Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          9JxMmcJ+1ApgABgZU23/wFM4K/BHQ20MvNME/JUJEe8=
Subject key identifier:   7B:AC:D0:42:9F:E2:B8:81:B7:63:B9:81:B3:71:8B:96:CC:C7:10:27
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       3C43B4EBF136526DB6554CA0ECAFCF4A8D9A332D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          094C
Signing time:             Sun 11 Oct 2026 19:37:07 +0000
Manifest this update:     Sun 11 Oct 2026 19:32:07 +0000
Manifest next update:     Mon 12 Oct 2026 23:17:07 +0000
Files and hashes:         1: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=)
                          2: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: AQkfbiofpxL5nwFLeJTjOpeOzX+hCRr6tpbHLyHUEkU=)
                          3: AS151817.asa (hash: wTrAYN9s7bfwaIQnYOvnVK5KUx58lGBv5nEfO8YXQwE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 23:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:43:b4:eb:f1:36:52:6d:b6:55:4c:a0:ec:af:cf:4a:8d:9a:33:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Oct 11 19:32:07 2026 GMT
            Not After : Oct 12 23:17:07 2026 GMT
        Subject: CN=7BACD0429FE2B881B763B981B3718B96CCC71027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:53:2b:09:5c:f9:56:ec:d9:bd:86:19:b6:
                    07:0e:62:f3:00:13:ce:70:da:82:b9:49:5c:77:87:
                    a1:68:87:87:da:27:74:3b:02:91:91:fa:92:a6:f3:
                    c6:37:bc:68:5b:27:34:55:63:5a:93:8b:1b:b1:5b:
                    1e:4a:0d:4a:eb:f4:2d:20:eb:55:bf:d8:2f:59:26:
                    da:07:c3:ef:af:d1:7e:b2:0b:07:74:89:ce:c3:9f:
                    f3:f1:4c:8e:78:8b:ed:94:1b:97:c6:d7:99:08:a0:
                    73:b2:18:d8:b2:ca:d7:82:64:c7:72:7d:1e:e2:76:
                    e3:3f:c9:d3:ad:66:44:19:2a:ff:7b:49:78:c3:78:
                    f5:aa:b1:10:39:dc:8d:44:39:85:e5:10:f4:c0:50:
                    9c:60:50:d3:cb:d3:19:ab:d4:60:c4:d8:8a:9e:fb:
                    67:a7:94:a9:54:2a:9c:6b:6c:15:0a:fb:4f:27:0a:
                    49:85:51:22:a9:6d:22:da:2a:f0:20:36:96:52:b0:
                    ec:91:68:c1:6a:38:7b:3c:44:13:48:bb:89:43:9a:
                    13:2d:b8:91:ad:eb:15:c1:94:7a:31:dd:cb:92:5b:
                    a1:02:29:19:8a:32:1a:b2:68:3c:f6:d7:b7:ea:6b:
                    35:fe:91:70:05:7b:1c:a2:ac:89:d9:75:62:da:9f:
                    60:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AC:D0:42:9F:E2:B8:81:B7:63:B9:81:B3:71:8B:96:CC:C7:10:27
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e9:52:a2:15:dc:1b:04:61:53:8e:15:2a:17:21:5e:55:33:
         8f:92:c2:b0:80:4b:51:8f:88:5f:44:81:8b:9c:68:4e:3a:e2:
         ec:38:e8:6e:89:24:d7:28:27:93:65:aa:73:68:21:e1:77:50:
         f5:d9:c7:37:3b:c7:d6:29:c4:c3:0b:c9:16:8e:6e:79:64:88:
         85:d6:5a:cb:06:2d:b5:c0:c4:f2:a0:ad:ab:87:da:b7:43:fc:
         7f:7d:c9:e7:51:80:55:41:63:27:31:8c:c5:3b:e4:0f:e4:8e:
         97:18:5a:d8:fe:96:0e:97:d4:58:e0:63:1a:30:99:06:c7:3f:
         09:e1:c9:0d:34:ef:d0:b0:6f:e4:48:59:73:8c:b0:4c:c6:66:
         dc:45:ba:52:8d:2d:b7:4a:b2:bc:cd:4e:f4:fa:ec:09:17:01:
         2a:96:32:67:21:9c:8f:16:9b:0c:0f:2c:4a:f0:1b:b4:5b:8b:
         3d:d6:7d:12:10:ac:93:cd:d5:3f:1c:c4:c2:78:77:18:a4:74:
         6e:d8:a5:17:8e:b8:20:a5:20:0e:0a:79:08:39:a9:e9:fa:6b:
         fe:fa:a7:61:ae:3f:b2:e7:4f:3c:75:8c:84:5c:25:9f:ce:64:
         5e:3e:6a:4d:3d:12:e6:57:38:bf:c9:73:b2:b6:14:eb:f2:9b:
         49:1b:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:54:22 2026 by rpki-client