Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          9lW+pANndFZXsbsO+upC3P0aOFI7YdUHF2S+vewIxW8=
Subject key identifier:   83:A9:05:EA:D9:A3:83:E0:15:19:18:1D:44:EA:01:B5:A6:A2:9C:EB
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       37C520FB538E998F394E8291D4FC41A6997DDF31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          08F2
Signing time:             Sun 20 Sep 2026 23:17:01 +0000
Manifest this update:     Sun 20 Sep 2026 23:12:01 +0000
Manifest next update:     Tue 22 Sep 2026 03:05:01 +0000
Files and hashes:         1: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: +prU1wkVAkKFxgJToX0dCLRBv340YMbYYO8//fIh0ks=)
                          2: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=)
                          3: AS151817.asa (hash: wTrAYN9s7bfwaIQnYOvnVK5KUx58lGBv5nEfO8YXQwE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c5:20:fb:53:8e:99:8f:39:4e:82:91:d4:fc:41:a6:99:7d:df:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Sep 20 23:12:01 2026 GMT
            Not After : Sep 22 03:05:01 2026 GMT
        Subject: CN=83A905EAD9A383E01519181D44EA01B5A6A29CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:26:5f:80:12:9c:f9:c3:de:71:a6:f7:01:b1:
                    fa:d1:87:b9:b7:fc:a2:19:1f:79:cf:b9:39:2c:b9:
                    13:82:cb:db:63:7e:a8:0b:65:67:7e:06:cd:f9:d2:
                    b5:bf:b9:f4:31:26:54:2a:97:01:48:27:ee:f7:e0:
                    21:30:30:db:b9:33:6a:08:2d:41:75:f0:38:5e:99:
                    10:e0:41:f4:94:75:9a:3e:a2:03:58:02:dd:63:52:
                    d6:3a:f4:f7:d1:ca:71:b8:dc:44:9d:db:34:08:4b:
                    83:fd:28:ff:84:27:ea:4a:ca:63:c9:5b:49:0a:8e:
                    7c:5c:b5:75:1c:99:cd:5f:35:6a:8e:1d:06:1b:bf:
                    71:d8:03:8c:75:13:ae:25:ab:89:81:38:f1:4f:e3:
                    1a:d5:6c:a1:8b:e3:b1:6d:5b:96:53:c3:85:ac:c3:
                    b8:20:0c:59:b4:db:9b:02:4f:e4:7e:9d:24:d1:c2:
                    ef:84:a4:40:77:7a:00:c7:0d:56:f4:d0:f9:7c:59:
                    8c:2f:cf:af:9c:42:1e:90:6c:e0:e9:29:36:e5:84:
                    ad:c5:b2:49:6d:87:4e:cc:be:c5:cb:f0:26:84:62:
                    77:45:35:7e:81:48:a3:e3:8a:ff:0f:a1:79:84:85:
                    ae:d9:f9:1a:14:e4:36:f2:c3:ac:61:17:8e:59:61:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A9:05:EA:D9:A3:83:E0:15:19:18:1D:44:EA:01:B5:A6:A2:9C:EB
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:7b:71:38:c7:5f:98:ec:f5:8e:55:2c:25:a3:12:9e:a8:b1:
         32:e8:08:f0:74:8d:ab:0c:05:47:27:a3:f8:0f:40:92:d9:ec:
         08:c4:95:f8:59:2a:76:e5:cd:6a:d5:4f:06:1f:cd:cb:52:15:
         4a:df:7d:b6:15:4c:5b:15:a0:7f:bc:4c:c0:26:7d:ad:24:dc:
         2c:37:2a:9f:a0:2a:13:56:50:43:0a:7b:1d:d9:99:20:21:08:
         56:a0:ce:ae:a6:84:e3:4c:56:6f:58:30:8d:6e:23:45:0a:77:
         54:25:99:dd:8f:b6:0a:97:2c:8e:b6:a6:84:fa:aa:98:11:68:
         5b:70:5a:50:80:e0:e1:34:d3:34:a4:25:68:37:66:6a:3a:d9:
         3c:b1:1d:0f:c6:04:1d:b2:a9:ae:4b:50:45:b4:54:17:74:4c:
         e8:97:bd:6f:f2:fb:fd:2c:6c:d6:f4:ef:ce:ee:97:c6:c9:78:
         20:86:ae:53:e8:b8:47:df:13:08:39:cc:39:93:d2:31:dc:c4:
         12:fd:c1:e2:59:b2:db:0f:cf:42:c3:73:0f:cc:01:e6:18:26:
         f6:b6:8c:9a:38:37:28:59:7e:3d:43:4a:9f:22:21:a2:0d:49:
         d8:8e:3a:eb:96:ed:2c:bb:4e:46:52:c5:e9:dd:83:7b:8b:59:
         e6:e9:d7:0e
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUN8Ug+1OOmY85ToKR1PxBppl93zEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg5Q0RBNzExMTZF
MjI4MTJBREY2MEI3NTAwRjkyRDdFNENCQjJCOUI0MB4XDTI2MDkyMDIzMTIwMVoX
DTI2MDkyMjAzMDUwMVowMzExMC8GA1UEAxMoODNBOTA1RUFEOUEzODNFMDE1MTkx
ODFENDRFQTAxQjVBNkEyOUNFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIQmX4ASnPnD3nGm9wGx+tGHubf8ohkfec+5OSy5E4LL22N+qAtlZ34GzfnS
tb+59DEmVCqXAUgn7vfgITAw27kzaggtQXXwOF6ZEOBB9JR1mj6iA1gC3WNS1jr0
99HKcbjcRJ3bNAhLg/0o/4Qn6krKY8lbSQqOfFy1dRyZzV81ao4dBhu/cdgDjHUT
riWriYE48U/jGtVsoYvjsW1bllPDhazDuCAMWbTbmwJP5H6dJNHC74SkQHd6AMcN
VvTQ+XxZjC/Pr5xCHpBs4OkpNuWErcWySW2HTsy+xcvwJoRid0U1foFIo+OK/w+h
eYSFrtn5GhTkNvLDrGEXjllhOusCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBSDqQXq
2aOD4BUZGB1E6gG1pqKc6zAfBgNVHSMEGDAWgBSc2nERbiKBKt9gt1APktfky7K5
tDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC84LzlDREE3MTExNkUyMjgxMkFERjYwQjc1MDBGOTJEN0U0Q0JC
MkI5QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL25OcHhFVzRpZ1NyZllMZFFENUxYNU11eXViUS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzgvOUNEQTcxMTE2RTIyODEyQURGNjBCNzUwMEY5MkQ3RTRDQkIyQjlCNC5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEN7cTjHX5js9Y5VLCWjEp6osTLoCPB0jasMBUcno/gPQJLZ7AjElfhZ
KnblzWrVTwYfzctSFUrffbYVTFsVoH+8TMAmfa0k3Cw3Kp+gKhNWUEMKex3ZmSAh
CFagzq6mhONMVm9YMI1uI0UKd1Qlmd2PtgqXLI62poT6qpgRaFtwWlCA4OE00zSk
JWg3Zmo62TyxHQ/GBB2yqa5LUEW0VBd0TOiXvW/y+/0sbNb0787ul8bJeCCGrlPo
uEffEwg5zDmT0jHcxBL9weJZstsPz0LDcw/MAeYYJva2jJo4NyhZfj1DSp8iIaIN
SdiOOuuW7Sy7TkZSxendg3uLWebp1w4=
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:22:48 2026 by rpki-client