Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          wQbfi2qGHOaddeEA+vym5rDygPkPuaLxRoQhQ2f9EY0=
Subject key identifier:   9A:A4:60:A5:74:72:AF:0B:E9:65:E5:50:41:22:0F:00:E2:01:45:F5
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       5820D975242EA3EC433C8F2D12B27672EE903411
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0DF4
Signing time:             Sun 11 Oct 2026 19:37:08 +0000
Manifest this update:     Sun 11 Oct 2026 19:32:08 +0000
Manifest next update:     Mon 12 Oct 2026 21:13:08 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: AS149301.asa (hash: BjimFGHtFuZcNZ00WSonyg+uMpCW2rEV09PivspI+fk=)
                          3: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: O5BZ3F07MAVEbxTub+B3wryu4qF136qfhYac1eGfkt4=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 21:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:20:d9:75:24:2e:a3:ec:43:3c:8f:2d:12:b2:76:72:ee:90:34:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Oct 11 19:32:08 2026 GMT
            Not After : Oct 12 21:13:08 2026 GMT
        Subject: CN=9AA460A57472AF0BE965E55041220F00E20145F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:14:25:8f:64:26:60:ec:e2:b7:f8:3e:4c:
                    96:d3:85:98:16:ff:2a:5d:42:bf:2b:54:d4:de:0b:
                    1e:5f:5f:82:67:ce:21:18:d3:61:7c:86:e5:95:78:
                    e4:b9:ac:0a:ab:1a:9f:0d:46:8f:b0:c8:a0:a5:df:
                    bc:12:a0:9b:53:45:9a:c9:50:c2:e5:5b:a8:41:61:
                    75:00:d5:7f:c2:18:c5:50:e8:01:36:73:99:b8:08:
                    5b:03:70:78:e1:6a:01:2c:17:1b:29:b3:13:31:80:
                    a4:72:a6:47:4b:5d:31:e5:4c:11:ff:04:e2:4b:14:
                    61:0a:78:c6:56:38:99:ed:bb:19:b2:39:b2:68:30:
                    08:f4:72:46:7b:65:48:49:90:7e:60:3d:7f:d7:30:
                    0a:19:17:42:55:64:84:7d:a6:4d:9d:5b:da:2f:91:
                    10:c3:33:bb:01:88:69:be:2b:01:ad:ae:f0:b4:2f:
                    71:f2:2c:94:a6:55:6c:ea:d4:39:ec:a3:4e:03:a1:
                    a8:31:c3:0f:ef:db:c2:72:50:4b:80:66:74:2a:be:
                    b4:4d:18:d5:82:08:cc:e6:2e:3f:f9:e3:92:b9:d5:
                    8e:b5:aa:09:aa:23:5d:9e:9b:23:e5:6a:04:a7:05:
                    5d:b4:5b:a6:c1:64:4b:76:65:3f:ed:0f:3b:c1:5b:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A4:60:A5:74:72:AF:0B:E9:65:E5:50:41:22:0F:00:E2:01:45:F5
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:32:f1:0b:ec:56:b5:09:8f:14:b8:ad:68:b6:e1:12:5e:e3:
         97:48:27:be:9b:5d:e7:32:03:96:35:59:40:e1:e7:43:e0:71:
         05:d3:f6:40:4f:07:db:dc:b5:06:88:67:f0:bc:94:07:97:72:
         51:65:81:5f:2b:35:a2:71:7f:4e:56:50:c1:15:2b:45:25:c9:
         d9:09:aa:65:d1:70:11:4d:8e:f5:ab:86:39:30:bd:39:b2:fb:
         af:db:01:f0:f4:44:42:5d:7a:16:06:d2:75:1b:a9:2d:19:fb:
         0f:31:03:d2:e2:81:dd:3b:33:91:33:b2:76:82:d0:97:73:22:
         4a:b0:9e:1b:58:4c:1a:54:88:7c:a7:e5:38:84:f1:84:60:68:
         56:a3:0b:9f:1f:5a:d2:89:50:6b:f7:ca:23:f3:1b:8a:58:2f:
         b8:28:1f:3a:0b:ff:45:d2:c6:32:68:2a:86:1d:96:9b:d9:4d:
         34:bb:36:84:20:c1:3f:cf:e1:cf:9b:e1:55:5c:81:a6:ce:57:
         f1:aa:63:5a:50:64:18:d1:1b:5c:e5:5e:b9:27:1d:6b:cc:54:
         b6:72:2f:5f:1e:c6:f5:ff:5b:b3:ca:b1:18:f1:44:ee:c3:24:
         a2:b7:52:5a:da:61:8c:73:51:d6:f7:72:c2:1e:bb:13:d1:98:
         5a:6a:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:33:11 2026 by rpki-client