$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft File: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft (raw, json) Hash identifier: ZDs3/Rkv62mMvr0gxNIoH9MHdWMNk5OptG0hBjTjUWI= Subject key identifier: 03:22:EF:6C:0B:6B:BE:65:E0:E5:53:CE:A5:48:A4:99:A7:D3:AB:F9 Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F Certificate issuer: /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F Certificate serial: 4D254BDA79AB8A3F32372EFBEBE75771E76155AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft Manifest number: 01D8 Signing time: Tue 21 Oct 2025 16:47:39 +0000 Manifest this update: Tue 21 Oct 2025 16:42:39 +0000 Manifest next update: Wed 22 Oct 2025 20:26:39 +0000 Files and hashes: 1: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl (hash: dg4SHC/lTSxp9Ozl/K2GkHAbb9e9UurbNL3cfS45wC8=) 2: 3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (hash: i8F2RRMTpNkdcMS7cljG+Ymy6U8qF9ju4zRoTmyXvsc=) 3: 323430313a323132303a3a2f33322d3438203d3e203338313336.roa (hash: +fVmnnc1IdeBfCQk+wm7zwGJz5E6xRV72VmJGynl2jQ=) 4: 3130332e3234382e3232382e302f32342d3234203d3e203338313336.roa (hash: rHEyyyKMoSLQziLjU85amnV34V6rygc6mhRXA5+ZrAk=) 5: 3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa (hash: 5IS1Kat0lEIhiC6EmZKdLlAtCZ08dV03AfUvVZPqqhU=) 6: 323430313a323132303a3a2f33322d3438203d3e20393833.roa (hash: 9Y5ozUdXLpM7mPSDccTM1hUqUj6itpgpUxa0jF/SbrE=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:25:4b:da:79:ab:8a:3f:32:37:2e:fb:eb:e7:57:71:e7:61:55:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F Validity Not Before: Oct 21 16:42:39 2025 GMT Not After : Oct 22 20:26:39 2025 GMT Subject: CN=0322EF6C0B6BBE65E0E553CEA548A499A7D3ABF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:90:67:27:a8:24:84:06:54:f6:0d:67:fd: dc:17:72:5a:8d:ef:b5:f8:0f:99:21:83:8f:0f:15: d4:b1:37:9e:df:dc:99:c2:5c:8e:dc:b0:df:fb:07: c9:0e:b5:6a:03:f7:07:40:46:b9:2d:b9:9e:f7:c9: f7:bd:50:35:a1:19:3e:f6:cf:26:d0:8a:a7:7b:f0: f3:df:35:5d:0d:6d:1e:54:28:79:ec:b4:57:e0:58: 65:14:00:a4:9f:86:4f:01:f8:51:f3:b6:70:e3:45: 5e:70:2e:7d:b4:0d:de:c5:48:95:64:f0:44:82:1c: e5:2e:56:79:40:06:3e:4e:76:02:6f:b2:91:af:19: f2:91:d4:db:4e:f9:a8:fe:93:bd:e4:79:39:db:cf: 2d:51:55:3c:5c:1d:f4:25:78:af:7d:e9:03:c9:87: b1:34:42:e6:14:a6:08:7b:b7:8c:2f:17:d8:e0:d4: e6:e8:cd:09:21:5b:8e:f0:b0:8e:e3:8f:b6:7d:f8: 1f:06:f0:91:31:ed:db:33:bb:27:ef:ed:c3:a7:ab: c0:a1:87:d1:06:e4:87:ab:9d:ee:a1:3e:04:ae:49: f6:00:15:30:75:0b:3b:4d:5e:81:f9:2d:94:fc:93: 8f:30:50:b7:27:58:5e:2d:fc:6d:01:18:de:3a:5a: 1c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:22:EF:6C:0B:6B:BE:65:E0:E5:53:CE:A5:48:A4:99:A7:D3:AB:F9 X509v3 Authority Key Identifier: keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:4c:32:16:73:31:bd:19:0a:5a:9f:96:3e:2f:cc:93:11:5a: b8:8b:f4:11:90:5a:ae:e1:c4:50:9f:73:96:db:7c:90:7e:94: 90:5c:ff:c8:66:11:00:ee:4d:0e:53:70:3a:e8:c9:6c:2a:22: 50:92:f1:dc:61:a7:a2:78:62:f1:51:f3:a9:18:2b:34:34:96: 98:ad:1c:af:27:05:94:1e:01:21:13:f6:2e:4b:4c:d6:da:83: 7c:c7:62:ad:84:6f:f5:0e:88:e3:db:8c:87:43:56:0a:84:76: 11:6b:1a:8e:b6:b6:11:55:fb:6d:7e:af:15:fa:32:db:34:4c: 0d:00:a9:01:fd:11:44:a5:89:b8:b6:30:ef:b5:72:7b:f6:4e: 66:f7:d1:7a:10:bb:d1:b6:07:5f:e1:57:1d:17:9e:42:0c:37: 50:d8:16:59:2b:9f:d1:bd:82:8c:01:ae:c7:d5:61:aa:7e:79: 03:f1:07:98:9b:91:a2:98:8d:1c:eb:d6:77:86:24:ff:07:35: d9:a8:66:e8:b2:f8:f4:89:95:2d:0e:6f:eb:23:04:43:d8:6f: 52:20:14:e4:f3:fb:04:32:36:67:85:1f:cd:6b:06:1b:9e:fc: 67:7d:fb:41:20:28:9c:f2:6c:01:2e:db:9f:f7:3f:47:23:fc: e3:32:e5:2d -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUTSVL2nmrij8yNy776+dXcedhVawwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMTMwMDAwMDAwMTEwLwYDVQQFEyg5MTE4RTVBNkJF NUU4MkFFNTBBOUJGQTA3MTk3NUY2NkVDNTkxNzBGMB4XDTI1MTAyMTE2NDIzOVoX DTI1MTAyMjIwMjYzOVowMzExMC8GA1UEAxMoMDMyMkVGNkMwQjZCQkU2NUUwRTU1 M0NFQTU0OEE0OTlBN0QzQUJGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFxkGcnqCSEBlT2DWf93BdyWo3vtfgPmSGDjw8V1LE3nt/cmcJcjtyw3/sH yQ61agP3B0BGuS25nvfJ971QNaEZPvbPJtCKp3vw8981XQ1tHlQoeey0V+BYZRQA pJ+GTwH4UfO2cONFXnAufbQN3sVIlWTwRIIc5S5WeUAGPk52Am+yka8Z8pHU2075 qP6TveR5OdvPLVFVPFwd9CV4r33pA8mHsTRC5hSmCHu3jC8X2ODU5ujNCSFbjvCw juOPtn34HwbwkTHt2zO7J+/tw6erwKGH0Qbkh6ud7qE+BK5J9gAVMHULO01egfkt lPyTjzBQtydYXi38bQEY3jpaHMsCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBQDIu9s C2u+ZeDlU86lSKSZp9Or+TAfBgNVHSMEGDAWgBSRGOWmvl6CrlCpv6Bxl19m7FkX DzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNGUwYWE2MDE5MTU5 ZjJmYjI3MGNhOC8zLzkxMThFNUE2QkU1RTgyQUU1MEE5QkZBMDcxOTc1RjY2RUM1 OTE3MEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2tSamxwcjVlZ3E1UXFiLWdjWmRmWnV4WkZ3OC5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTE0ZTBhYTYwMTkxNTlmMmZiMjcwY2E4 LzMvOTExOEU1QTZCRTVFODJBRTUwQTlCRkEwNzE5NzVGNjZFQzU5MTcwRi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGhMMhZzMb0ZClqflj4vzJMRWriL9BGQWq7hxFCfc5bbfJB+lJBc/8hm EQDuTQ5TcDroyWwqIlCS8dxhp6J4YvFR86kYKzQ0lpitHK8nBZQeASET9i5LTNba g3zHYq2Eb/UOiOPbjIdDVgqEdhFrGo62thFV+21+rxX6Mts0TA0AqQH9EUSlibi2 MO+1cnv2Tmb30XoQu9G2B1/hVx0XnkIMN1DYFlkrn9G9gowBrsfVYap+eQPxB5ib kaKYjRzr1neGJP8HNdmoZuiy+PSJlS0Ob+sjBEPYb1IgFOTz+wQyNmeFH81rBhue /Gd9+0EgKJzybAEu25/3P0cj/OMy5S0= -----END CERTIFICATE-----Generated at Wed Oct 22 10:57:50 2025 by rpki-client