Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          pbvuiWfuBDQ2I4dOCQJ1uK3DQd3mvWSqGXqlyrb4gvo=
Subject key identifier:   8B:0F:F9:12:63:87:B4:EA:29:B7:D0:F3:FF:96:FF:B3:A6:29:8B:4C
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       3D1ADC85F239DCB86760CEBF94CB146618663F70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0CA2
Signing time:             Tue 04 Aug 2026 19:56:56 +0000
Manifest this update:     Tue 04 Aug 2026 19:51:56 +0000
Manifest next update:     Wed 05 Aug 2026 22:38:56 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: AS149301.asa (hash: BjimFGHtFuZcNZ00WSonyg+uMpCW2rEV09PivspI+fk=)
                          3: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: hKuam7gVhraYiRrCEXWdg9lIHCf6jwM+bSDL5Ix6eQ8=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 22:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1a:dc:85:f2:39:dc:b8:67:60:ce:bf:94:cb:14:66:18:66:3f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Aug  4 19:51:56 2026 GMT
            Not After : Aug  5 22:38:56 2026 GMT
        Subject: CN=8B0FF9126387B4EA29B7D0F3FF96FFB3A6298B4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:07:92:9c:ec:c8:88:b2:90:6d:41:5d:90:
                    f3:46:33:7f:02:ee:b9:04:02:4e:b8:0b:fa:64:df:
                    61:74:79:d1:88:32:96:a2:6e:a6:23:c8:6e:e0:55:
                    d3:3d:8b:8a:e3:5f:9a:d0:31:8d:cf:68:4b:5a:4a:
                    1e:a7:78:b7:b3:cd:1f:e9:1c:ff:a3:46:8f:b2:80:
                    38:71:99:e5:ae:99:f1:7c:dd:b1:53:7b:10:1a:b9:
                    2d:41:d9:c0:eb:c4:5b:da:c9:e9:ad:b8:35:5f:ac:
                    36:d2:b2:4d:00:99:57:1c:97:41:81:31:f7:5f:99:
                    04:d5:b6:af:d8:90:57:52:e4:b1:55:16:f5:c5:b0:
                    65:41:63:e0:ba:36:71:1c:eb:15:47:ac:9d:f5:f9:
                    ab:51:6f:cc:db:96:02:e4:8e:9f:fa:d9:ec:14:b8:
                    e9:c9:0f:ca:eb:eb:e5:7b:be:c8:64:76:61:00:00:
                    46:91:c5:27:b1:87:ac:fe:09:4e:2c:35:a3:df:44:
                    0d:f2:73:e1:f2:56:eb:39:7f:0c:96:6b:d4:27:4d:
                    09:ef:67:0f:d8:45:4d:56:53:76:18:95:ca:3f:80:
                    01:75:e0:2d:44:65:41:27:ae:27:77:b7:13:5f:16:
                    42:a4:ae:20:bd:84:3d:ec:57:b0:56:3e:97:a7:7e:
                    d0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0F:F9:12:63:87:B4:EA:29:B7:D0:F3:FF:96:FF:B3:A6:29:8B:4C
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:c9:f4:08:b1:1b:68:a9:b0:cc:49:0f:d7:28:be:62:7a:8f:
         8d:b1:a8:5d:f3:a2:90:b4:ae:cb:c7:30:c0:a7:d8:ce:76:3b:
         42:38:7f:e0:54:9c:a1:28:7d:b8:58:81:f3:04:88:bc:c4:8e:
         41:f3:0d:6c:7c:4d:f5:a1:90:7a:d0:bf:35:57:cc:e9:ba:58:
         9d:22:55:85:2c:f2:c3:bd:2d:65:1b:1f:52:86:58:64:15:c0:
         00:d5:37:04:2b:0d:41:08:7f:14:81:06:b1:a8:9c:0f:08:4c:
         c0:49:24:84:c9:e3:91:8c:a2:46:82:22:aa:8d:68:db:31:c8:
         f7:16:8b:fc:6e:d0:09:29:ec:32:e7:a5:c8:43:6f:97:4b:35:
         44:31:f6:aa:01:62:04:a2:1a:89:62:26:00:43:a6:63:2c:e3:
         e1:9b:2a:b8:ef:26:17:98:b9:9f:2c:bd:b0:e8:02:ae:e1:13:
         6f:b9:6b:d3:00:5d:02:12:ae:ad:ce:8e:c8:4a:6b:4c:7a:e6:
         1d:b6:7e:a6:93:86:a7:75:81:33:ce:d8:44:76:2a:db:69:e1:
         c7:a6:23:d8:da:dd:cd:58:b5:ef:a6:22:b9:47:bf:f6:99:12:
         4e:19:cc:46:de:8d:e4:fb:b9:99:11:de:3d:7a:6b:8f:6e:d6:
         46:64:ba:b5
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUPRrchfI53LhnYM6/lMsUZhhmP3AwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEyg2RkNCQkQwNDI1
MDkyNjYzMzM0RkExQUE5QTAyMjkyQ0I4NDE2RjUxMB4XDTI2MDgwNDE5NTE1NloX
DTI2MDgwNTIyMzg1NlowMzExMC8GA1UEAxMoOEIwRkY5MTI2Mzg3QjRFQTI5QjdE
MEYzRkY5NkZGQjNBNjI5OEI0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALCGB5Kc7MiIspBtQV2Q80YzfwLuuQQCTrgL+mTfYXR50YgylqJupiPIbuBV
0z2LiuNfmtAxjc9oS1pKHqd4t7PNH+kc/6NGj7KAOHGZ5a6Z8XzdsVN7EBq5LUHZ
wOvEW9rJ6a24NV+sNtKyTQCZVxyXQYEx91+ZBNW2r9iQV1LksVUW9cWwZUFj4Lo2
cRzrFUesnfX5q1FvzNuWAuSOn/rZ7BS46ckPyuvr5Xu+yGR2YQAARpHFJ7GHrP4J
Tiw1o99EDfJz4fJW6zl/DJZr1CdNCe9nD9hFTVZTdhiVyj+AAXXgLURlQSeuJ3e3
E18WQqSuIL2EPexXsFY+l6d+0PMCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBSLD/kS
Y4e06im30PP/lv+zpimLTDAfBgNVHSMEGDAWgBRvy70EJQkmYzNPoaqaAiksuEFv
UTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC82LzZGQ0JCRDA0MjUwOTI2NjMzMzRGQTFBQTlBMDIyOTJDQjg0
MTZGNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2I4dTlCQ1VKSm1NelQ2R3FtZ0lwTExoQmIxRS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzYvNkZDQkJEMDQyNTA5MjY2MzMzNEZBMUFBOUEwMjI5MkNCODQxNkY1MS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAM/J9AixG2ipsMxJD9covmJ6j42xqF3zopC0rsvHMMCn2M52O0I4f+BU
nKEofbhYgfMEiLzEjkHzDWx8TfWhkHrQvzVXzOm6WJ0iVYUs8sO9LWUbH1KGWGQV
wADVNwQrDUEIfxSBBrGonA8ITMBJJITJ45GMokaCIqqNaNsxyPcWi/xu0Akp7DLn
pchDb5dLNUQx9qoBYgSiGoliJgBDpmMs4+GbKrjvJheYuZ8svbDoAq7hE2+5a9MA
XQISrq3OjshKa0x65h22fqaThqd1gTPO2ER2Kttp4cemI9ja3c1Yte+mIrlHv/aZ
Ek4ZzEbejeT7uZkR3j16a49u1kZkurU=
-----END CERTIFICATE-----
Generated at Wed Aug 5 02:42:45 2026 by rpki-client