
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
File: 5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft (raw, json)
Hash identifier: wSND9VpuPbvMQvLqVLW8+99zPVoC7T4AgpjwMiToWOM=
Subject key identifier: 59:64:3F:58:46:C8:E3:AD:D3:46:E5:67:8F:73:48:B2:F9:41:AA:84
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Certificate issuer: /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial: 354CE8FE7C8556F7E9693B7102B8DD2B116718C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
Manifest number: 07A5
Signing time: Sun 19 Apr 2026 00:03:59 +0000
Manifest this update: Sat 18 Apr 2026 23:58:59 +0000
Manifest next update: Mon 20 Apr 2026 00:06:59 +0000
Files and hashes: 1: 3139322e36342e3230332e302f32342d3234203d3e203336323336.roa (hash: iSVzEtaduQywCQdcSyMNmFI0Id4YYz6qHsCZbxVt1kQ=)
2: 3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa (hash: M+kaKR8R1hpLE6n7CVRBmAYxGjsp1XCYpKk2aIr5Q3Q=)
3: 3139322e36342e3230342e302f32342d3234203d3e203336323336.roa (hash: cjPRK9qLuIrk2Qcz5MIry+JIAYYQot59N/+6dxX+1TU=)
4: 5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl (hash: OCoshZfHn+9zZPqopNvdrcKUXqqeSweofoIpc5NiahY=)
5: 3139382e3137392e3232352e302f32342d3234203d3e203336323336.roa (hash: Ga42+36DBXvhFJL9fNOGskBUD02TlB8rrrReqjfGPPc=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 00:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4c:e8:fe:7c:85:56:f7:e9:69:3b:71:02:b8:dd:2b:11:67:18:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Validity
Not Before: Apr 18 23:58:59 2026 GMT
Not After : Apr 20 00:06:59 2026 GMT
Subject: CN=59643F5846C8E3ADD346E5678F7348B2F941AA84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:00:5c:d2:df:c6:22:d4:44:c5:10:6d:04:
70:1c:96:5a:44:fc:2a:5c:95:b0:27:f7:45:11:fe:
ad:47:1d:0f:45:54:1d:01:41:cc:38:fe:66:4b:57:
74:06:9f:6e:b8:9a:26:97:22:76:b5:d2:36:5f:eb:
f2:c0:36:b3:46:19:c1:48:88:ba:e6:ba:53:61:54:
27:4b:70:b4:26:7b:ec:26:9c:30:ef:6d:38:4a:18:
49:40:4d:5f:f9:4b:6a:4c:62:1c:59:47:69:a4:ee:
65:22:72:c3:c3:03:88:97:b5:55:d9:a6:af:fc:59:
a3:e5:cb:b0:a5:da:98:16:f3:41:70:6b:e2:b9:ac:
c8:b2:39:d8:fe:c7:24:30:7b:3a:71:90:5e:cd:a6:
ab:b0:f0:8a:3b:20:e6:6e:e3:97:cd:2c:03:ed:f6:
d2:7a:eb:1f:cd:af:5a:ca:bc:ab:6e:1f:c5:06:d0:
d8:e4:5e:70:bd:d7:c1:6d:c0:d4:81:7b:10:49:ff:
34:2f:3e:39:e2:07:f4:df:e4:a4:78:12:09:db:21:
08:0b:c2:d7:ef:dc:e9:ac:25:d8:3d:aa:0f:1a:52:
62:f4:19:2f:df:1b:a5:36:3e:5c:94:b5:9c:e1:a4:
5d:8c:61:96:c9:3f:dd:cb:a1:4e:8a:3b:eb:32:70:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:64:3F:58:46:C8:E3:AD:D3:46:E5:67:8F:73:48:B2:F9:41:AA:84
X509v3 Authority Key Identifier:
keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e1:c7:9f:e0:63:71:a3:7b:e8:ee:32:9c:28:4a:a2:9d:22:
de:19:62:7d:f9:12:d9:61:41:b6:48:67:fe:4b:76:52:28:db:
15:ca:5c:61:aa:f5:fb:32:fb:77:58:36:8e:e7:c7:44:dc:3f:
cd:88:97:1a:87:e8:b8:f9:9e:d8:51:46:e0:70:6a:d2:1e:57:
f3:42:18:79:5f:2e:f0:e5:63:17:73:04:88:e1:73:ff:9a:bc:
15:a5:8f:d8:7c:eb:90:e6:f5:48:94:25:f5:89:d8:ac:b7:59:
4d:03:29:93:ff:4b:43:d8:3b:50:af:07:4e:94:5c:91:2f:0d:
13:7b:11:90:7e:fd:60:0b:bc:3c:a4:36:49:71:3b:17:de:d1:
40:73:4e:eb:16:ac:a6:a8:1f:82:23:94:00:2a:d0:5d:a9:19:
95:9a:bc:cb:87:4e:ea:da:42:10:82:ae:c8:5f:90:82:7c:01:
92:67:1c:c4:05:55:5c:69:95:1f:04:56:f0:30:6a:ec:52:1d:
83:01:52:46:02:03:c4:0a:7b:cd:8d:6e:01:fc:1a:b5:06:77:
0a:d4:be:c5:d5:e2:cc:49:13:89:66:bf:6f:9f:3d:ff:e3:cd:
8e:65:c0:41:93:8e:3e:f0:54:fd:5c:fd:f8:ee:c7:96:f8:f6:
19:9c:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:28:33 2026 by rpki-client