
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
File: 6ED84CFF4976B923E315096476DD6623E49C8B79.mft (raw, json)
Hash identifier: vXDdRELPwmqpupD6kc4y5jR+VNlR/+NaF+ySx8EWtw8=
Subject key identifier: AA:A0:A2:D7:2B:D3:77:25:50:B7:65:E0:BB:13:43:C0:85:2D:82:E0
Authority key identifier: 6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
Certificate issuer: /CN=A91A9C1E0000/serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Certificate serial: 3701CB3650577D781102DFAB8C19ADEFEFF129E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
Manifest number: 012C
Signing time: Tue 04 Nov 2025 22:36:52 +0000
Manifest this update: Tue 04 Nov 2025 22:31:52 +0000
Manifest next update: Thu 06 Nov 2025 02:30:52 +0000
Files and hashes: 1: 3130332e3234342e3232362e302f32342d3234203d3e20323033333633.roa (hash: gKJ6KRXwSkLEScK/Pnq8ckZ0+aVLIbaF6Yt51de+geY=)
2: AS151642.asa (hash: J9zBC4ZQBQ+VcoWk+4SKjXBib2AzPbqeLZhs6syiHfY=)
3: 3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa (hash: 2AjQ6oK0mFOk0c9CpaTvICyD2JdGT4R5dFs1mBr73rQ=)
4: 6ED84CFF4976B923E315096476DD6623E49C8B79.crl (hash: DhDDyEoO2yv8+YF8UTZ44OBs1g1U4wF1IqKSRTnrVjw=)
5: 323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa (hash: 5zyjZiHzfKFVIj8CROIKBwN4OHeQ+uy/14mqZgTNhgE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 02:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:01:cb:36:50:57:7d:78:11:02:df:ab:8c:19:ad:ef:ef:f1:29:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C1E0000, serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Validity
Not Before: Nov 4 22:31:52 2025 GMT
Not After : Nov 6 02:30:52 2025 GMT
Subject: CN=AAA0A2D72BD3772550B765E0BB1343C0852D82E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:a9:96:de:33:41:c7:65:09:5a:d9:80:39:
0e:7a:03:85:00:0e:c1:6b:bf:95:74:fe:dc:84:c7:
a6:8c:fe:f4:23:e5:59:7d:6c:17:5b:97:a2:3b:1e:
9e:80:bd:6a:b7:0f:12:0a:b3:cb:aa:a0:2f:84:3f:
05:71:fa:74:f5:22:e6:90:98:fd:a0:bf:bd:b2:0b:
4b:c5:09:9b:a3:f5:92:92:5b:0f:32:3c:3b:25:a5:
cd:71:37:7f:19:c6:9e:2e:93:68:ce:c1:20:9c:05:
da:93:9a:8e:1e:95:bf:f8:80:6c:f3:9c:0c:5b:ae:
33:e3:8f:f0:63:88:54:75:ba:58:cc:7c:4c:f9:25:
ba:b5:be:43:fa:11:3b:a6:c7:4f:82:7d:70:d6:74:
9f:02:77:28:df:bd:f5:65:30:45:b8:a6:5f:59:61:
ab:16:1c:0d:cc:35:3a:11:75:45:b2:6f:f2:c4:c7:
15:86:b1:73:e6:f0:4b:58:54:8f:c5:d7:d6:a4:50:
01:1d:2f:01:63:b5:6b:12:d7:a3:db:89:89:74:90:
e8:e3:ad:3a:a6:12:34:2b:25:ab:b1:6c:b9:a6:18:
68:20:71:e0:04:e2:a4:a2:9f:ee:5a:9f:23:75:6f:
de:86:c2:ad:43:eb:ee:56:eb:90:f7:b5:98:12:ab:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A0:A2:D7:2B:D3:77:25:50:B7:65:E0:BB:13:43:C0:85:2D:82:E0
X509v3 Authority Key Identifier:
keyid:6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:30:e5:26:6c:45:98:c1:0e:0f:d5:70:07:00:3e:47:b1:4b:
86:1d:0d:f8:ef:4b:14:3a:5a:39:ca:cf:df:05:e2:d0:fa:e0:
78:09:db:f2:37:74:58:6a:d8:51:05:25:6b:34:24:c0:e2:f0:
e2:9a:08:a1:89:73:86:03:ac:35:c9:e2:a8:ca:d3:46:85:71:
71:93:16:98:95:c4:46:09:05:75:8d:69:59:de:53:bd:01:a4:
ae:72:3c:9a:ab:49:d6:36:ca:0e:26:c9:1f:35:db:99:2a:30:
c2:b2:b5:a5:ce:87:1b:c9:da:73:e3:37:ad:48:4e:37:f0:3d:
0e:2b:f7:42:90:60:3b:a1:53:35:02:da:c4:40:72:e8:53:c5:
92:de:03:50:ad:7a:b8:ad:e8:b2:bb:41:63:32:ee:13:04:1c:
b5:2b:b9:b8:f7:45:53:f2:92:91:69:12:95:b0:34:fc:0d:21:
e8:de:44:6d:d5:e9:5a:07:4d:e7:fd:9b:13:d9:ee:e7:12:a1:
81:c3:d0:e6:fb:b7:f1:5f:80:ce:31:c8:8c:17:2c:d4:0c:4b:
cc:28:7b:2b:f5:37:0b:55:52:f8:5c:88:9b:8d:4b:b9:18:86:
37:03:09:01:00:d6:c1:1e:35:89:e3:56:11:56:ba:3c:28:23:
b6:88:f6:2c
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUNwHLNlBXfXgRAt+rjBmt7+/xKeEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTlDMUUwMDAwMTEwLwYDVQQFEyg2RUQ4NENGRjQ5
NzZCOTIzRTMxNTA5NjQ3NkRENjYyM0U0OUM4Qjc5MB4XDTI1MTEwNDIyMzE1MloX
DTI1MTEwNjAyMzA1MlowMzExMC8GA1UEAxMoQUFBMEEyRDcyQkQzNzcyNTUwQjc2
NUUwQkIxMzQzQzA4NTJEODJFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALqmqZbeM0HHZQla2YA5DnoDhQAOwWu/lXT+3ITHpoz+9CPlWX1sF1uXojse
noC9arcPEgqzy6qgL4Q/BXH6dPUi5pCY/aC/vbILS8UJm6P1kpJbDzI8OyWlzXE3
fxnGni6TaM7BIJwF2pOajh6Vv/iAbPOcDFuuM+OP8GOIVHW6WMx8TPklurW+Q/oR
O6bHT4J9cNZ0nwJ3KN+99WUwRbimX1lhqxYcDcw1OhF1RbJv8sTHFYaxc+bwS1hU
j8XX1qRQAR0vAWO1axLXo9uJiXSQ6OOtOqYSNCslq7FsuaYYaCBx4ATipKKf7lqf
I3Vv3obCrUPr7lbrkPe1mBKrKUMCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBSqoKLX
K9N3JVC3ZeC7E0PAhS2C4DAfBgNVHSMEGDAWgBRu2Ez/SXa5I+MVCWR23WYj5JyL
eTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC85LzZFRDg0Q0ZGNDk3NkI5MjNFMzE1MDk2NDc2REQ2NjIzRTQ5
QzhCNzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2J0aE1fMGwydVNQakZRbGtkdDFtSS1TY2kzay5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzkvNkVEODRDRkY0OTc2QjkyM0UzMTUwOTY0NzZERDY2MjNFNDlDOEI3OS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBACUw5SZsRZjBDg/VcAcAPkexS4YdDfjvSxQ6WjnKz98F4tD64HgJ2/I3
dFhq2FEFJWs0JMDi8OKaCKGJc4YDrDXJ4qjK00aFcXGTFpiVxEYJBXWNaVneU70B
pK5yPJqrSdY2yg4myR8125kqMMKytaXOhxvJ2nPjN61ITjfwPQ4r90KQYDuhUzUC
2sRAcuhTxZLeA1Cterit6LK7QWMy7hMEHLUrubj3RVPykpFpEpWwNPwNIejeRG3V
6VoHTef9mxPZ7ucSoYHD0Ob7t/FfgM4xyIwXLNQMS8woeyv1NwtVUvhciJuNS7kY
hjcDCQEA1sEeNYnjVhFWujwoI7aI9iw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:05:11 2025 by rpki-client