Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          6TqtorOniBE5sSfCbtsKAvBDVKapkvV4x1M+NCLYDug=
Subject key identifier:   3C:F2:20:4F:5A:EA:45:4F:0E:57:DC:E2:DC:F2:D4:B8:8E:BE:3D:B3
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       6B29043C777589F8EE519A59E566535EFE8516A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0DEE
Signing time:             Fri 09 Oct 2026 19:08:40 +0000
Manifest this update:     Fri 09 Oct 2026 19:03:40 +0000
Manifest next update:     Sat 10 Oct 2026 23:05:40 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: yT+BxXsryiIyd3TQEkQwqywcXNuT/HDL8RShtLWaBgA=)
                          3: AS149301.asa (hash: BjimFGHtFuZcNZ00WSonyg+uMpCW2rEV09PivspI+fk=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 23:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:29:04:3c:77:75:89:f8:ee:51:9a:59:e5:66:53:5e:fe:85:16:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Oct  9 19:03:40 2026 GMT
            Not After : Oct 10 23:05:40 2026 GMT
        Subject: CN=3CF2204F5AEA454F0E57DCE2DCF2D4B88EBE3DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:c4:dc:f7:40:f6:be:fc:21:33:07:55:71:
                    68:51:3c:10:d0:d7:58:0e:6a:5a:99:6f:b1:0f:a7:
                    15:4b:d6:32:e2:b6:a6:a6:b0:d6:ef:6e:99:cb:9b:
                    cf:70:72:f7:ca:e6:9f:9b:34:db:c6:ae:33:31:31:
                    58:3b:c5:03:78:90:de:78:ed:8c:9a:3b:13:5e:35:
                    42:40:1a:b1:ea:84:92:d5:c8:4b:e5:cf:b0:56:48:
                    e9:3c:a0:3d:5f:a2:23:7f:29:b7:ad:e6:25:ea:ef:
                    de:05:32:e0:61:cf:b4:49:17:8b:08:4b:50:37:61:
                    e8:b5:73:5e:45:ce:7a:f8:66:47:8c:7c:bb:c8:4b:
                    c2:d5:30:36:4d:4b:cf:f1:a6:cf:fb:ac:0c:fd:5c:
                    17:6a:69:dd:21:c6:ae:32:c2:a0:95:60:a3:14:2d:
                    a0:84:6f:34:7b:b1:21:44:3f:32:26:33:b2:5a:4b:
                    5e:ba:ae:93:91:a4:c4:ed:92:7b:d3:28:89:b1:d7:
                    be:af:d2:3a:97:98:4a:89:59:2d:49:53:5a:d5:0e:
                    c9:e8:23:23:e6:a1:c2:28:bd:bd:7a:d4:7c:40:68:
                    44:96:b4:cb:2e:c4:5a:65:2a:32:b2:11:bd:92:05:
                    38:57:98:dd:6c:b1:a7:6e:69:24:59:4b:fe:be:ec:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F2:20:4F:5A:EA:45:4F:0E:57:DC:E2:DC:F2:D4:B8:8E:BE:3D:B3
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:2c:7f:cb:46:30:83:d1:29:bf:60:5c:7c:1a:30:33:da:07:
         22:ed:db:82:56:34:24:31:da:6d:74:b8:16:5b:4b:fc:bc:c4:
         a5:c9:82:94:42:2f:87:b0:7a:53:db:ea:e2:ae:5e:34:6e:a1:
         33:72:44:3c:8d:23:07:06:dd:aa:06:ed:62:ab:d2:b2:ab:3e:
         1b:39:39:09:ad:86:9b:c4:9a:00:37:6c:a2:f2:8d:25:4e:d4:
         91:b9:82:48:62:16:8e:8c:ff:53:59:1b:39:7f:9c:e6:53:ae:
         ef:43:9b:fe:6c:07:57:21:de:c2:2d:e1:53:75:66:31:15:ea:
         ab:35:f7:af:31:c7:99:f7:df:e4:67:08:32:e5:22:ed:bb:58:
         6b:d0:f9:3b:d2:25:b1:de:7a:89:3c:10:69:36:93:70:5e:64:
         d6:4e:b2:d6:11:0a:f9:9e:2b:90:02:be:44:e3:be:5a:53:1e:
         8f:ba:c3:b9:94:b9:5d:ef:71:04:f3:be:89:d2:d7:cc:00:c4:
         0f:ea:b6:6b:8a:fb:4b:38:8c:c8:da:0d:d8:37:92:75:55:9f:
         a3:db:ad:d7:1a:a3:6c:0a:bd:85:ff:f4:06:ec:29:fa:40:a6:
         29:9f:e0:19:b9:07:9a:23:94:74:5c:f6:c1:1e:4d:64:c8:a9:
         38:60:e8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:38:58 2026 by rpki-client