Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          6EaI2eAYU5DWWS12xiYRCytZATj+0lQARwIFSjtoKzU=
Subject key identifier:   25:27:68:B7:16:66:14:AA:F8:F9:17:32:2A:87:2B:67:22:51:90:05
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       669379C09C606BE7657884FE7C554ED2217F2F4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          0879
Signing time:             Wed 26 Aug 2026 09:02:17 +0000
Manifest this update:     Wed 26 Aug 2026 08:57:17 +0000
Manifest next update:     Thu 27 Aug 2026 11:27:17 +0000
Files and hashes:         1: AS151817.asa (hash: wTrAYN9s7bfwaIQnYOvnVK5KUx58lGBv5nEfO8YXQwE=)
                          2: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=)
                          3: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: 2IPfGeYr+R8rHyOh/vlLpU4JyS/xslapQfh2L8eIaP8=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 11:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:93:79:c0:9c:60:6b:e7:65:78:84:fe:7c:55:4e:d2:21:7f:2f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Aug 26 08:57:17 2026 GMT
            Not After : Aug 27 11:27:17 2026 GMT
        Subject: CN=252768B7166614AAF8F917322A872B6722519005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:46:fc:7f:6b:aa:a8:d5:e8:d9:0a:2e:5d:23:
                    60:34:25:2a:ea:57:bd:90:56:f2:f8:23:1c:7a:0b:
                    39:d7:f3:bc:59:95:36:12:1b:ab:d3:10:18:2c:36:
                    a1:99:e3:df:b5:08:bc:ea:15:60:79:89:24:0b:c9:
                    28:ba:83:e1:e6:47:a3:84:a2:76:b7:6f:a5:d5:b9:
                    70:74:ab:27:e6:b8:54:0a:78:c3:ba:d4:50:2e:57:
                    4e:36:f1:cf:87:87:81:e8:0a:fa:5a:2a:3d:2d:e8:
                    41:89:61:0f:aa:86:a1:9c:8a:45:cb:9e:f0:4e:ff:
                    d9:d8:45:b7:c8:a2:11:01:94:7f:17:f3:a9:2c:73:
                    c5:da:c6:9f:49:af:1d:07:68:dd:56:13:c3:9a:3f:
                    68:f3:01:36:1d:63:e2:52:80:9f:86:d9:39:8b:ab:
                    c1:95:94:fe:f2:7d:70:4e:7c:43:09:cf:ec:71:69:
                    66:8f:dc:12:f0:71:ab:5b:c6:56:c0:41:71:5b:7f:
                    d0:ed:12:78:fd:fb:48:38:c6:db:84:7e:be:d2:f3:
                    2c:2c:ae:87:36:12:2b:d2:b2:81:39:94:44:5f:bc:
                    2f:b7:b8:bf:7c:af:33:7c:49:84:1a:f7:2e:f0:81:
                    43:35:9c:52:14:1e:fa:3e:1b:a7:f3:b4:6c:82:0a:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:27:68:B7:16:66:14:AA:F8:F9:17:32:2A:87:2B:67:22:51:90:05
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c2:cd:7e:55:ef:a1:3b:27:6b:6a:1f:eb:93:51:01:e2:d8:
         7a:0d:39:f9:1d:4f:b3:58:9d:2d:6c:6e:cd:8e:a3:99:18:20:
         d9:a3:cb:6c:43:b3:1b:b0:27:ff:45:d1:ca:f9:70:99:05:a4:
         e2:d4:3c:dd:e6:2d:11:97:f8:d4:ae:59:83:ec:ea:1e:38:cf:
         22:d8:b9:ee:65:59:aa:67:45:f9:95:1b:1f:cc:4a:66:32:a7:
         d4:9e:4b:35:0b:71:25:70:13:15:8b:78:66:fc:33:ed:d5:2a:
         7c:e9:bc:bd:46:b6:a9:3f:1e:f8:81:03:ba:5f:53:4a:e0:2c:
         dc:af:ac:9c:1d:93:c5:0c:c8:93:6d:05:75:50:95:72:0b:f0:
         c9:00:5f:f2:d2:f8:82:55:ab:a1:32:33:69:1d:33:c7:d8:0f:
         a3:8f:33:b8:da:85:ff:cc:c5:e3:3a:27:f1:f6:04:55:da:ce:
         93:ca:6a:f8:c3:da:e8:49:2d:df:00:21:6e:43:b7:e8:ad:57:
         4f:fd:6a:42:3b:21:d3:8a:6b:c1:48:1b:07:07:95:be:b4:db:
         70:22:ed:a5:7d:0d:bd:c5:1c:70:7b:0d:2e:9f:d6:da:8d:ad:
         9e:cb:ce:17:e0:59:aa:a3:9a:77:ed:8d:ff:14:da:47:0d:1e:
         5d:c4:70:b5
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUZpN5wJxga+dleIT+fFVO0iF/L0owDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg5Q0RBNzExMTZF
MjI4MTJBREY2MEI3NTAwRjkyRDdFNENCQjJCOUI0MB4XDTI2MDgyNjA4NTcxN1oX
DTI2MDgyNzExMjcxN1owMzExMC8GA1UEAxMoMjUyNzY4QjcxNjY2MTRBQUY4Rjkx
NzMyMkE4NzJCNjcyMjUxOTAwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOZG/H9rqqjV6NkKLl0jYDQlKupXvZBW8vgjHHoLOdfzvFmVNhIbq9MQGCw2
oZnj37UIvOoVYHmJJAvJKLqD4eZHo4SidrdvpdW5cHSrJ+a4VAp4w7rUUC5XTjbx
z4eHgegK+loqPS3oQYlhD6qGoZyKRcue8E7/2dhFt8iiEQGUfxfzqSxzxdrGn0mv
HQdo3VYTw5o/aPMBNh1j4lKAn4bZOYurwZWU/vJ9cE58QwnP7HFpZo/cEvBxq1vG
VsBBcVt/0O0SeP37SDjG24R+vtLzLCyuhzYSK9KygTmURF+8L7e4v3yvM3xJhBr3
LvCBQzWcUhQe+j4bp/O0bIIK5WsCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBQlJ2i3
FmYUqvj5FzIqhytnIlGQBTAfBgNVHSMEGDAWgBSc2nERbiKBKt9gt1APktfky7K5
tDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC84LzlDREE3MTExNkUyMjgxMkFERjYwQjc1MDBGOTJEN0U0Q0JC
MkI5QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL25OcHhFVzRpZ1NyZllMZFFENUxYNU11eXViUS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzgvOUNEQTcxMTE2RTIyODEyQURGNjBCNzUwMEY5MkQ3RTRDQkIyQjlCNC5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGjCzX5V76E7J2tqH+uTUQHi2HoNOfkdT7NYnS1sbs2Oo5kYINmjy2xD
sxuwJ/9F0cr5cJkFpOLUPN3mLRGX+NSuWYPs6h44zyLYue5lWapnRfmVGx/MSmYy
p9SeSzULcSVwExWLeGb8M+3VKnzpvL1Gtqk/HviBA7pfU0rgLNyvrJwdk8UMyJNt
BXVQlXIL8MkAX/LS+IJVq6EyM2kdM8fYD6OPM7jahf/MxeM6J/H2BFXazpPKavjD
2uhJLd8AIW5Dt+itV0/9akI7IdOKa8FIGwcHlb6023Ai7aV9Db3FHHB7DS6f1tqN
rZ7LzhfgWaqjmnftjf8U2kcNHl3EcLU=
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:34:23 2026 by rpki-client