Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
File:                     5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft (raw, json)
Hash identifier:          xAjk7qp4xnO/tP3zxS/8fZp08rFttNb1PaXJtAiTUlA=
Subject key identifier:   8F:00:3A:28:94:44:1D:18:02:4B:86:F6:E8:F9:E0:A1:9D:AC:3F:21
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       09E4F30A7D48E2E929AD0CA8F3DFA6469D43246A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
Manifest number:          0867
Signing time:             Tue 28 Jul 2026 19:29:13 +0000
Manifest this update:     Tue 28 Jul 2026 19:24:13 +0000
Manifest next update:     Wed 29 Jul 2026 21:43:13 +0000
Files and hashes:         1: 3139322e36342e3230332e302f32342d3234203d3e203336323336.roa (hash: UA31leNR+0mj8/zdmcjnYvU1v4hTPJ5jiqPEKStBAY4=)
                          2: 3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa (hash: FP2GcPl1oqzQ+eRkIyENNz9EPh4eTbzn4nru1plQMo8=)
                          3: 3139382e3137392e3232352e302f32342d3234203d3e203336323336.roa (hash: 1pb6iRZh2u+VRf6t/MOcNiNfWkPg0JFXwGKHzeC9LoI=)
                          4: 5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl (hash: by5aDatF5pXrtxBWU5hnCTrJLRGCDVfMCnv3cnYvC0c=)
                          5: 3139322e36342e3230342e302f32342d3234203d3e203336323336.roa (hash: jbMUD8UxhBCZnxEMR5BRGXYMTKz3FSqJjbwVaWABIzA=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e4:f3:0a:7d:48:e2:e9:29:ad:0c:a8:f3:df:a6:46:9d:43:24:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Jul 28 19:24:13 2026 GMT
            Not After : Jul 29 21:43:13 2026 GMT
        Subject: CN=8F003A2894441D18024B86F6E8F9E0A19DAC3F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:8b:a0:b2:1f:5b:e9:bb:f4:c2:d7:aa:62:
                    d0:b9:41:37:e8:ec:fc:4f:bf:9a:8d:1d:43:57:20:
                    ef:ef:95:a9:3e:3a:95:61:18:59:40:57:09:a5:79:
                    30:e4:90:0c:ba:0c:fb:dc:e7:55:25:c4:fe:f0:34:
                    de:e4:f5:78:c9:c3:9b:18:0d:03:20:a3:2d:87:cb:
                    44:6c:db:67:55:c7:05:6e:10:18:f8:3e:36:52:2b:
                    20:00:21:2a:69:25:4c:10:9e:31:bd:31:9a:96:13:
                    d2:26:ba:cc:17:51:39:45:73:f9:13:9d:2f:3f:2d:
                    e7:07:dd:11:3f:04:2d:42:5f:18:a8:78:ce:4a:ab:
                    a7:76:b0:50:d5:1c:4f:da:79:5a:ce:9b:70:4d:27:
                    0a:04:28:4f:8c:d3:66:b5:95:95:39:a2:d6:52:58:
                    ae:38:a1:a1:f9:16:fd:72:f7:32:e9:2c:c4:f3:c9:
                    af:95:43:7c:fd:16:21:4f:c6:ea:44:69:58:11:d3:
                    38:f9:c3:82:65:a2:d7:f5:c1:45:e8:5d:17:58:25:
                    59:6b:1f:16:ec:4f:ce:b3:ec:4b:e6:ff:d8:a8:ee:
                    1d:79:11:35:b9:ce:0a:8d:83:d4:c4:c0:39:c0:19:
                    26:70:a0:6c:a8:8f:64:f5:ed:a5:a1:74:c9:cb:22:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:00:3A:28:94:44:1D:18:02:4B:86:F6:E8:F9:E0:A1:9D:AC:3F:21
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c0:0f:ac:55:67:fd:1d:d6:f1:4d:8c:a1:60:3d:fb:00:19:
         c2:34:8b:1c:5e:8e:3b:21:e7:28:23:b8:b2:a8:d4:13:53:6e:
         b5:4e:40:b5:91:02:9c:fc:70:cb:67:a5:f4:4d:68:4f:f3:eb:
         6f:a5:28:28:65:26:14:d9:57:78:23:e3:d7:03:b3:d5:64:76:
         26:28:01:c9:8f:36:3a:ac:28:49:2e:21:90:b2:a1:a2:0e:88:
         9a:60:f0:9e:2a:dc:bb:f4:80:35:24:42:1b:3e:5e:70:ee:f5:
         36:74:ce:9f:91:d4:db:27:3a:73:02:12:b3:2c:0f:c0:37:1a:
         1d:30:7a:ac:16:16:89:42:4b:e7:47:b7:26:34:61:d1:4c:37:
         f9:a8:e3:d2:38:68:41:5a:ec:3e:60:86:f2:f1:0b:2d:57:a6:
         8a:c3:6c:40:d3:17:2e:99:68:34:b8:df:e0:af:76:81:48:33:
         94:b6:52:e8:a9:8e:3d:d0:9e:56:fa:e6:37:3f:8f:b9:4a:8c:
         19:3a:88:c9:34:0c:02:71:5c:1d:41:61:69:8a:6a:04:77:df:
         e2:16:84:3e:7c:e1:66:40:84:2e:6a:af:32:1b:81:b2:ec:9b:
         69:4e:9c:fa:a0:21:4b:c3:f7:8f:02:be:46:d7:97:bb:1b:ba:
         a3:49:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:00:28 2026 by rpki-client