Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          jclEe1vlvyC9tlUVhW5kp7+IGY2dTrFOp0UplFeMfcQ=
Subject key identifier:   5C:CF:11:46:5F:E2:03:81:D5:16:09:70:B3:78:C4:2B:88:16:02:06
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       3608A8CC8AC5B5B28938AD10ABD9267257D21313
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0A39
Signing time:             Tue 24 Mar 2026 02:33:54 +0000
Manifest this update:     Tue 24 Mar 2026 02:28:54 +0000
Manifest next update:     Wed 25 Mar 2026 05:31:54 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: 9Z4DvbbcpZaKKm+v2Mz1qcnUn0XzbLfCwXCPflxRqXw=)
                          3: AS149301.asa (hash: KlQc0JsFcpyNOPGfuIq6bzYo/DRZgD6/B0pZJaxcoUE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 05:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:08:a8:cc:8a:c5:b5:b2:89:38:ad:10:ab:d9:26:72:57:d2:13:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Mar 24 02:28:54 2026 GMT
            Not After : Mar 25 05:31:54 2026 GMT
        Subject: CN=5CCF11465FE20381D5160970B378C42B88160206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:e7:f2:26:d5:98:00:7f:14:f4:dd:2d:37:
                    dc:7e:6e:a7:50:02:0b:9a:1f:d6:fb:a4:c9:21:44:
                    27:6f:8d:8f:4f:52:f1:53:ef:5b:35:f9:ca:de:9f:
                    11:35:ad:1d:c4:5f:a8:e8:47:5b:59:26:1f:ad:1d:
                    a8:ff:6e:15:d6:a8:43:c6:72:44:7b:29:69:ba:d9:
                    69:20:1d:ae:88:c4:c4:bf:97:fa:95:c4:6d:83:f2:
                    e5:b1:d8:b8:a0:68:f1:20:2c:58:6f:3b:26:50:b8:
                    1b:bc:05:a5:d4:26:ed:b5:40:f1:7f:56:c9:c6:20:
                    4f:48:f9:88:52:f2:d0:de:07:58:bc:b2:87:ca:42:
                    16:a7:ef:c3:3a:91:68:fe:94:8c:57:f5:99:80:9b:
                    d9:f6:af:05:52:f5:f9:7d:0a:29:24:37:34:55:0a:
                    58:19:47:7f:42:6c:60:bb:b7:03:67:1d:41:4f:9c:
                    f3:7a:78:82:4c:09:0e:0a:9d:a5:84:6f:b5:ba:6a:
                    26:d2:ad:94:88:95:08:6e:fe:ac:d3:e4:50:a0:7e:
                    90:36:51:4e:7c:4d:7e:e3:e7:37:f4:3f:e1:40:32:
                    b6:54:4d:12:dd:e2:f8:81:86:85:73:8d:22:dc:88:
                    4d:84:d6:69:04:21:bd:af:c0:d5:69:d2:b1:6f:93:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CF:11:46:5F:E2:03:81:D5:16:09:70:B3:78:C4:2B:88:16:02:06
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c9:97:4f:c7:24:cf:09:67:ac:5b:a0:d6:a3:f9:0c:6e:9b:
         56:d2:11:a7:94:28:b1:de:67:6f:d9:fd:fa:8d:da:31:1b:f8:
         98:c5:fc:42:40:d6:51:81:0d:42:5f:bf:6b:46:8b:b2:5a:56:
         aa:61:1f:e8:cc:c8:ba:9b:41:9b:bb:a8:15:79:42:73:d3:10:
         64:ec:a7:a4:68:a8:da:f4:21:b0:22:ab:7f:ef:15:da:11:47:
         b5:31:84:6c:4b:72:1f:12:3d:2b:32:1b:36:07:d3:a6:14:05:
         8a:b3:5b:89:45:b1:55:ee:9a:fc:5d:f7:42:a7:91:1b:df:c6:
         ae:d2:e3:df:5c:94:a3:98:58:2f:06:20:d8:52:fd:90:8a:45:
         48:e0:ed:b7:f6:ee:f5:e8:21:b2:b2:f3:6d:5c:a2:af:b8:3d:
         e8:b6:7b:24:6d:c9:65:f0:00:c0:73:5c:6b:50:18:f4:9e:c0:
         cd:99:08:c5:e4:2c:72:d4:82:b5:d8:89:5e:0f:de:31:e3:ea:
         9a:c4:3d:4f:e9:41:f3:bc:76:d7:7b:2d:01:37:a1:25:cc:28:
         f2:d6:f0:c2:65:8a:78:58:35:2b:21:17:6b:7a:9e:c8:a3:97:
         5d:9e:a7:11:7c:3a:8e:fa:15:d0:e6:97:ac:48:e4:f0:14:5a:
         e9:16:86:49
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUNgiozIrFtbKJOK0Qq9kmclfSExMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEyg2RkNCQkQwNDI1
MDkyNjYzMzM0RkExQUE5QTAyMjkyQ0I4NDE2RjUxMB4XDTI2MDMyNDAyMjg1NFoX
DTI2MDMyNTA1MzE1NFowMzExMC8GA1UEAxMoNUNDRjExNDY1RkUyMDM4MUQ1MTYw
OTcwQjM3OEM0MkI4ODE2MDIwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANuj5/Im1ZgAfxT03S033H5up1ACC5of1vukySFEJ2+Nj09S8VPvWzX5yt6f
ETWtHcRfqOhHW1kmH60dqP9uFdaoQ8ZyRHspabrZaSAdrojExL+X+pXEbYPy5bHY
uKBo8SAsWG87JlC4G7wFpdQm7bVA8X9WycYgT0j5iFLy0N4HWLyyh8pCFqfvwzqR
aP6UjFf1mYCb2favBVL1+X0KKSQ3NFUKWBlHf0JsYLu3A2cdQU+c83p4gkwJDgqd
pYRvtbpqJtKtlIiVCG7+rNPkUKB+kDZRTnxNfuPnN/Q/4UAytlRNEt3i+IGGhXON
ItyITYTWaQQhva/A1WnSsW+Tw7sCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBRczxFG
X+IDgdUWCXCzeMQriBYCBjAfBgNVHSMEGDAWgBRvy70EJQkmYzNPoaqaAiksuEFv
UTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC82LzZGQ0JCRDA0MjUwOTI2NjMzMzRGQTFBQTlBMDIyOTJDQjg0
MTZGNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2I4dTlCQ1VKSm1NelQ2R3FtZ0lwTExoQmIxRS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzYvNkZDQkJEMDQyNTA5MjY2MzMzNEZBMUFBOUEwMjI5MkNCODQxNkY1MS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAL7Jl0/HJM8JZ6xboNaj+Qxum1bSEaeUKLHeZ2/Z/fqN2jEb+JjF/EJA
1lGBDUJfv2tGi7JaVqphH+jMyLqbQZu7qBV5QnPTEGTsp6RoqNr0IbAiq3/vFdoR
R7UxhGxLch8SPSsyGzYH06YUBYqzW4lFsVXumvxd90KnkRvfxq7S499clKOYWC8G
INhS/ZCKRUjg7bf27vXoIbKy821coq+4Pei2eyRtyWXwAMBzXGtQGPSewM2ZCMXk
LHLUgrXYiV4P3jHj6prEPU/pQfO8dtd7LQE3oSXMKPLW8MJlinhYNSshF2t6nsij
l12epxF8Oo76FdDml6xI5PAUWukWhkk=
-----END CERTIFICATE-----
Generated at Tue Mar 24 06:31:29 2026 by rpki-client