a6:
                    dc:a5:b3:4a:95:1e:13:ca:a7:e1:a3:95:2c:8f:5c:
                    fc:9c:dc:6f:1f:cf:d5:24:9f:5e:a9:cf:77:94:27:
                    17:a5:86:1a:71:5d:ab:88:81:a8:8a:3b:3d:9c:4f:
                    ce:de:db:a4:e9:53:02:d2:47:a1:d7:4b:7d:19:d0:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:10:F2:B2:36:41:D1:B4:9E:28:8B:07:52:60:B6:AC:34:BE:14:10
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:93:de:6f:ac:b5:da:e5:c8:07:46:bf:f2:25:fa:d1:ad:a9:
         f3:e8:3a:57:bb:d9:42:22:e8:ef:41:4a:8b:53:b3:41:99:ef:
         74:b5:f5:3c:53:59:c5:c4:ea:4d:31:97:15:f3:02:72:2f:69:
         21:f5:3a:ed:a1:0d:e1:6f:ea:51:b2:5c:f9:22:37:97:3c:dc:
         3a:14:8d:f7:45:c6:46:a1:10:e7:99:49:38:4f:d7:cb:fd:9f:
         2b:9d:29:e9:fa:b9:a5:a1:1e:d3:f8:17:e7:e5:97:df:13:d4:
         59:97:ef:d9:db:76:85:12:72:e9:3f:15:4b:b7:42:6c:ad:a2:
         36:34:f4:31:0c:6c:db:15:59:23:55:51:4e:76:9f:81:82:c6:
         89:70:cb:3e:ce:e6:ba:89:a2:39:ef:3b:55:f6:49:ff:89:4d:
         a1:17:f9:a0:68:53:58:1e:2c:62:64:78:e4:69:3b:70:27:92:
         c0:12:b1:54:ac:57:0f:15:3c:c5:2b:2f:68:9f:e6:cf:c3:89:
         cf:81:79:75:97:a7:5f:9b:5b:35:2d:2a:b1:a5:63:a0:a8:be:
         16:4f:d2:c2:8b:5a:4a:e9:c8:f4:f7:2e:cd:4f:62:97:0f:f1:
         18:b1:fb:9f:c9:7c:e0:79:fa:fb:f0:9e:59:38:79:83:a5:19:
         8c:e9:12:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----