$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft File: ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft (raw, json) Hash identifier: STFGfb7GCelhLyr1LOgTNrpo3txaprNRyJks5lpnPzk= Subject key identifier: A1:C6:63:AB:BC:5A:B2:44:7A:0F:FA:68:FA:00:68:07:FB:31:9F:76 Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF Certificate issuer: /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF Certificate serial: 39CE74EF122761DCA97BEBFDF873DB152179C7F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft Manifest number: 0292 Signing time: Sun 01 Mar 2026 16:09:33 +0000 Manifest this update: Sun 01 Mar 2026 16:04:33 +0000 Manifest next update: Mon 02 Mar 2026 16:21:33 +0000 Files and hashes: 1: 323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa (hash: TA0zzDtznfaVunUDTZhEgOpcmXojb9Y1CH8zcOAwKlk=) 2: 3130332e3137322e34302e302f32332d3234203d3e20393833.roa (hash: l1w0E6wpDTD0OHKad8HWPNEfYx3DzUJOujE3Goaa6gA=) 3: 3130332e3137322e34302e302f32332d3234203d3e203338313336.roa (hash: QD/alelphOxkxHKUCWX3HtYczkHB7jGrfqC0WsHbBHY=) 4: 323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa (hash: KD9zvlK+/6ZkExjWr88WbUAlBYvbDy3RsOKuw5U65zg=) 5: 323430373a636463303a656666303a3a2f34382d3438203d3e20313532373034.roa (hash: eZuSQzqTU8VaOvzd0KHJBHquZCW7OqwP4n8vCwstUQw=) 6: 323430373a636463303a3a2f33322d3438203d3e20393833.roa (hash: FcS3uH0lPouCumRLFvl7n0JB1Vv1j5a/3yIEZK9NRJA=) 7: ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl (hash: Bv/2DiiEgx/+H3Rw3EOcaPcc7UwM9GKIMq5gxam8ZSw=) 8: 323430373a636463303a3a2f33322d3438203d3e203338313336.roa (hash: E/iWUzr8mY4I9/EKi0Ny4oAFvSVSVhEt9Jt/vhQC6Vc=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 16:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ce:74:ef:12:27:61:dc:a9:7b:eb:fd:f8:73:db:15:21:79:c7:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C75D0000, serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF Validity Not Before: Mar 1 16:04:33 2026 GMT Not After : Mar 2 16:21:33 2026 GMT Subject: CN=A1C663ABBC5AB2447A0FFA68FA006807FB319F76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:98:4b:e5:e0:d7:66:5e:1d:c3:16:28:45:bf: c9:12:d7:07:e5:ff:82:ed:80:6c:56:f5:d5:ee:f8: ba:f9:27:32:99:0c:26:6b:55:3d:3f:9e:45:c9:f0: 68:16:3c:49:41:12:5e:1b:19:52:c5:79:2d:eb:d2: 72:bd:d4:60:b3:e3:ca:8e:4a:f9:68:4c:04:5e:de: 8d:03:4c:bf:0c:a5:79:5a:45:ae:90:48:57:64:54: af:ff:aa:7c:29:22:de:5b:08:ff:db:2e:b1:da:4b: bf:24:36:cf:11:cc:c3:e8:17:20:12:6f:cb:62:30: 65:b3:1f:8d:b5:0e:10:1f:4d:cd:bc:5d:2d:84:87: d1:bf:c2:83:5c:3b:da:5f:82:cc:ec:b5:94:ef:7d: 77:b9:eb:57:b9:e5:e0:85:28:39:91:0c:29:3c:93: 08:0f:61:c4:52:62:1e:35:7e:e9:9e:15:fc:fa:36: fb:dc:e9:6b:69:af:16:f2:98:0f:99:3e:98:d8:90: dc:86:9e:42:4c:a9:b1:a8:b2:be:98:c2:eb:82:b7: d2:44:5e:9c:89:08:89:ef:e9:72:da:38:93:67:e9: 1a:74:54:cf:e7:11:79:5c:08:10:14:04:37:4d:ad: 9d:a6:1a:5b:9a:da:e8:45:60:d7:de:29:be:e5:5d: 47:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C6:63:AB:BC:5A:B2:44:7A:0F:FA:68:FA:00:68:07:FB:31:9F:76 X509v3 Authority Key Identifier: keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:eb:06:fe:7b:19:b1:1f:bd:a5:08:9c:92:66:4a:76:d3:ae: f0:63:69:77:f9:9f:fd:85:91:20:7c:61:28:02:e4:ce:b7:62: 3c:78:fe:95:36:bf:9b:20:02:72:8f:f3:32:0a:99:82:62:f7: e4:b5:46:e3:f0:cf:8e:fc:c6:d2:f4:1d:80:68:4a:fe:18:ff: bd:00:f8:6e:cb:da:12:7f:df:a4:b5:f8:5d:41:04:79:01:ee: a7:3f:f8:c5:ca:76:fc:8b:58:49:ab:41:f9:9d:28:0b:ff:6b: f3:0b:70:f4:61:80:74:c1:31:2a:a6:d0:0b:2e:4b:f7:64:64: 48:fd:aa:06:c9:d2:c7:c7:a3:b8:87:69:1e:8c:81:d6:0e:e3: bb:64:24:92:17:28:6f:b9:83:49:2d:b6:6e:fb:22:29:98:b5: 62:b7:ce:3f:0e:12:d2:8f:93:e3:49:f8:65:59:41:1d:70:2c: 27:41:91:03:c3:48:c8:08:4e:d8:1d:cb:3b:24:65:f8:fd:10: a1:0e:8a:cd:e9:8f:57:ad:d5:cf:b7:9e:bb:84:bb:85:de:5e: 72:b0:07:9e:11:76:2c:59:91:ab:13:36:63:76:eb:0e:c2:90: 9d:32:7c:95:a9:25:65:da:b0:26:a5:a5:74:84:65:be:cc:23: f6:e0:a2:e2 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUOc507xInYdype+v9+HPbFSF5x/IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNkM3NUQwMDAwMTEwLwYDVQQFEyhBREJFMUEwRjQ2 RjlDNzdCMEQyNDlGRDZBNDM4QjQ4QjdGQjIxQkNGMB4XDTI2MDMwMTE2MDQzM1oX DTI2MDMwMjE2MjEzM1owMzExMC8GA1UEAxMoQTFDNjYzQUJCQzVBQjI0NDdBMEZG QTY4RkEwMDY4MDdGQjMxOUY3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ2YS+Xg12ZeHcMWKEW/yRLXB+X/gu2AbFb11e74uvknMpkMJmtVPT+eRcnw aBY8SUESXhsZUsV5LevScr3UYLPjyo5K+WhMBF7ejQNMvwyleVpFrpBIV2RUr/+q fCki3lsI/9susdpLvyQ2zxHMw+gXIBJvy2IwZbMfjbUOEB9NzbxdLYSH0b/Cg1w7 2l+CzOy1lO99d7nrV7nl4IUoOZEMKTyTCA9hxFJiHjV+6Z4V/Po2+9zpa2mvFvKY D5k+mNiQ3IaeQkypsaiyvpjC64K30kRenIkIie/pcto4k2fpGnRUz+cReVwIEBQE N02tnaYaW5ra6EVg194pvuVdRxsCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBShxmOr vFqyRHoP+mj6AGgH+zGfdjAfBgNVHSMEGDAWgBStvhoPRvnHew0kn9akOLSLf7Ib zzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNGUwYWE2MDE5MTU5 ZjJmYjI3MGNhOC8xL0FEQkUxQTBGNDZGOUM3N0IwRDI0OUZENkE0MzhCNDhCN0ZC MjFCQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL3JiNGFEMGI1eDNzTkpKX1dwRGkwaTMteUc4OC5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTE0ZTBhYTYwMTkxNTlmMmZiMjcwY2E4 LzEvQURCRTFBMEY0NkY5Qzc3QjBEMjQ5RkQ2QTQzOEI0OEI3RkIyMUJDRi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKXrBv57GbEfvaUInJJmSnbTrvBjaXf5n/2FkSB8YSgC5M63Yjx4/pU2 v5sgAnKP8zIKmYJi9+S1RuPwz478xtL0HYBoSv4Y/70A+G7L2hJ/36S1+F1BBHkB 7qc/+MXKdvyLWEmrQfmdKAv/a/MLcPRhgHTBMSqm0AsuS/dkZEj9qgbJ0sfHo7iH aR6MgdYO47tkJJIXKG+5g0kttm77IimYtWK3zj8OEtKPk+NJ+GVZQR1wLCdBkQPD SMgITtgdyzskZfj9EKEOis3pj1et1c+3nruEu4XeXnKwB54RdixZkasTNmN26w7C kJ0yfJWpJWXasCalpXSEZb7MI/bgouI= -----END CERTIFICATE-----Generated at Mon Mar 2 07:21:28 2026 by rpki-client