Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          AEuFzz8v5Phu/1eYO3ChKcEDq4NQ5vvqzWWlCFMjnJ4=
Subject key identifier:   F0:2C:82:42:8E:09:DB:95:86:7E:A8:53:9D:27:A0:3D:16:73:16:40
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       39812A92399698F5CDE95AB06EB652B922B806A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0D22
Signing time:             Wed 26 Aug 2026 09:02:17 +0000
Manifest this update:     Wed 26 Aug 2026 08:57:17 +0000
Manifest next update:     Thu 27 Aug 2026 11:55:17 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: ttm61eH5gv2brVOWraIYbXgm8nJSGbNZHq6rW6k0pNE=)
                          3: AS149301.asa (hash: BjimFGHtFuZcNZ00WSonyg+uMpCW2rEV09PivspI+fk=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 11:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:81:2a:92:39:96:98:f5:cd:e9:5a:b0:6e:b6:52:b9:22:b8:06:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Aug 26 08:57:17 2026 GMT
            Not After : Aug 27 11:55:17 2026 GMT
        Subject: CN=F02C82428E09DB95867EA8539D27A03D16731640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:7c:9c:45:83:ac:50:ef:a5:f5:1f:3a:72:
                    74:52:d8:e8:a5:0a:e1:7c:38:01:c5:66:a9:02:73:
                    cc:da:5a:2b:12:99:d9:47:f7:e4:99:63:86:6c:34:
                    2d:3e:5b:82:8b:f7:1e:b0:36:c5:3d:0a:ae:1e:5e:
                    df:fe:39:4d:f5:75:f5:e9:c5:76:4b:5f:5d:ed:46:
                    c0:9f:89:8c:86:b7:67:32:42:fc:37:fd:59:30:77:
                    a0:91:83:80:0b:a1:7c:74:a7:2e:2e:f8:0b:90:db:
                    3c:ec:a1:86:3c:61:97:25:88:4e:ed:47:2c:a0:91:
                    f4:4c:6b:01:8c:d8:22:be:37:61:24:f5:8f:79:06:
                    60:a5:71:6f:d6:98:7f:1e:4f:3c:37:ac:30:6e:1e:
                    03:67:27:5c:20:3f:20:c8:06:11:f3:ea:2f:e6:a9:
                    65:87:24:b0:27:dd:fb:4f:ef:a5:21:42:04:43:cc:
                    d3:18:19:c8:04:65:37:c6:19:2c:cd:c8:49:50:ee:
                    ef:09:a7:c1:e4:08:5d:5d:18:10:ce:5a:51:ba:59:
                    39:5c:dc:eb:41:7b:74:8d:30:e6:60:d4:de:d2:4f:
                    16:07:bd:d4:61:d2:0d:0a:4d:47:f0:1f:6b:e0:54:
                    77:dc:61:b6:97:a1:dc:ca:98:29:99:82:ab:6a:7a:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2C:82:42:8E:09:DB:95:86:7E:A8:53:9D:27:A0:3D:16:73:16:40
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:32:48:4e:2d:4a:9c:4e:f0:af:ad:03:5d:73:f7:23:b8:36:
         56:c8:30:f8:e6:f4:a5:d9:5e:52:01:22:58:0d:b4:a8:ef:1d:
         a4:a4:80:e0:85:f0:cf:92:14:df:0f:4b:f9:73:66:dd:c0:29:
         eb:9d:27:ba:c3:a0:ef:c7:a8:a2:3a:22:f2:92:cb:1c:98:e1:
         e7:fd:2f:d6:03:57:d6:fe:a3:d0:1e:c0:33:0d:7a:1e:4d:d3:
         98:5b:e4:c0:83:d3:be:95:8d:88:ac:6e:2a:16:06:e6:0c:88:
         84:bb:65:31:34:d7:f4:d4:24:9e:22:c7:74:ef:c9:3f:f6:f8:
         52:6e:07:af:52:53:72:5d:4f:53:22:fa:09:02:dc:56:35:13:
         92:a2:01:97:df:a6:02:54:7d:94:70:a7:b1:53:6f:64:31:42:
         3d:9c:0e:d9:52:0d:1a:b0:25:26:5e:68:7f:55:cb:09:ea:7f:
         ef:2f:58:ce:e9:70:40:bf:99:d4:59:a3:8d:9b:b5:b2:84:cf:
         1f:42:db:21:ea:3b:b7:7b:db:90:b5:36:8a:5d:1b:cc:eb:9a:
         21:b3:01:f9:c5:5e:65:59:d2:cf:ae:e0:2d:7a:a8:97:e8:9d:
         0b:bd:f7:05:46:b1:5f:37:d7:b2:40:59:2b:77:91:05:ac:f9:
         99:14:2d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:17:51 2026 by rpki-client