Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          6dIOEJxPudLj3sHldk5CKzXPk13mvgTDIBBv5qP/EUA=
Subject key identifier:   C9:28:08:6A:4A:B5:62:A3:8C:88:6C:BC:F4:E8:26:C3:F4:62:47:E0
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       75DA97D5B4CC8456E94736AEFC0CE3204F351907
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0D9D
Signing time:             Mon 21 Sep 2026 10:59:33 +0000
Manifest this update:     Mon 21 Sep 2026 10:54:33 +0000
Manifest next update:     Tue 22 Sep 2026 11:03:33 +0000
Files and hashes:         1: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: 977TEs4e/8kZwokaoTho5nmp1MCB0wy4qSavK2fd2Ws=)
                          2: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          3: AS149301.asa (hash: BjimFGHtFuZcNZ00WSonyg+uMpCW2rEV09PivspI+fk=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 11:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:da:97:d5:b4:cc:84:56:e9:47:36:ae:fc:0c:e3:20:4f:35:19:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Sep 21 10:54:33 2026 GMT
            Not After : Sep 22 11:03:33 2026 GMT
        Subject: CN=C928086A4AB562A38C886CBCF4E826C3F46247E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:d3:75:cb:6b:66:50:0d:0d:21:50:76:e4:
                    3b:a0:c5:82:0d:cb:7a:e3:22:58:20:92:05:e7:d0:
                    d0:5f:af:8e:ca:bb:b1:0b:a2:fc:af:a3:0e:86:da:
                    92:a1:3a:33:2d:a5:d2:bc:df:d6:fb:53:21:d6:4f:
                    cd:65:87:2f:da:0a:c1:a2:15:d8:01:c0:e4:a4:6a:
                    74:d9:8a:80:c4:99:76:70:46:32:e3:2b:1e:27:fe:
                    d8:cb:fd:69:55:64:4b:30:85:7b:6f:e7:2c:6b:5a:
                    e3:34:35:4e:67:53:36:63:60:e7:e7:b0:3a:9d:07:
                    72:d4:61:01:5f:8f:c3:8b:13:b3:c5:71:e2:3e:51:
                    d1:99:8d:1a:83:9b:8c:1d:53:f4:91:42:cd:fe:9a:
                    32:70:40:94:ec:4d:5b:dd:ed:6d:52:55:63:c3:cf:
                    bf:9b:c8:c1:db:17:53:78:1a:8c:8c:5c:63:47:cd:
                    58:0c:0f:f0:d7:51:4a:7d:d4:48:c9:02:46:b8:33:
                    de:55:8d:3b:b4:43:8c:b2:7b:d5:47:1c:ac:2d:d1:
                    7c:de:6c:0a:93:73:0f:c9:2b:24:f2:3f:02:e7:31:
                    0d:90:18:6c:c7:85:01:21:92:9c:21:ad:32:53:df:
                    2c:59:6c:d9:bf:f4:8a:44:62:7d:53:47:46:e3:9a:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:28:08:6A:4A:B5:62:A3:8C:88:6C:BC:F4:E8:26:C3:F4:62:47:E0
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:20:be:ca:62:b0:a3:7f:ca:31:dd:f1:80:f6:5a:6e:b6:9e:
         56:f6:9c:10:99:9c:d0:6f:df:a7:3d:ba:b9:77:db:cf:22:0d:
         e0:a7:96:7b:99:f2:81:29:4d:c7:dd:22:a0:f5:4a:e1:de:6e:
         fa:fc:a9:b9:bb:4b:70:5c:8f:bb:3a:58:85:89:29:86:62:18:
         a9:65:26:c5:ba:fc:c0:df:7b:64:5b:98:4c:4b:97:81:18:ee:
         03:b7:73:9e:56:40:dd:f2:4a:68:6d:a4:d9:84:40:78:f5:41:
         c7:e4:d1:80:be:43:8f:04:74:96:34:50:a1:b3:3e:56:d1:51:
         a3:2b:05:19:73:43:26:e5:e5:dc:16:49:63:82:62:a7:f6:e5:
         d5:4b:ee:c4:9f:14:87:09:fe:6f:48:5a:67:32:dd:cc:b4:04:
         8c:53:3d:10:b5:5f:2f:37:b2:0a:21:4d:1c:ea:7e:c5:c4:04:
         45:bd:1a:8d:16:93:f9:1a:e4:29:04:e3:75:01:4d:f1:45:58:
         de:1a:da:c0:a9:5b:57:02:5c:77:40:0d:d0:57:4f:3a:82:87:
         1d:78:84:9f:ad:42:d0:17:50:ef:36:1c:8f:df:37:b6:86:46:
         a3:9f:d9:6d:64:37:7c:5a:54:58:e5:2b:5e:28:c3:4a:d9:e3:
         2b:20:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:36:59 2026 by rpki-client