Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          CX+SDqnuQEFjq2slRp6L4sx/mtsKMNpZe0cH7c2BGSw=
Subject key identifier:   90:DF:6A:E9:5B:A0:00:1C:4C:59:F1:8E:E8:EE:E9:F8:B7:08:72:B9
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       07912A3952D68DFA852AF13F271C654703EED6FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0A03
Signing time:             Thu 12 Mar 2026 01:21:32 +0000
Manifest this update:     Thu 12 Mar 2026 01:16:32 +0000
Manifest next update:     Fri 13 Mar 2026 05:10:32 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: bPZ8E71P4Jq2jnRzKLndSGjlYkvLv4M4C23SQP6Uu0s=)
                          3: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 05:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:91:2a:39:52:d6:8d:fa:85:2a:f1:3f:27:1c:65:47:03:ee:d6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Mar 12 01:16:32 2026 GMT
            Not After : Mar 13 05:10:32 2026 GMT
        Subject: CN=90DF6AE95BA0001C4C59F18EE8EEE9F8B70872B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:24:1e:43:e1:9d:fd:0a:c5:bc:f1:11:e8:f7:
                    20:5e:68:e2:5d:0a:33:d0:dc:71:e9:0c:54:48:91:
                    c1:29:a2:0e:53:32:80:64:f0:e5:6c:31:56:75:fa:
                    57:3d:b0:66:58:50:b5:1a:d6:d7:24:03:d7:29:18:
                    58:32:f9:20:f0:b7:44:62:cf:49:d7:f0:e1:bf:f9:
                    a5:75:50:8b:41:9e:71:a5:a0:ec:58:5d:c7:44:3a:
                    e7:ce:69:b5:e7:3d:87:18:62:13:ec:58:5f:82:7f:
                    32:51:56:cd:40:ab:35:3e:26:db:58:63:c5:d8:20:
                    0c:ac:db:94:65:99:8f:58:30:b2:d3:77:85:56:0d:
                    e9:1a:89:5a:ff:2a:9a:37:ad:02:d5:b9:c9:0a:48:
                    94:67:a8:c3:14:b0:93:f6:4e:38:04:3e:f6:21:b2:
                    a9:e8:30:5d:ca:4c:a2:60:23:56:5b:c3:03:3f:f9:
                    b6:7a:28:c0:41:4c:be:55:1e:b6:72:4b:e5:56:a4:
                    2e:2d:de:2e:de:25:62:6d:b3:bd:2f:26:09:e5:75:
                    48:d0:ad:46:d1:32:fb:4c:93:77:75:0b:36:1a:4a:
                    23:cf:23:a4:f2:5c:fc:5f:f3:24:c8:30:71:02:73:
                    0e:4e:e1:b8:12:76:68:a7:ad:53:da:98:e1:94:87:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DF:6A:E9:5B:A0:00:1C:4C:59:F1:8E:E8:EE:E9:F8:B7:08:72:B9
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0e:69:37:95:69:d5:ee:83:e0:da:64:3d:72:e7:ca:05:7f:
         69:37:9a:d3:a7:5b:6f:36:36:1b:49:bc:b5:d7:56:50:a1:b3:
         1c:b6:a2:48:eb:0f:06:8e:de:9f:57:fb:51:de:f1:27:29:14:
         fc:82:f6:77:ac:83:7a:a4:45:3d:48:c9:16:3e:60:05:62:22:
         99:9e:f9:4d:4a:93:48:3d:b5:81:5e:a1:cf:e8:4e:3e:12:ac:
         37:d3:f5:68:94:f6:ef:4b:25:78:27:28:63:d6:45:14:b1:ba:
         bb:60:e2:04:1c:a2:b8:d3:33:35:26:4b:46:df:03:c9:13:fa:
         fd:52:cf:3b:95:62:93:bd:22:d8:79:f7:80:15:81:c4:41:7f:
         db:9d:84:d1:e8:d5:1e:fe:42:47:24:df:f0:08:c7:8c:73:9c:
         46:8d:6c:e2:16:83:dd:6d:d2:d3:67:f6:44:af:f4:52:d6:09:
         4b:fd:6e:ab:47:0c:80:0e:7e:48:79:ee:5a:f1:b5:2b:e5:8f:
         e3:66:9d:66:bf:7c:22:1d:18:76:7e:df:14:2b:c4:c0:02:f2:
         17:a0:9f:ae:35:4b:92:03:c4:f5:ba:5b:63:77:48:1f:24:f1:
         99:ec:a6:cf:a9:3a:77:e8:82:67:68:ca:56:a4:16:b4:14:49:
         a9:4f:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:34:51 2026 by rpki-client