Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          YB8imxTq5eq88rhUzejoyYXR/v3arAMPsA8nLuYs91A=
Subject key identifier:   D6:F3:DA:CB:78:7E:4C:E6:5B:2E:33:F8:D7:27:36:69:24:11:75:5F
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       51F96C5440CA985EF0D0BA837E829A65445C99C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0D16
Signing time:             Sun 23 Aug 2026 20:25:26 +0000
Manifest this update:     Sun 23 Aug 2026 20:20:26 +0000
Manifest next update:     Mon 24 Aug 2026 23:20:26 +0000
Files and hashes:         1: AS149301.asa (hash: BjimFGHtFuZcNZ00WSonyg+uMpCW2rEV09PivspI+fk=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: bVvmiQZoPbDzNVT0iDOaRyGXAADVn20COpsNyPbx97g=)
                          3: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Aug 2026 23:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f9:6c:54:40:ca:98:5e:f0:d0:ba:83:7e:82:9a:65:44:5c:99:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Aug 23 20:20:26 2026 GMT
            Not After : Aug 24 23:20:26 2026 GMT
        Subject: CN=D6F3DACB787E4CE65B2E33F8D72736692411755F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:17:5a:34:29:95:fb:b9:b0:b3:89:27:d4:
                    3b:1a:ed:94:f3:ec:33:0a:44:9f:dc:0e:11:65:3b:
                    ff:a6:0e:57:8a:c0:8c:c7:ff:86:a3:77:c9:f0:0e:
                    be:a3:4f:0b:c1:6e:63:a6:47:2e:e9:57:aa:cd:76:
                    0e:ad:84:5e:42:3b:90:df:07:12:4f:5f:3f:60:bf:
                    5b:ba:e2:1f:a3:bf:77:f1:9f:f9:70:02:7c:4f:04:
                    a4:d5:19:de:af:21:c1:53:5b:88:86:95:e7:73:01:
                    7e:48:db:87:6d:fc:d7:52:1e:c3:4a:2e:fd:7e:28:
                    a4:84:fe:6b:c4:71:6a:b1:15:48:ce:26:29:3e:e3:
                    77:96:1e:fc:cf:c4:a4:f0:91:74:7e:f3:0f:bd:1f:
                    d6:a9:a0:fb:fe:68:f9:1d:30:84:b0:a0:5f:a3:44:
                    71:85:20:4f:89:03:da:e7:35:01:23:dd:50:2a:e5:
                    f9:72:01:83:73:2b:45:d4:26:2c:93:58:58:cb:99:
                    ba:3a:7d:ed:2f:fa:23:cf:1e:07:3a:11:03:51:9a:
                    d7:6d:d6:97:86:f9:2c:f9:4d:27:f8:b9:f8:74:4e:
                    7b:18:df:d3:6a:e3:92:b4:53:8a:25:10:4c:33:46:
                    d8:a3:32:3b:71:fa:ea:6b:9e:11:f9:87:76:3e:42:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F3:DA:CB:78:7E:4C:E6:5B:2E:33:F8:D7:27:36:69:24:11:75:5F
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:0c:11:02:93:0f:1c:fc:88:1c:b7:05:6a:a7:ca:07:12:0f:
         56:1f:9f:30:36:61:ce:42:25:ea:df:87:c2:d9:f8:ff:fc:16:
         e5:05:97:9d:79:d1:5b:85:26:3f:8b:e0:eb:89:ef:98:2f:b7:
         eb:0c:3f:59:16:ea:11:3d:41:4e:0e:6e:77:c1:77:17:13:c3:
         37:dc:c0:a1:15:5e:b5:2b:ae:c2:e6:ca:12:4f:83:98:65:81:
         ab:fe:a4:36:5f:6d:12:10:cc:8c:6c:bf:cc:10:6c:14:36:c5:
         15:02:d0:18:b7:5e:15:b2:1a:39:d5:f7:47:31:2f:3c:0c:04:
         26:a0:3d:a2:ba:26:e1:d1:3f:d1:b5:98:21:8f:1e:f9:e4:6e:
         8b:c9:aa:4c:b6:b5:0e:56:d7:a9:b3:24:80:a5:63:bf:eb:e2:
         e4:2e:f0:6f:42:7c:54:b3:c1:05:8a:31:00:3e:1c:c4:1d:c6:
         0d:79:9a:20:ce:24:ce:66:25:d8:13:e6:8d:51:51:b3:b9:b5:
         09:1d:8b:41:1b:fb:75:d4:ec:ce:f5:2c:d0:60:ca:3a:f8:96:
         d3:bf:b9:80:3f:77:c7:d1:41:cd:f3:45:27:e4:5e:63:27:78:
         42:63:18:62:6b:a3:6b:3e:37:c0:b1:1f:ec:4e:ff:dc:0d:fd:
         d7:8b:2c:00
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUUflsVEDKmF7w0LqDfoKaZURcmcYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEyg2RkNCQkQwNDI1
MDkyNjYzMzM0RkExQUE5QTAyMjkyQ0I4NDE2RjUxMB4XDTI2MDgyMzIwMjAyNloX
DTI2MDgyNDIzMjAyNlowMzExMC8GA1UEAxMoRDZGM0RBQ0I3ODdFNENFNjVCMkUz
M0Y4RDcyNzM2NjkyNDExNzU1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM9bF1o0KZX7ubCziSfUOxrtlPPsMwpEn9wOEWU7/6YOV4rAjMf/hqN3yfAO
vqNPC8FuY6ZHLulXqs12Dq2EXkI7kN8HEk9fP2C/W7riH6O/d/Gf+XACfE8EpNUZ
3q8hwVNbiIaV53MBfkjbh23811Iew0ou/X4opIT+a8RxarEVSM4mKT7jd5Ye/M/E
pPCRdH7zD70f1qmg+/5o+R0whLCgX6NEcYUgT4kD2uc1ASPdUCrl+XIBg3MrRdQm
LJNYWMuZujp97S/6I88eBzoRA1Ga123Wl4b5LPlNJ/i5+HROexjf02rjkrRTiiUQ
TDNG2KMyO3H66mueEfmHdj5C1qcCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBTW89rL
eH5M5lsuM/jXJzZpJBF1XzAfBgNVHSMEGDAWgBRvy70EJQkmYzNPoaqaAiksuEFv
UTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC82LzZGQ0JCRDA0MjUwOTI2NjMzMzRGQTFBQTlBMDIyOTJDQjg0
MTZGNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2I4dTlCQ1VKSm1NelQ2R3FtZ0lwTExoQmIxRS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzYvNkZDQkJEMDQyNTA5MjY2MzMzNEZBMUFBOUEwMjI5MkNCODQxNkY1MS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEEMEQKTDxz8iBy3BWqnygcSD1YfnzA2Yc5CJerfh8LZ+P/8FuUFl515
0VuFJj+L4OuJ75gvt+sMP1kW6hE9QU4ObnfBdxcTwzfcwKEVXrUrrsLmyhJPg5hl
gav+pDZfbRIQzIxsv8wQbBQ2xRUC0Bi3XhWyGjnV90cxLzwMBCagPaK6JuHRP9G1
mCGPHvnkbovJqky2tQ5W16mzJIClY7/r4uQu8G9CfFSzwQWKMQA+HMQdxg15miDO
JM5mJdgT5o1RUbO5tQkdi0Eb+3XU7M71LNBgyjr4ltO/uYA/d8fRQc3zRSfkXmMn
eEJjGGJro2s+N8CxH+xO/9wN/deLLAA=
-----END CERTIFICATE-----
Generated at Mon Aug 24 13:43:37 2026 by rpki-client