
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier: 7bjjCNMHwInCNgM7a7KxR8TgnwD9fF7N/KmX8v2iubw=
Subject key identifier: 34:91:E4:1A:1E:42:2E:4A:33:60:29:F5:8A:48:D2:96:DF:92:54:73
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer: /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial: 36E354C4B49D92807B75AF6A5219C06E7B666875
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number: 012D
Signing time: Tue 04 Nov 2025 22:36:52 +0000
Manifest this update: Tue 04 Nov 2025 22:31:52 +0000
Manifest next update: Thu 06 Nov 2025 01:08:52 +0000
Files and hashes: 1: 323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: cfy0Lb3p1KGIvT1Dv3WTKXomnigIqUZxC3qUSKU1X8Q=)
2: 3130332e3230382e38362e302f32332d3234203d3e203631313338.roa (hash: vTK6sEV7joXKRp0wkFdncV/xbR2SIxNz0+q46rwBcC8=)
3: 3130332e3230382e38342e302f32342d3234203d3e203533383530.roa (hash: FXU2BOZtL90B1obM1s07UWKQTLZt5lRjO+wB7UMEG/U=)
4: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=)
5: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: Wn4cK3uIFqg2qFCLtgqA7Q0SuVINy9Q+28jIiS+REWQ=)
6: 323430343a336438303a3a2f33322d3438203d3e203631313338.roa (hash: vR13YTps2IOLJ32Czol962tgM592qRm1uemaECC1xjU=)
7: 3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (hash: ZcPW7+BE1LN+IBKqmSb+c1D8xmcmnOrZ+AV6UlpS48I=)
8: 3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (hash: xenml2DtldDc1AME+ONCgNO05UC9yi+x8jLwONvYCYc=)
9: 3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa (hash: wj8P1MYtL5SU/gbF1C+95xRc/98DFaAZ1cBCDWKIMNI=)
10: 3130332e3230382e38342e302f32322d3234203d3e203631313338.roa (hash: EFokon3uzovDNn0Unk4MoVGX2uXU8iSPtyRbEFKVwE8=)
11: 323430343a336438303a3a2f33322d3438203d3e20313531383137.roa (hash: Ne68E09zoDQRBk9inQni3vpBYIBAMeRKDNt1f2IWRb0=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 01:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e3:54:c4:b4:9d:92:80:7b:75:af:6a:52:19:c0:6e:7b:66:68:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Validity
Not Before: Nov 4 22:31:52 2025 GMT
Not After : Nov 6 01:08:52 2025 GMT
Subject: CN=3491E41A1E422E4A336029F58A48D296DF925473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:de:2f:a5:36:58:43:d5:ef:c1:89:a4:85:83:
92:a1:c8:c4:e3:53:16:8b:f0:2d:f0:76:8c:13:1d:
3f:73:63:43:42:40:e1:9a:1d:11:89:e9:1a:86:48:
df:41:a8:a1:c9:2e:5c:fd:79:a7:c3:d4:93:b5:f7:
52:bd:b0:ff:85:d8:f9:29:e0:4f:f8:c9:74:65:88:
c1:13:cb:64:31:75:8a:9e:f7:d1:20:51:3d:7c:37:
50:2a:bd:30:5c:33:7f:84:64:ce:2f:aa:97:1b:de:
a1:aa:96:6e:f1:85:00:71:ae:43:b7:2c:1a:f2:0a:
e2:dc:d0:a1:6a:a5:de:63:5a:32:ff:c1:24:25:1f:
ff:b8:28:6b:ac:bf:cc:a9:2a:99:c1:ea:33:af:90:
9e:61:27:40:bc:60:cf:66:9a:3f:c7:0b:8a:64:df:
03:70:4e:24:b8:11:8a:af:4d:6c:65:5b:3b:d1:df:
92:fa:4f:ae:49:ab:66:04:10:29:a7:99:99:5a:2c:
07:6e:01:90:ad:2f:59:90:16:a1:6b:72:c7:b0:22:
c2:13:65:61:0a:fc:21:ae:b8:fa:0a:cb:fc:8d:f1:
74:cb:de:19:50:08:c3:37:ed:20:3b:78:ae:b9:b7:
7c:35:14:68:59:f2:f4:86:f2:0b:aa:71:2e:f8:fc:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:E4:1A:1E:42:2E:4A:33:60:29:F5:8A:48:D2:96:DF:92:54:73
X509v3 Authority Key Identifier:
keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:54:c0:3e:f6:7f:76:12:5d:87:06:de:c0:09:e3:c8:e6:13:
e2:35:ed:a0:b3:d8:ad:ba:3e:9f:43:f9:fc:0d:ef:5a:0e:20:
88:0d:22:ee:e6:9f:e9:5c:51:ac:e9:d1:47:11:ed:17:1f:b2:
9c:4d:77:54:15:7a:81:5c:ff:19:5b:0f:ea:fc:97:f9:d6:83:
3c:14:38:08:7f:47:55:5e:aa:30:dd:a3:4c:b5:72:2a:78:08:
50:15:83:d0:f1:be:69:67:24:bc:78:df:04:4f:2f:82:ac:78:
37:89:c2:54:e9:de:17:c6:43:c5:2f:f9:76:44:40:57:6f:48:
43:fa:8b:62:92:45:13:cf:c2:15:d9:56:3b:79:94:dc:c5:b8:
a0:2a:bf:37:19:c4:28:ea:74:58:99:b6:b7:72:23:8e:2a:d0:
c3:2e:79:65:fa:f7:57:e5:c4:84:da:92:6f:57:b7:96:23:1d:
4c:89:dc:2b:b8:fd:3f:52:25:dd:73:2a:62:04:89:a7:9f:de:
ea:b7:d0:a3:e3:87:1e:98:73:4f:02:00:f6:90:4b:c3:66:90:
5e:28:4a:0a:b8:3c:3f:ef:67:0c:e0:d8:c1:43:57:4e:10:70:
2e:0a:6b:f3:ac:84:85:14:e8:2c:ce:48:a6:11:64:d1:ee:76:
83:d5:52:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:13:10 2025 by rpki-client