Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          ONZ+h0gPoxjblX7lMoB8u9clDuzMu3OEJz/1iBP8Uhw=
Subject key identifier:   15:BD:A0:E9:46:17:E5:B8:74:89:42:A8:A2:23:03:4D:1C:66:1A:9F
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       291945FB865733281F5144E1EBDFD084F4433B71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0DEC
Signing time:             Fri 09 Oct 2026 03:33:33 +0000
Manifest this update:     Fri 09 Oct 2026 03:28:33 +0000
Manifest next update:     Sat 10 Oct 2026 04:18:33 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: AS149301.asa (hash: BjimFGHtFuZcNZ00WSonyg+uMpCW2rEV09PivspI+fk=)
                          3: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: +0rQnkpfFNUFaO74elFYzDfDpILLOpDIOXq0/jc9Ku4=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:19:45:fb:86:57:33:28:1f:51:44:e1:eb:df:d0:84:f4:43:3b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Oct  9 03:28:33 2026 GMT
            Not After : Oct 10 04:18:33 2026 GMT
        Subject: CN=15BDA0E94617E5B8748942A8A223034D1C661A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:07:d2:ef:47:fd:18:d6:d1:23:e1:f6:25:
                    a3:61:f7:31:d9:5d:2b:ac:28:ad:6c:8e:49:b8:55:
                    e7:12:be:fb:52:24:58:ea:2d:ec:9c:57:f1:8b:6f:
                    12:87:00:cf:90:25:3c:a8:b6:a4:37:4c:4b:bf:b8:
                    f4:aa:5c:0e:9f:b2:18:d7:21:51:c2:a3:0c:10:02:
                    45:c5:09:ba:0e:65:d2:be:a3:4f:c8:14:18:00:4f:
                    34:44:87:8d:6e:1a:1e:e6:7b:5a:cd:df:63:78:ee:
                    55:58:97:82:93:a6:71:f8:a5:b5:bf:2a:b8:3d:9f:
                    ba:81:66:c4:00:f6:c4:a9:5d:a9:b0:c5:6a:51:7a:
                    d6:cb:76:29:94:8e:d6:62:78:ce:60:07:55:a0:23:
                    93:8b:6b:fd:72:9a:4f:a2:47:da:3d:15:e6:56:7e:
                    3f:9d:9b:e7:90:2b:ee:e9:f8:de:5a:21:4c:16:db:
                    7f:f9:9f:2c:9b:a3:d5:ec:43:55:3e:04:34:d9:7e:
                    c6:b0:f9:45:44:35:96:22:7a:0b:fa:09:c8:86:43:
                    53:f3:89:b7:3a:95:c9:1d:3b:ad:11:0d:5c:df:f1:
                    96:3e:99:17:c3:be:37:80:d0:f6:db:4f:6b:67:a7:
                    9f:bf:88:27:96:e4:ae:c3:9f:0a:f5:37:72:2b:25:
                    b3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BD:A0:E9:46:17:E5:B8:74:89:42:A8:A2:23:03:4D:1C:66:1A:9F
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:12:8b:d9:7f:d5:b9:38:a6:f8:0e:7b:ce:a2:64:65:51:c9:
         e6:43:93:46:cc:db:94:2b:80:b3:60:1f:3f:df:8a:e5:a6:a2:
         e8:90:dd:95:e9:be:3e:a1:cf:91:04:6b:88:da:a0:ac:91:82:
         b5:6f:07:ed:b2:bd:57:6b:4c:fa:c1:48:d8:c8:a7:67:0f:3c:
         d1:57:73:5e:89:17:4e:a1:1a:26:35:d2:e8:06:9d:76:cc:ae:
         44:bb:aa:46:0e:36:0b:63:d8:df:02:e4:ae:79:b7:29:8c:93:
         a6:c3:b9:cf:0e:e4:38:cd:d7:5a:6e:ca:46:15:56:36:22:5b:
         d5:ed:ce:ac:2c:5f:c4:2d:ef:a3:35:d8:ea:4b:62:a4:86:c5:
         dd:78:49:2f:95:d5:9f:f2:fe:4a:58:58:45:72:d2:5c:8d:ac:
         87:63:c3:f3:b7:6d:74:d4:fd:ea:36:17:c6:ff:93:8b:48:f6:
         bf:6c:41:34:e9:cf:1d:af:82:ef:f5:6a:8b:7e:76:dc:7d:c9:
         be:aa:0d:cd:f0:40:2b:43:7b:11:44:4c:6a:5a:b1:00:53:90:
         60:68:4d:36:5e:2d:5d:2a:75:93:e1:ec:b9:7b:8f:f9:04:cd:
         bf:3f:77:7c:e2:b6:9b:0e:36:7e:cf:b3:82:a1:71:2e:65:0b:
         15:e6:81:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:12:08 2026 by rpki-client