Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          PbUB0j0Sb+i67XmECAa8shFB8PFeTUJRX9hpxHxytTY=
Subject key identifier:   D5:81:9A:FF:E9:11:5D:B8:F3:31:D5:D3:C7:17:D2:DC:BF:0D:BF:7B
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       351DD9FCB130E6AF1C0B5F6BF7DD552285601E83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0D3B
Signing time:             Tue 01 Sep 2026 11:51:01 +0000
Manifest this update:     Tue 01 Sep 2026 11:46:01 +0000
Manifest next update:     Wed 02 Sep 2026 13:57:01 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: XJFKA/g78iCiu3wkxyfqmc3Fw/ONDgIIFP1ZA4IRusA=)
                          3: AS149301.asa (hash: BjimFGHtFuZcNZ00WSonyg+uMpCW2rEV09PivspI+fk=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 13:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1d:d9:fc:b1:30:e6:af:1c:0b:5f:6b:f7:dd:55:22:85:60:1e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Sep  1 11:46:01 2026 GMT
            Not After : Sep  2 13:57:01 2026 GMT
        Subject: CN=D5819AFFE9115DB8F331D5D3C717D2DCBF0DBF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:d6:6c:c0:3a:c8:41:db:ed:87:0d:d1:46:
                    48:2e:0b:64:af:fa:c5:ba:67:24:5e:ac:eb:d1:76:
                    f4:3d:ed:1b:c5:5f:e8:8c:50:d6:c7:c3:a3:bf:e8:
                    dd:a1:27:f1:22:ec:b8:ca:a5:d5:99:f6:ab:ae:34:
                    ac:cd:ad:8b:54:bb:bc:2e:ba:e1:78:9d:78:3f:5d:
                    2b:b8:03:39:97:c4:d0:8e:7c:27:c2:9f:6b:3a:b2:
                    19:b2:68:d3:a0:81:ac:48:ee:be:b8:58:40:44:a2:
                    44:f2:4b:88:96:cb:9c:7f:83:17:4f:ab:fe:de:0c:
                    20:ca:43:29:f0:db:46:29:84:92:c7:21:d6:8a:cb:
                    17:b0:04:9c:ae:3c:7e:20:a7:6a:f3:c4:d6:f0:77:
                    e7:95:ba:37:c3:53:50:cd:8f:1a:c7:dc:4b:fd:0d:
                    4b:7c:c5:47:f8:31:11:86:f1:44:5f:da:af:dc:8a:
                    98:26:1d:e1:35:9a:01:68:23:31:04:9e:cc:62:65:
                    95:dc:3e:d8:97:fd:31:06:1c:ed:ab:4f:93:1b:73:
                    33:25:e7:8d:2f:b1:eb:03:0d:97:ec:b4:4f:89:58:
                    fe:0b:70:cf:05:25:17:ae:be:12:01:ee:e6:90:93:
                    e8:e2:46:d8:c4:71:69:8b:5f:1c:f3:0f:49:42:23:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:81:9A:FF:E9:11:5D:B8:F3:31:D5:D3:C7:17:D2:DC:BF:0D:BF:7B
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:13:cc:3d:dd:cf:53:11:a6:d3:38:eb:ca:86:39:8a:75:29:
         b3:18:b4:4f:e6:0c:0d:52:93:12:06:04:83:57:2e:04:07:8f:
         9f:99:c9:99:d5:c7:32:1a:9e:df:d6:11:53:90:53:f1:89:34:
         19:21:c5:95:43:77:9b:c2:11:d2:bc:8b:e8:1e:88:e0:a5:d9:
         83:1a:0a:6a:5d:8b:10:a6:9d:8e:34:11:31:78:5c:e1:b5:b4:
         c7:03:53:02:85:59:63:77:e8:7e:be:ff:0c:75:2d:21:a3:50:
         88:a6:d2:7a:a3:52:9a:1f:21:e2:bb:a6:be:23:54:96:82:f1:
         b2:52:8a:6f:72:75:b2:37:e7:b2:bf:10:06:30:90:7f:79:f3:
         d1:dc:f4:1e:a9:54:2d:87:0f:2e:a5:d1:75:c6:2c:1c:a3:b2:
         41:74:75:68:c5:f1:0b:d0:f2:c9:4e:19:e7:2c:61:c9:23:1d:
         d1:86:d5:f3:7e:62:e6:c7:59:44:88:62:26:b3:0e:f7:71:d1:
         b8:86:29:2d:72:03:cb:c2:ce:41:e0:fc:ec:5a:93:c8:6f:f4:
         69:51:76:84:d6:2e:3a:b9:96:2a:06:7c:7d:26:5e:38:48:96:
         bd:20:36:6b:a9:8d:8b:e9:9d:d2:d5:ef:31:ee:28:7e:5a:54:
         a1:3d:8b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 20:59:59 2026 by rpki-client