Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
File:                     6FCBBD0425092663334FA1AA9A02292CB8416F51.mft (raw, json)
Hash identifier:          pEYZm8S4eDuv2Ugoz7cR4zdmOvNgYdQtyjET1L9/iJ0=
Subject key identifier:   96:B7:9E:26:3A:1C:86:C3:3E:D9:55:77:AE:04:91:0F:68:7E:F2:95
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Certificate issuer:       /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial:       73F002ED6E9AB53B12A5168C002D491794123311
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
Manifest number:          0E25
Signing time:             Fri 23 Oct 2026 15:37:57 +0000
Manifest this update:     Fri 23 Oct 2026 15:32:57 +0000
Manifest next update:     Sat 24 Oct 2026 18:42:57 +0000
Files and hashes:         1: AS149301.asa (hash: BjimFGHtFuZcNZ00WSonyg+uMpCW2rEV09PivspI+fk=)
                          2: 6FCBBD0425092663334FA1AA9A02292CB8416F51.crl (hash: 9TuLNtpaMHPmTggGHlkOw2AfzU4WMrbgvPZsTm/hJc8=)
                          3: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (hash: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 18:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f0:02:ed:6e:9a:b5:3b:12:a5:16:8c:00:2d:49:17:94:12:33:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
        Validity
            Not Before: Oct 23 15:32:57 2026 GMT
            Not After : Oct 24 18:42:57 2026 GMT
        Subject: CN=96B79E263A1C86C33ED95577AE04910F687EF295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:83:5b:1e:18:1a:20:ad:90:c5:46:bc:17:a3:
                    0f:7a:7f:61:57:62:4b:9f:80:ee:f9:31:52:2d:be:
                    d0:1b:32:fb:31:4f:9a:ef:a8:29:45:70:26:0d:9c:
                    a1:e4:2e:08:5f:29:f4:9f:be:8c:b0:9a:e6:18:a9:
                    2b:59:f4:c3:d4:cf:f7:2e:95:dc:ff:a4:64:c1:93:
                    81:5d:b2:b3:11:95:2f:5c:ac:2c:b8:9b:28:c1:60:
                    6d:80:91:8b:3a:6a:2d:60:c7:04:a9:90:dc:a5:ca:
                    19:5a:cb:1e:56:e0:96:61:30:44:c6:6d:38:fd:77:
                    b4:d7:a6:2d:f9:d9:38:04:b2:2b:b1:2a:f2:b2:f8:
                    a4:47:97:e8:1f:0c:e2:51:a9:d6:07:f9:6f:87:59:
                    cd:4d:cd:55:86:86:ac:f4:fa:f4:cb:03:82:c8:5c:
                    1e:c7:b9:fb:49:e5:10:c0:b0:1c:26:95:2f:5a:d3:
                    73:9a:28:71:30:8e:47:e7:bd:7b:d5:ab:29:b0:7a:
                    1e:f5:2e:45:d2:7c:e5:c4:cb:aa:a5:5a:90:b5:18:
                    a6:4d:3a:92:e3:54:20:95:84:1a:ca:70:6c:47:3f:
                    b8:ca:43:0e:93:a5:36:75:9c:f7:fc:e2:a3:17:4d:
                    38:8b:7e:8c:0b:24:db:86:fb:58:c7:db:b2:39:47:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B7:9E:26:3A:1C:86:C3:3E:D9:55:77:AE:04:91:0F:68:7E:F2:95
            X509v3 Authority Key Identifier:
                keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2d:25:91:0e:c0:5f:c3:bd:04:fe:54:0d:3f:af:fe:c9:1a:
         00:d5:f8:ad:16:df:80:43:f6:be:ee:3b:d7:9d:02:83:70:26:
         68:47:f9:57:46:7c:26:c1:48:7f:15:f0:c5:87:4e:f9:26:5d:
         17:4b:bc:1c:f4:03:0a:65:5c:d7:13:83:52:b0:85:9d:50:31:
         ba:70:71:b2:8a:d0:1a:05:5c:00:1a:d5:99:0c:f6:4a:3c:48:
         f3:31:b5:68:de:a0:f2:cd:38:42:98:ac:0d:db:8f:93:3b:b6:
         40:db:c5:3c:f0:d4:95:97:0d:f1:dc:46:cc:c7:eb:83:36:87:
         47:84:d5:21:da:41:24:1f:15:91:c4:96:75:e0:90:b1:5e:aa:
         6c:78:e1:19:e9:dd:f3:fb:78:f4:85:11:02:3d:a7:1e:12:c1:
         f7:a6:29:6a:7b:5c:3e:0a:67:07:34:dc:ae:21:db:b7:4c:9b:
         d8:41:e0:39:35:fa:c7:b2:5a:70:29:98:69:da:76:cf:b1:e2:
         9c:c5:02:69:8d:83:b2:5a:be:3a:d3:7b:b7:28:15:53:7d:b3:
         99:85:97:8a:9e:f4:9a:9b:46:41:d6:00:a9:f0:3c:ce:60:f9:
         a5:cf:e3:ab:be:4f:a4:7c:35:97:75:6c:f4:e0:83:b3:53:62:
         ff:11:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 06:57:22 2026 by rpki-client