
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier: 9lW+pANndFZXsbsO+upC3P0aOFI7YdUHF2S+vewIxW8=
Subject key identifier: 83:A9:05:EA:D9:A3:83:E0:15:19:18:1D:44:EA:01:B5:A6:A2:9C:EB
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer: /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial: 37C520FB538E998F394E8291D4FC41A6997DDF31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number: 08F2
Signing time: Sun 20 Sep 2026 23:17:01 +0000
Manifest this update: Sun 20 Sep 2026 23:12:01 +0000
Manifest next update: Tue 22 Sep 2026 03:05:01 +0000
Files and hashes: 1: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: +prU1wkVAkKFxgJToX0dCLRBv340YMbYYO8//fIh0ks=)
2: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=)
3: AS151817.asa (hash: wTrAYN9s7bfwaIQnYOvnVK5KUx58lGBv5nEfO8YXQwE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c5:20:fb:53:8e:99:8f:39:4e:82:91:d4:fc:41:a6:99:7d:df:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Validity
Not Before: Sep 20 23:12:01 2026 GMT
Not After : Sep 22 03:05:01 2026 GMT
Subject: CN=83A905EAD9A383E01519181D44EA01B5A6A29CEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:26:5f:80:12:9c:f9:c3:de:71:a6:f7:01:b1:
fa:d1:87:b9:b7:fc:a2:19:1f:79:cf:b9:39:2c:b9:
13:82:cb:db:63:7e:a8:0b:65:67:7e:06:cd:f9:d2:
b5:bf:b9:f4:31:26:54:2a:97:01:48:27:ee:f7:e0:
21:30:30:db:b9:33:6a:08:2d:41:75:f0:38:5e:99:
10:e0:41:f4:94:75:9a:3e:a2:03:58:02:dd:63:52:
d6:3a:f4:f7:d1:ca:71:b8:dc:44:9d:db:34:08:4b:
83:fd:28:ff:84:27:ea:4a:ca:63:c9:5b:49:0a:8e:
7c:5c:b5:75:1c:99:cd:5f:35:6a:8e:1d:06:1b:bf:
71:d8:03:8c:75:13:ae:25:ab:89:81:38:f1:4f:e3:
1a:d5:6c:a1:8b:e3:b1:6d:5b:96:53:c3:85:ac:c3:
b8:20:0c:59:b4:db:9b:02:4f:e4:7e:9d:24:d1:c2:
ef:84:a4:40:77:7a:00:c7:0d:56:f4:d0:f9:7c:59:
8c:2f:cf:af:9c:42:1e:90:6c:e0:e9:29:36:e5:84:
ad:c5:b2:49:6d:87:4e:cc:be:c5:cb:f0:26:84:62:
77:45:35:7e:81:48:a3:e3:8a:ff:0f:a1:79:84:85:
ae:d9:f9:1a:14:e4:36:f2:c3:ac:61:17:8e:59:61:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A9:05:EA:D9:A3:83:E0:15:19:18:1D:44:EA:01:B5:A6:A2:9C:EB
X509v3 Authority Key Identifier:
keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7b:71:38:c7:5f:98:ec:f5:8e:55:2c:25:a3:12:9e:a8:b1:
32:e8:08:f0:74:8d:ab:0c:05:47:27:a3:f8:0f:40:92:d9:ec:
08:c4:95:f8:59:2a:76:e5:cd:6a:d5:4f:06:1f:cd:cb:52:15:
4a:df:7d:b6:15:4c:5b:15:a0:7f:bc:4c:c0:26:7d:ad:24:dc:
2c:37:2a:9f:a0:2a:13:56:50:43:0a:7b:1d:d9:99:20:21:08:
56:a0:ce:ae:a6:84:e3:4c:56:6f:58:30:8d:6e:23:45:0a:77:
54:25:99:dd:8f:b6:0a:97:2c:8e:b6:a6:84:fa:aa:98:11:68:
5b:70:5a:50:80:e0:e1:34:d3:34:a4:25:68:37:66:6a:3a:d9:
3c:b1:1d:0f:c6:04:1d:b2:a9:ae:4b:50:45:b4:54:17:74:4c:
e8:97:bd:6f:f2:fb:fd:2c:6c:d6:f4:ef:ce:ee:97:c6:c9:78:
20:86:ae:53:e8:b8:47:df:13:08:39:cc:39:93:d2:31:dc:c4:
12:fd:c1:e2:59:b2:db:0f:cf:42:c3:73:0f:cc:01:e6:18:26:
f6:b6:8c:9a:38:37:28:59:7e:3d:43:4a:9f:22:21:a2:0d:49:
d8:8e:3a:eb:96:ed:2c:bb:4e:46:52:c5:e9:dd:83:7b:8b:59:
e6:e9:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:22:48 2026 by rpki-client