Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          cU+mBVx8SpcJCIJElPs8YIyb8/8Uq6u8KSAoc081U+A=
Subject key identifier:   43:3D:E0:31:90:54:26:45:3B:6C:14:22:15:41:6C:90:E8:15:BB:6F
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       5E547B8A0979F9D8DE32470F064A9507F00B51A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          07C9
Signing time:             Tue 28 Jul 2026 08:34:54 +0000
Manifest this update:     Tue 28 Jul 2026 08:29:54 +0000
Manifest next update:     Wed 29 Jul 2026 11:36:54 +0000
Files and hashes:         1: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: 4VeW7OGJ1GLglO6Ue526uIv2PCZ23noV4nBycWmb+YU=)
                          2: AS151817.asa (hash: wTrAYN9s7bfwaIQnYOvnVK5KUx58lGBv5nEfO8YXQwE=)
                          3: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 11:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:54:7b:8a:09:79:f9:d8:de:32:47:0f:06:4a:95:07:f0:0b:51:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Jul 28 08:29:54 2026 GMT
            Not After : Jul 29 11:36:54 2026 GMT
        Subject: CN=433DE031905426453B6C142215416C90E815BB6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:b7:66:e4:4c:a6:d9:f4:c6:f5:ad:09:3d:
                    c7:2b:cd:a5:fc:4d:02:bb:42:50:66:2b:75:e9:08:
                    c4:a2:8d:34:b6:35:02:ae:73:16:70:82:7e:46:49:
                    14:56:26:8e:d6:71:5c:05:90:2c:84:c1:f9:fd:29:
                    47:54:e0:16:c8:07:7c:f4:b0:b6:22:e3:62:a2:b5:
                    35:3b:af:ed:96:56:8c:9b:ad:fb:24:62:e1:c8:31:
                    ab:d5:06:c5:ab:77:e3:df:52:e4:56:9b:ab:18:4f:
                    07:a6:3b:d3:b3:c3:58:05:67:de:10:87:31:19:2f:
                    43:d5:8e:c8:fe:39:4a:16:d7:21:a9:97:97:91:29:
                    a1:2b:50:fa:49:61:f2:b9:9d:a6:63:53:82:ff:d6:
                    00:38:26:de:04:19:24:ad:36:05:7e:d1:20:80:23:
                    f8:d9:be:cf:7d:e1:e2:26:60:d5:ba:0a:e0:f6:e3:
                    8a:d2:7c:b2:d6:42:3e:8b:9e:79:74:ea:d9:df:61:
                    32:b2:2c:6f:da:57:f4:4f:08:8a:3b:d4:a6:70:51:
                    9d:b1:2a:f8:59:53:80:0f:11:a2:7e:93:75:30:b2:
                    21:22:a4:69:a6:99:0c:76:b0:53:51:30:8e:3a:d1:
                    f7:bb:60:f1:61:5d:ca:74:d1:8a:b6:91:c3:cd:05:
                    37:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3D:E0:31:90:54:26:45:3B:6C:14:22:15:41:6C:90:E8:15:BB:6F
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:34:7b:6d:69:51:b6:35:ef:25:d8:70:d2:3a:d6:31:3a:9a:
         cd:70:75:2f:fb:1c:8e:3e:79:ea:46:26:d5:fe:61:f9:cd:45:
         96:90:f4:8e:e4:5c:51:b3:95:fd:be:3e:2a:4f:df:bb:a6:a8:
         2e:84:79:76:b2:54:dd:08:ad:4f:2c:60:ab:23:61:bc:59:74:
         e2:13:10:bc:d9:74:51:5d:fe:fd:cd:6a:0d:19:f3:d6:d9:07:
         a1:f6:47:f4:21:02:d0:15:55:47:6a:81:cd:d2:f4:49:e9:ae:
         a2:f5:5e:69:b0:c6:ad:39:af:b2:b8:9c:78:fe:0c:f5:66:be:
         57:60:e8:3a:62:25:47:83:79:fd:87:19:46:94:0d:8e:69:db:
         d6:42:3b:7b:a7:98:b7:7f:78:85:f6:8a:87:f5:32:07:40:13:
         d8:e3:16:6c:2f:94:6b:e9:5c:0a:d9:22:20:83:47:3f:81:bf:
         ac:9f:29:18:c9:81:9e:d4:24:2a:c4:ab:ea:5c:19:1b:20:7c:
         c7:f1:c2:9d:92:25:6a:aa:23:3b:d2:10:47:09:2c:f3:20:6d:
         83:c2:70:85:7c:9b:d3:75:0e:09:a9:99:7a:6a:f0:5d:fa:ee:
         bf:d2:8c:f9:48:b3:d9:b1:23:f2:a0:61:27:e3:62:f3:c5:0c:
         ff:c6:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:47 2026 by rpki-client