
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
File: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft (raw, json)
Hash identifier: yVZpWs79FakXS7Wxi6vwKppl3IYI9ZrjOQ/8zBfbGSM=
Subject key identifier: 64:E6:CD:06:86:7B:66:E7:E7:EF:05:27:EB:3F:BC:67:91:CA:72:D7
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Certificate issuer: /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial: 2170EB094DBDAEE4CE1D2A7C8D379AA63A0CB0A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
Manifest number: 02EF
Signing time: Wed 20 May 2026 20:48:10 +0000
Manifest this update: Wed 20 May 2026 20:43:10 +0000
Manifest next update: Thu 21 May 2026 21:22:10 +0000
Files and hashes: 1: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl (hash: /V4w7BeeZWr3dM0F2ZDzjYtztrMnaSAGXkFjqBOxZTA=)
2: 323430313a323132303a3a2f33322d3438203d3e203338313336.roa (hash: +fVmnnc1IdeBfCQk+wm7zwGJz5E6xRV72VmJGynl2jQ=)
3: 3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (hash: i8F2RRMTpNkdcMS7cljG+Ymy6U8qF9ju4zRoTmyXvsc=)
4: 323430313a323132303a3a2f33322d3438203d3e20393833.roa (hash: 9Y5ozUdXLpM7mPSDccTM1hUqUj6itpgpUxa0jF/SbrE=)
5: 3130332e3234382e3232382e302f32342d3234203d3e203338313336.roa (hash: rHEyyyKMoSLQziLjU85amnV34V6rygc6mhRXA5+ZrAk=)
6: 3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa (hash: 5IS1Kat0lEIhiC6EmZKdLlAtCZ08dV03AfUvVZPqqhU=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 21:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:70:eb:09:4d:bd:ae:e4:ce:1d:2a:7c:8d:37:9a:a6:3a:0c:b0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Validity
Not Before: May 20 20:43:10 2026 GMT
Not After : May 21 21:22:10 2026 GMT
Subject: CN=64E6CD06867B66E7E7EF0527EB3FBC6791CA72D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:65:79:a1:3f:bb:44:5e:ab:1b:76:3f:d7:
44:80:af:0d:6b:c5:e3:4f:93:50:b6:7b:95:d6:9e:
38:ef:0d:c8:54:a7:de:fb:c5:e3:f1:0e:17:62:a7:
4e:99:6d:b9:5d:ba:26:1d:58:9d:c8:67:f7:9e:84:
3f:35:3e:f2:33:eb:d7:88:f9:4d:f6:aa:5e:55:08:
cc:7d:12:8d:9e:e2:d7:41:3c:aa:d2:18:12:e8:73:
32:6f:c1:09:00:15:1f:6e:b4:4c:60:e0:5a:ae:13:
93:c6:94:7d:3e:15:5f:03:12:c5:ae:a1:e5:ad:4f:
18:e1:c3:20:f8:46:65:1d:3d:f1:d9:f1:c1:b4:71:
7e:5c:14:e1:55:3e:9c:dc:4f:dd:01:46:29:f2:b2:
a6:d2:a4:75:73:14:86:10:a2:39:7b:2c:3a:60:c4:
ab:84:6b:c2:93:36:58:d7:42:94:83:86:89:2d:25:
90:b7:23:67:11:91:64:96:1f:11:42:c8:b6:03:50:
38:6d:02:dc:e5:4e:1f:4a:74:2b:fa:f3:8a:ed:d2:
d6:92:8e:74:30:a8:c7:87:77:92:cb:4c:67:0d:4f:
af:1d:2e:ca:85:f6:4d:6f:a3:ca:2f:06:d2:63:17:
dc:53:87:3a:9f:81:d2:68:00:e1:71:30:80:be:f3:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E6:CD:06:86:7B:66:E7:E7:EF:05:27:EB:3F:BC:67:91:CA:72:D7
X509v3 Authority Key Identifier:
keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:76:55:0b:c3:52:a6:22:a4:55:6e:cd:d1:06:ef:fb:5f:86:
f8:8c:4c:59:be:82:f6:4b:c2:be:c2:b2:0d:49:73:3f:72:59:
ea:97:3f:5f:43:75:90:83:83:90:28:59:d8:1b:f3:ee:13:d5:
bc:95:78:2b:d6:69:6b:28:87:65:11:1b:5b:de:4a:fe:65:d9:
2b:d1:b2:d4:98:8d:9e:cc:30:ad:ff:22:f5:5c:1a:25:b8:5b:
e8:f0:47:1a:d2:f7:b1:4b:5a:27:ff:1b:26:6a:8c:10:c1:24:
38:f3:52:f2:92:1e:bf:2f:28:9e:0d:8b:95:fc:f1:b2:58:23:
a1:d7:e0:1e:7c:20:a2:07:b5:42:fc:35:ad:a4:83:74:3e:2c:
fd:ec:11:99:ed:eb:65:cc:99:6d:35:60:50:d0:5a:a1:7b:df:
26:76:f0:eb:b5:fa:70:f9:da:14:02:f3:21:62:0f:ae:d4:c1:
01:da:3b:04:a6:eb:4a:07:c3:40:ac:26:20:46:d0:55:85:4b:
f8:41:de:45:92:57:83:c2:06:8e:40:06:be:0f:a2:3a:d1:1c:
81:51:49:71:11:e0:2e:95:44:8b:f5:48:75:b8:e1:f8:6f:c3:
30:53:79:13:ff:39:70:bb:d5:97:bc:b9:0c:89:22:2d:5a:a6:
56:71:90:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:32 2026 by rpki-client