Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          q7nhopn7OhmDB75qpaHUe/ezeSLi3zX40ZB3I9XGtuY=
Subject key identifier:   78:6C:D0:88:C8:BA:CB:14:75:43:C2:68:C7:F3:39:C0:72:51:09:7E
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       64718483B30075A2DB5C15AB1E88D7DFA93038E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0DA0
Signing time:             Mon 21 Sep 2026 23:18:49 +0000
Manifest this update:     Mon 21 Sep 2026 23:13:49 +0000
Manifest next update:     Wed 23 Sep 2026 02:14:49 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: To5R6m5SAcjmflnbiiYMOFVYy+9YS/Alh5uWv/0i/uw=)
                          3: AS149301.asa (hash: BjimFGHtFuZcNZ00WSonyg+uMpCW2rEV09PivspI+fk=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 02:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:71:84:83:b3:00:75:a2:db:5c:15:ab:1e:88:d7:df:a9:30:38:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Sep 21 23:13:49 2026 GMT
            Not After : Sep 23 02:14:49 2026 GMT
        Subject: CN=786CD088C8BACB147543C268C7F339C07251097E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:16:dd:da:24:e2:74:e0:82:3a:fc:64:9d:e2:
                    d2:de:d5:87:84:41:10:86:ed:ac:6e:24:e8:79:db:
                    d8:2f:4a:c4:51:83:85:41:9a:fb:86:39:15:dd:96:
                    02:df:f6:f7:4e:03:d1:e1:fc:9d:00:1a:f4:7f:d5:
                    ee:56:b3:dd:58:c1:73:96:b8:dc:b6:bc:3c:fb:eb:
                    96:1d:d6:6a:6c:b2:ee:9f:79:8b:95:30:f5:08:ad:
                    6d:2a:ba:38:e2:27:2f:19:9f:b5:bd:8e:10:68:68:
                    d3:c6:1f:9a:c0:b3:6b:78:48:0a:12:91:66:39:34:
                    e7:c0:cd:7b:97:17:07:4b:2c:20:90:70:65:c5:24:
                    1e:ad:ce:2a:8b:50:cd:2f:f7:dc:f3:5f:8a:81:7a:
                    0d:db:ae:6a:70:3a:b1:b8:4c:5e:67:58:85:fd:cd:
                    ea:bf:6e:49:35:b5:a0:e4:dd:13:98:0c:81:b4:e4:
                    d9:2b:13:ad:7d:32:84:ef:5c:e4:7f:91:de:31:d6:
                    39:7b:63:9d:c6:d3:f1:ee:41:4e:2f:77:f7:b3:c1:
                    f5:cd:f8:67:70:a5:9c:67:be:c0:ad:76:36:a4:f7:
                    74:2b:2c:4f:d5:51:7b:2a:92:f3:64:b9:aa:06:f1:
                    01:3c:80:83:84:a2:a0:73:15:71:2e:12:16:9a:72:
                    fe:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6C:D0:88:C8:BA:CB:14:75:43:C2:68:C7:F3:39:C0:72:51:09:7E
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:bc:d7:85:3d:7b:83:e3:5b:95:6f:75:2a:58:3d:d9:4a:f8:
         b4:09:5b:39:3d:c0:93:93:71:72:cc:f7:ff:4a:fe:94:91:0b:
         47:98:0b:1f:a2:dd:17:a8:8d:78:e8:a4:eb:11:76:ef:e3:07:
         22:7a:6e:69:7d:eb:8c:b8:d2:32:54:e2:39:66:77:97:e0:74:
         7c:27:5b:9d:e7:85:31:e3:f5:56:e9:76:e4:49:ec:67:98:68:
         2a:8d:af:4a:35:22:ab:76:ed:16:cb:8c:a4:a8:2d:c3:e0:ea:
         e7:cd:a1:c0:74:1a:b7:fe:80:ed:23:c3:f7:83:ac:43:bf:f2:
         f0:09:b6:ee:08:80:f5:e9:83:55:95:ca:34:77:f0:7a:50:a5:
         d1:f1:47:c4:5b:c5:56:fb:12:cd:1e:95:94:06:58:7b:25:57:
         42:f4:59:ef:8c:2f:2b:e9:d6:f6:c1:15:be:ac:ce:52:1b:c7:
         89:86:fd:ba:bf:a9:91:85:4e:f6:f2:27:26:02:9d:ae:cb:f2:
         62:80:55:62:2f:77:8c:59:44:69:05:43:cb:a9:7d:d9:ca:c9:
         92:f8:ab:68:1c:21:2b:da:95:5e:3b:41:27:a5:2c:06:77:bb:
         20:08:06:f9:7e:0c:13:ed:69:66:89:94:63:8e:40:21:96:ad:
         97:7b:7a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:46:11 2026 by rpki-client