
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
File: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft (raw, json)
Hash identifier: 4XM0/Z2y1RSHoKybOZo8YdNcMRVOMZdxV20cUjmymrU=
Subject key identifier: 96:A1:CB:53:EE:60:F6:E6:6E:17:8E:BC:4F:B3:D1:EF:E6:FC:94:CE
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Certificate issuer: /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial: 06D9B94B38251EB30C07B7E3F5DBE32382D54BDE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
Manifest number: 0285
Signing time: Sun 01 Mar 2026 07:19:33 +0000
Manifest this update: Sun 01 Mar 2026 07:14:33 +0000
Manifest next update: Mon 02 Mar 2026 11:05:33 +0000
Files and hashes: 1: 3130332e3234382e3232382e302f32342d3234203d3e203338313336.roa (hash: rHEyyyKMoSLQziLjU85amnV34V6rygc6mhRXA5+ZrAk=)
2: 323430313a323132303a3a2f33322d3438203d3e20393833.roa (hash: 9Y5ozUdXLpM7mPSDccTM1hUqUj6itpgpUxa0jF/SbrE=)
3: 3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (hash: i8F2RRMTpNkdcMS7cljG+Ymy6U8qF9ju4zRoTmyXvsc=)
4: 323430313a323132303a3a2f33322d3438203d3e203338313336.roa (hash: +fVmnnc1IdeBfCQk+wm7zwGJz5E6xRV72VmJGynl2jQ=)
5: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl (hash: DqMVC1U58xJTITHU4AOOI9sw3zdXhCFDIX/qcdpm2Bc=)
6: 3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa (hash: 5IS1Kat0lEIhiC6EmZKdLlAtCZ08dV03AfUvVZPqqhU=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 11:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d9:b9:4b:38:25:1e:b3:0c:07:b7:e3:f5:db:e3:23:82:d5:4b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Validity
Not Before: Mar 1 07:14:33 2026 GMT
Not After : Mar 2 11:05:33 2026 GMT
Subject: CN=96A1CB53EE60F6E66E178EBC4FB3D1EFE6FC94CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:55:b0:63:42:14:64:05:e9:4a:b7:31:5c:
51:66:c3:27:3c:be:af:62:b8:d1:ca:0e:07:3b:cc:
21:5a:e1:71:27:00:91:5c:7b:22:2e:c7:21:f7:c0:
0c:6f:ee:2b:96:d9:be:f5:dc:ee:5a:a9:33:5f:9e:
9a:2e:64:c0:5c:16:79:88:e0:a4:fb:46:16:25:02:
13:f3:20:ea:5c:56:f3:49:a0:f2:67:8e:60:39:15:
08:8f:6d:8e:46:71:d5:fb:5c:a8:1c:76:1f:71:80:
26:98:1d:8e:fd:b4:82:90:6a:bb:af:9b:a3:28:f1:
a8:4d:92:dd:b8:9c:bf:95:10:5d:cc:5c:5f:fa:c8:
fa:c8:40:77:23:ea:49:e9:2b:76:18:ce:dc:8a:a5:
74:a8:f7:28:9f:c4:62:27:ba:60:a7:f2:4e:91:99:
5b:30:c9:05:c1:9e:7e:08:ff:e4:77:dd:5d:ee:6e:
90:9d:49:bf:42:2d:00:b5:ed:45:fc:80:73:02:fd:
d2:22:74:3c:1b:f5:99:6b:7d:a6:fb:f0:ad:0d:52:
25:4e:62:68:9c:54:00:f2:10:75:37:1c:49:5f:c4:
74:19:bc:f1:1b:83:44:f3:54:d4:ad:9b:db:c3:dd:
d6:55:c6:03:01:06:0f:fe:a7:de:ab:b4:b4:84:79:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A1:CB:53:EE:60:F6:E6:6E:17:8E:BC:4F:B3:D1:EF:E6:FC:94:CE
X509v3 Authority Key Identifier:
keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b0:a4:68:a6:f9:62:69:c0:c6:65:a0:5a:96:3f:4a:71:d0:
a4:36:4e:d4:47:34:47:73:5c:94:5d:30:2e:72:5e:65:1d:73:
18:b8:e0:c9:ea:c7:7f:bd:95:dd:e5:2d:b9:bb:b6:52:13:4d:
c8:09:45:c7:e9:30:c8:3b:9d:f0:ae:b4:62:d6:d2:3c:66:74:
52:d2:f7:32:31:f7:69:3b:48:f6:e3:0d:a0:de:dc:77:52:84:
11:da:3b:69:4f:7f:e1:0b:05:14:63:8c:39:df:9d:a3:50:a8:
d5:3f:e5:40:57:28:15:67:ce:74:c7:22:0a:74:06:00:4a:e7:
72:ac:cb:2e:9b:7f:aa:a8:30:1d:20:62:54:7b:23:58:38:20:
a6:23:a0:00:d4:2e:04:df:fe:e3:9d:2e:4a:7a:ec:b0:cd:b9:
d7:e1:eb:84:5b:f0:79:8b:6f:a5:8e:d5:4f:9e:44:65:98:49:
df:d9:21:47:9e:5e:32:31:e4:e6:38:5b:99:27:12:f3:5c:c4:
52:0f:9c:cb:f5:2e:fb:06:bd:cb:cd:51:14:14:60:9e:75:cf:
86:e7:ef:96:c2:92:76:79:4d:86:be:92:35:5a:f1:02:82:a5:
99:d4:d3:ac:b8:17:2f:b1:17:b3:2a:7e:79:ca:40:24:88:1e:
1f:6f:30:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:38 2026 by rpki-client