Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          6gAP6y53B6Sj0Mh8getMhzkQEg3IVox0/lpQzlXHjH4=
Subject key identifier:   67:58:9C:5C:C1:15:63:BF:73:83:F0:F6:26:AA:25:4E:D9:68:3A:0E
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       27CEF3989C46785A47859A0F40C32265176FF0BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          08F1
Signing time:             Sun 20 Sep 2026 14:46:18 +0000
Manifest this update:     Sun 20 Sep 2026 14:41:18 +0000
Manifest next update:     Mon 21 Sep 2026 18:20:18 +0000
Files and hashes:         1: AS151817.asa (hash: wTrAYN9s7bfwaIQnYOvnVK5KUx58lGBv5nEfO8YXQwE=)
                          2: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=)
                          3: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: ftVCr47qGjiW+fdaQc35YKS+QRB12beocGrDMNcCNLs=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 18:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ce:f3:98:9c:46:78:5a:47:85:9a:0f:40:c3:22:65:17:6f:f0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Sep 20 14:41:18 2026 GMT
            Not After : Sep 21 18:20:18 2026 GMT
        Subject: CN=67589C5CC11563BF7383F0F626AA254ED9683A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:bd:cc:f3:71:1d:cc:00:63:42:27:0e:19:
                    e3:d6:3d:d7:34:08:55:8b:5e:bd:a7:24:33:e9:6e:
                    79:8d:3f:32:1a:b2:71:a0:0f:6a:8a:22:d3:b2:de:
                    9d:58:2e:8a:be:15:ff:ae:5e:5a:a1:21:8c:80:c5:
                    08:6e:89:c2:7f:ab:0f:f3:f5:d1:8a:02:83:b0:c8:
                    e2:79:f7:6c:14:8b:27:b0:9c:ef:b2:05:66:7c:39:
                    d5:72:5c:bc:1a:dd:75:02:2b:2b:1b:8b:47:8f:65:
                    06:47:77:2e:3a:29:eb:f6:27:c0:f2:87:6f:6b:5d:
                    a6:06:80:56:36:40:54:e8:8c:cf:03:d1:b3:e9:ff:
                    0d:0a:78:5f:ce:0d:bd:c7:d2:3c:f8:29:3f:b3:1e:
                    1b:87:76:bf:e1:bb:a6:44:0d:76:db:96:08:58:30:
                    fa:0f:1f:a8:6d:74:07:87:b1:f8:39:9f:e2:e4:c3:
                    54:26:9f:4e:8e:b0:ab:e6:23:fa:42:67:c9:2a:00:
                    ff:22:5f:a8:be:97:e8:63:48:94:3f:73:18:0c:8f:
                    53:0a:7c:a3:2a:63:d0:7a:98:fc:d3:cf:d4:d7:76:
                    3c:44:19:58:34:73:b4:f2:91:55:5f:af:11:8e:94:
                    9e:51:b2:cf:30:d8:31:e5:85:5c:0a:30:36:fd:e3:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:58:9C:5C:C1:15:63:BF:73:83:F0:F6:26:AA:25:4E:D9:68:3A:0E
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:26:5e:37:b8:42:76:8c:b2:a9:68:84:22:1a:3d:80:84:0c:
         cd:a3:e5:42:4b:af:7a:8c:e8:00:4e:06:5e:b2:b7:ee:00:5c:
         eb:59:0a:dd:47:57:49:45:8a:51:bf:5d:87:ec:4e:37:25:f3:
         97:e2:b9:60:dc:c8:b9:53:aa:99:2c:5c:4a:9b:b1:8b:bb:15:
         d9:ac:05:65:28:08:93:4e:58:6d:b1:bf:f2:6e:59:d9:50:bd:
         26:12:18:1a:1d:0e:06:e3:42:99:21:77:f4:c4:a7:c1:dd:75:
         8b:e5:2c:0f:50:9d:4a:59:ed:a8:93:61:e3:a7:e8:77:dc:f1:
         6c:b4:41:a3:5c:81:10:31:82:59:db:ac:78:34:45:f0:7d:94:
         74:c7:b2:cc:66:ab:ef:8c:e3:1e:32:31:07:32:f4:53:61:b1:
         65:ce:3c:dd:8d:22:92:5e:8e:55:b8:ba:82:6e:19:f1:b7:78:
         f1:39:54:57:95:11:6a:1e:14:b1:ba:f9:ca:94:59:28:5f:3c:
         6a:89:d8:6b:d4:c1:f2:45:e1:1e:07:63:df:04:57:50:c3:ee:
         e3:c7:4f:06:7f:7d:1b:52:a1:78:0a:a7:4c:16:52:b1:e1:2a:
         9b:70:e8:6b:61:ed:59:f5:fd:cb:6b:57:3c:4e:d4:90:05:8a:
         e9:a6:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:14:30 2026 by rpki-client