Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          /qI/9Z4jtCZLFeLQU7+riJQXU5cpWF+dd1m9s67Hn20=
Subject key identifier:   24:00:96:14:0C:CE:20:6B:DC:9B:20:B9:DC:03:FD:32:61:00:A1:E8
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       079A77E419C661517C0427FD530AB707270535A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0A97
Signing time:             Thu 09 Apr 2026 08:54:19 +0000
Manifest this update:     Thu 09 Apr 2026 08:49:19 +0000
Manifest next update:     Fri 10 Apr 2026 12:07:19 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
                          3: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: Oyb63FJtIMMEXH0p4NuMtdASXBiDhkgcYrwU6J6lhSE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 Apr 2026 12:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9a:77:e4:19:c6:61:51:7c:04:27:fd:53:0a:b7:07:27:05:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Apr  9 08:49:19 2026 GMT
            Not After : Apr 10 12:07:19 2026 GMT
        Subject: CN=240096140CCE206BDC9B20B9DC03FD326100A1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:3e:84:d1:02:69:49:13:37:c9:16:5e:9e:
                    d3:c4:7b:3e:43:0c:25:ea:12:27:79:27:8d:8d:25:
                    5f:f6:6b:41:e7:5d:f8:00:12:85:68:14:c4:f7:a4:
                    ba:2d:f4:34:bb:e4:b6:71:1b:2e:dc:72:eb:15:7e:
                    f5:08:4f:ca:4e:51:92:7c:d7:cb:b2:35:2a:bb:50:
                    36:c3:7b:c7:85:5e:b5:11:e6:9a:aa:4c:4d:c1:b1:
                    be:c1:5f:90:85:86:05:98:1a:62:12:32:5c:be:db:
                    81:cd:e5:00:7c:09:ac:98:93:8d:67:2d:9e:90:4b:
                    15:05:b7:32:24:93:1b:20:e1:a6:17:80:63:0d:bd:
                    2c:ba:bf:1d:50:7c:b9:b9:4a:a4:0a:44:b8:20:8f:
                    64:4b:84:29:79:fa:b4:5f:98:b9:f5:e7:f3:e7:8a:
                    f9:71:89:43:9b:5a:bc:eb:e5:ac:44:ee:24:bd:07:
                    e2:cb:ec:b1:95:34:b7:0e:ca:b4:1a:4a:53:c9:8a:
                    fa:1d:a0:eb:76:26:cf:01:f5:dc:00:68:cf:59:7f:
                    62:43:3c:f5:0c:41:3e:60:50:6a:ce:bc:f2:f3:cf:
                    64:82:34:42:b5:c4:04:d2:c1:df:a9:e4:a2:6c:be:
                    77:cd:10:fe:9f:7c:34:58:b9:5d:33:80:7d:08:05:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:00:96:14:0C:CE:20:6B:DC:9B:20:B9:DC:03:FD:32:61:00:A1:E8
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f8:19:63:98:40:80:f2:98:52:93:bb:fe:88:e0:56:94:22:
         d5:08:b5:5d:d7:ca:70:71:93:2b:c2:52:fa:f0:f6:eb:26:50:
         78:b6:9d:e5:20:e8:d7:e8:c8:a3:7f:a8:72:28:24:f9:79:b2:
         b8:6e:c6:e4:95:15:27:83:8d:c6:51:60:3a:e7:29:ee:ab:b4:
         8e:80:a5:25:a3:20:82:ff:62:5d:18:a8:bb:d8:e7:d1:04:6a:
         14:f1:62:bd:6d:94:8b:93:6d:6d:cb:55:41:8e:6b:fb:76:0a:
         d4:7a:78:a0:9f:73:03:80:4e:f4:d3:bf:8c:98:b8:ad:c3:1b:
         c1:2b:a5:a4:d9:bc:d8:d4:27:04:5f:b0:0f:85:e8:e5:db:7e:
         2e:c1:48:e4:9c:7d:a8:8f:c7:d5:8d:cf:b5:d3:63:5c:53:b8:
         d8:72:a8:86:a5:de:41:1e:2a:b1:5e:9d:6d:6c:ab:c3:76:a7:
         60:34:db:50:13:12:d3:f4:1c:f9:b6:db:c2:6e:18:c7:c1:de:
         36:0a:a9:85:2b:42:f3:38:9f:6e:36:44:a8:3c:b5:e2:59:be:
         6b:4d:5e:b2:b6:25:f4:d5:4b:98:64:3f:39:c7:8e:b3:5e:e2:
         f5:2f:17:48:b6:3e:1b:d8:0a:58:b5:5c:99:8c:e6:9a:92:52:
         9c:31:9d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:32:25 2026 by rpki-client