Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
File:                     5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft (raw, json)
Hash identifier:          /5rQiapWnpI1+EGB2/r5cyxz6jriwLAeZNYcfdHAWXI=
Subject key identifier:   FF:BD:1E:E3:91:68:31:D9:9B:12:C6:DF:54:E9:36:E8:EC:EC:4F:12
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       25141389A7F25885F801BFCF2ABD4F96ABABFEFD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
Manifest number:          08B6
Signing time:             Mon 21 Sep 2026 10:47:35 +0000
Manifest this update:     Mon 21 Sep 2026 10:42:35 +0000
Manifest next update:     Tue 22 Sep 2026 11:53:35 +0000
Files and hashes:         1: 3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa (hash: FP2GcPl1oqzQ+eRkIyENNz9EPh4eTbzn4nru1plQMo8=)
                          2: 5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl (hash: UoSOnI9Cdquo9Fpo1lPYUz9DDLYMrsGy98+7kxpNUVg=)
                          3: 3139382e3137392e3232352e302f32342d3234203d3e203336323336.roa (hash: 1pb6iRZh2u+VRf6t/MOcNiNfWkPg0JFXwGKHzeC9LoI=)
                          4: 3139322e36342e3230342e302f32342d3234203d3e203336323336.roa (hash: jbMUD8UxhBCZnxEMR5BRGXYMTKz3FSqJjbwVaWABIzA=)
                          5: 3139322e36342e3230332e302f32342d3234203d3e203336323336.roa (hash: UA31leNR+0mj8/zdmcjnYvU1v4hTPJ5jiqPEKStBAY4=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 11:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:14:13:89:a7:f2:58:85:f8:01:bf:cf:2a:bd:4f:96:ab:ab:fe:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Sep 21 10:42:35 2026 GMT
            Not After : Sep 22 11:53:35 2026 GMT
        Subject: CN=FFBD1EE3916831D99B12C6DF54E936E8ECEC4F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:32:c0:38:83:f1:ec:50:b7:64:a2:ed:fb:
                    d1:ff:06:05:f6:48:a7:99:e0:dd:45:61:f5:b0:d3:
                    3f:d6:5c:c5:30:5c:3e:4a:39:f0:0b:a3:9f:33:79:
                    fd:82:7f:47:0b:7b:80:37:64:c7:2a:1b:63:4e:86:
                    44:8f:04:a2:c1:41:d7:c5:54:ab:bc:03:69:21:45:
                    08:1a:f8:60:7c:d0:8e:8b:6b:e3:3c:1d:94:1b:c5:
                    22:1f:5b:1e:f5:ed:54:25:c1:af:33:6e:1f:0f:80:
                    4c:89:65:a6:ba:e3:dd:60:b7:40:22:c5:8b:05:54:
                    a6:45:be:b3:50:3c:e1:08:2a:52:34:a5:6a:51:90:
                    92:50:71:f0:f7:b4:2d:f7:06:37:ef:df:f0:68:23:
                    61:c7:a7:96:ba:47:21:0f:f9:4b:47:0d:2f:79:7a:
                    ec:40:73:4a:22:33:a2:1e:a5:a1:5d:f2:44:a6:72:
                    c8:a0:4e:85:f7:32:dd:85:b5:65:5e:5a:b2:06:32:
                    67:cf:26:ad:27:a3:5a:5c:fa:0b:d6:63:f6:2c:8e:
                    2e:13:9f:27:05:25:5d:71:f9:fa:0a:21:a5:e3:d4:
                    12:f8:5a:68:56:b1:c3:b3:ad:46:a4:ca:df:4a:33:
                    0b:b3:71:2f:35:d1:e2:a8:f2:68:c5:90:09:71:75:
                    e4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BD:1E:E3:91:68:31:D9:9B:12:C6:DF:54:E9:36:E8:EC:EC:4F:12
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e1:8d:19:57:4b:a3:a5:ab:2a:f9:39:ea:a8:0a:00:2a:bb:
         b1:8a:8f:6c:ff:79:6d:8d:8f:5d:ca:40:90:ef:57:5e:b6:97:
         26:7b:78:d6:29:be:a0:0b:75:05:14:ce:8e:5b:82:94:bc:9b:
         99:2d:b9:ee:73:87:cb:01:62:54:1c:10:72:cd:9c:97:b2:54:
         67:13:7e:6a:6b:d5:0f:e9:c8:15:e6:5f:4d:1c:7f:fc:aa:f9:
         61:28:b8:3b:cf:23:f5:1c:b7:01:cd:fe:5d:c2:0d:41:5b:cd:
         5c:d0:ec:a0:75:33:cb:43:0b:e9:8e:33:2b:aa:15:27:a2:72:
         66:2a:26:d2:69:42:0d:a4:2d:98:80:15:0d:da:8e:43:04:ad:
         c6:9b:54:c4:e5:7a:b6:30:2c:55:2b:c9:e2:43:e4:30:7e:f9:
         ae:c1:5b:b4:b5:d8:0b:58:52:02:16:47:6f:b4:68:02:65:98:
         79:75:34:e5:e4:8d:4f:d0:6b:a7:d0:f0:8d:6e:ff:7b:37:cc:
         56:5d:46:3b:99:db:5e:88:b1:3f:33:36:7f:a4:01:3b:88:0b:
         d2:6a:1c:86:1d:7f:24:bf:72:c9:fb:06:2d:41:de:60:c7:b9:
         17:94:29:08:03:e3:b0:5e:71:e7:7c:1c:04:57:17:41:7e:e4:
         8d:d2:ed:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----