Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          oyIyC0I4KwYtc1M0HeN+HS7hUviNc6dvvp1cEw3vn+g=
Subject key identifier:   FF:4B:25:E6:A8:AD:F6:E4:6E:F0:4F:A7:41:88:68:20:01:48:F6:7C
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       41BC940B22C466D86FA3B576FCBBBF14347D225F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          051C
Signing time:             Sun 01 Mar 2026 14:47:33 +0000
Manifest this update:     Sun 01 Mar 2026 14:42:33 +0000
Manifest next update:     Mon 02 Mar 2026 16:47:33 +0000
Files and hashes:         1: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=)
                          2: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=)
                          3: 3130332e3230382e38342e302f32322d3332203d3e20313531383137.roa (hash: JCDln+JMBGtNGpBy8g4kVtJ9W6HwLOH1eY/2mhO+3kc=)
                          4: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: upO6XHVFRH7J8cuIac3+RXX2K63VefVVlqRfxG1TNEw=)
                          5: 3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa (hash: wj8P1MYtL5SU/gbF1C+95xRc/98DFaAZ1cBCDWKIMNI=)
                          6: 3130332e3230382e38342e302f32322d3332203d3e203631313338.roa (hash: FjLx2GQm7zO0Ax8do1MldUsAWWJvi9/fJiwqLS8UXI8=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 16:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bc:94:0b:22:c4:66:d8:6f:a3:b5:76:fc:bb:bf:14:34:7d:22:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Mar  1 14:42:33 2026 GMT
            Not After : Mar  2 16:47:33 2026 GMT
        Subject: CN=FF4B25E6A8ADF6E46EF04FA7418868200148F67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:ce:04:76:ae:da:54:85:ba:ab:da:58:4f:
                    5d:e1:a5:ed:c2:f2:4a:cd:e2:44:51:a2:50:94:a8:
                    07:5f:f8:6c:61:56:ad:56:44:0f:d1:8d:ed:1e:6d:
                    15:a0:1b:3a:d4:a2:bd:5c:39:37:f5:0e:d0:47:c0:
                    12:95:42:2c:a8:41:46:ff:fb:83:3f:d5:ed:d4:e8:
                    84:ec:2e:c0:4c:43:92:55:de:86:11:c0:3c:2a:31:
                    f3:25:12:02:08:9a:97:2e:3d:d8:42:b1:ce:21:8e:
                    66:c5:5e:c3:d3:7e:e1:77:c2:21:c0:33:82:ee:15:
                    8e:64:31:88:9b:a4:15:d6:6a:c5:50:4c:e5:01:bf:
                    a9:72:86:63:bc:13:ea:d9:e7:5e:8f:7f:56:f0:d5:
                    d1:7d:4b:a4:e5:cf:d8:55:51:b7:88:41:b4:5a:74:
                    3b:36:6e:7f:94:bb:26:38:64:05:86:ca:3e:21:81:
                    c6:46:d8:c1:97:f8:d7:78:87:ad:3a:24:5b:c9:53:
                    f8:82:6b:c6:5d:ff:0f:f8:0c:5d:9e:64:c2:a1:95:
                    3b:c3:c9:e3:2e:ba:1e:db:54:84:d5:fe:e6:fa:75:
                    ab:00:aa:de:98:87:82:4b:13:de:83:4c:d9:02:78:
                    6b:6f:8a:01:2d:bc:69:ce:58:6e:4f:7e:a5:04:7f:
                    6e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4B:25:E6:A8:AD:F6:E4:6E:F0:4F:A7:41:88:68:20:01:48:F6:7C
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:94:82:a1:e8:64:93:5c:c3:5c:11:f0:79:03:fe:84:ec:f6:
         ae:5a:a8:a6:3b:57:cc:f8:9c:0b:53:6c:1d:2b:6e:a6:fe:e9:
         5c:1a:a8:75:91:51:0d:9c:dd:c9:92:f4:6c:9c:6f:94:92:91:
         9d:46:c6:e1:bd:e4:33:02:87:84:65:55:7c:7d:6d:ce:ea:66:
         01:4b:d6:b5:aa:0c:e6:da:12:ec:17:7d:61:80:c8:af:f8:82:
         bb:f8:f8:59:93:39:92:a8:76:27:66:97:a9:56:1c:e9:93:7e:
         c2:49:cd:e9:5e:42:79:f9:30:be:f9:be:50:16:ae:93:37:60:
         11:82:d2:8d:34:00:72:73:8c:8d:8c:66:57:25:ef:7f:46:3a:
         d9:83:5b:8b:79:fa:66:6c:56:7c:69:4d:3c:e3:7c:2b:7d:28:
         99:46:a1:ac:89:e9:7f:47:3d:9c:85:66:f2:fc:e8:3f:e8:f5:
         70:26:75:0c:29:03:d5:db:4d:f3:e3:57:5f:61:5b:de:3e:42:
         6e:6d:72:bd:c9:68:a9:61:ae:3d:59:a8:11:f1:93:3d:96:af:
         cc:b3:32:11:dc:5e:4f:26:25:6d:7d:42:e4:93:82:2e:4c:87:
         4a:f2:45:3c:1a:18:7e:64:57:39:f0:ef:ae:43:7b:fc:71:8b:
         90:9d:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:10 2026 by rpki-client