
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
File: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft (raw, json)
Hash identifier: oOmvSOEU3JxjQKLECnQndltQGDTZN/DGPjg2iG7sRck=
Subject key identifier: 6C:7E:37:0D:57:24:3D:BE:0A:98:CB:B5:3B:5A:4F:78:2E:FD:71:8D
Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
Certificate issuer: /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Certificate serial: 70E96E34935484AE4E81F417324F2C31B66ACE54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
Manifest number: 01E9
Signing time: Tue 04 Nov 2025 00:52:45 +0000
Manifest this update: Tue 04 Nov 2025 00:47:45 +0000
Manifest next update: Wed 05 Nov 2025 04:49:45 +0000
Files and hashes: 1: 323430313a323132303a3a2f33322d3438203d3e203338313336.roa (hash: +fVmnnc1IdeBfCQk+wm7zwGJz5E6xRV72VmJGynl2jQ=)
2: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl (hash: mwWOirUWtV4MmSkZ6Kz5SsGWFJFtxc+X4ds+SV/fgXU=)
3: 323430313a323132303a3a2f33322d3438203d3e20393833.roa (hash: 9Y5ozUdXLpM7mPSDccTM1hUqUj6itpgpUxa0jF/SbrE=)
4: 3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (hash: i8F2RRMTpNkdcMS7cljG+Ymy6U8qF9ju4zRoTmyXvsc=)
5: 3130332e3234382e3232382e302f32342d3234203d3e203338313336.roa (hash: rHEyyyKMoSLQziLjU85amnV34V6rygc6mhRXA5+ZrAk=)
6: 3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa (hash: 5IS1Kat0lEIhiC6EmZKdLlAtCZ08dV03AfUvVZPqqhU=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 04:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e9:6e:34:93:54:84:ae:4e:81:f4:17:32:4f:2c:31:b6:6a:ce:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F
Validity
Not Before: Nov 4 00:47:45 2025 GMT
Not After : Nov 5 04:49:45 2025 GMT
Subject: CN=6C7E370D57243DBE0A98CBB53B5A4F782EFD718D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:06:87:96:65:2c:77:5e:c8:de:7b:63:7e:
ce:f9:ac:0a:d7:03:80:0c:50:9f:86:49:5f:d0:d9:
6e:3b:c7:68:19:78:2e:fa:a8:f3:79:41:bd:94:96:
be:72:9c:0a:15:77:dc:7f:fc:db:df:07:e4:31:39:
05:b4:3b:ca:b7:fc:b2:3c:18:b0:fe:e5:4c:35:ac:
a8:8d:ec:e9:b0:59:26:94:dc:a4:57:a6:c6:56:97:
4f:98:90:d7:bc:e8:2c:a4:5e:ea:b1:7e:a5:cf:76:
f1:72:19:5b:b7:a6:3c:c5:57:21:72:12:c8:5d:d4:
1b:38:35:37:c1:03:26:ac:c2:57:f1:9e:20:82:a7:
e6:d4:b4:04:8c:de:64:e8:cb:eb:3e:44:33:be:77:
cb:11:57:93:e5:36:8e:e2:05:37:f8:a8:5a:74:d9:
74:3b:3c:dd:40:47:92:e0:ba:07:a9:fb:ae:86:84:
8c:28:61:71:9e:97:74:55:e9:18:2b:64:5d:1c:44:
e4:e9:a6:cb:0f:63:14:09:ad:ab:6a:e7:c8:a7:a0:
4e:e3:27:ad:72:70:d4:31:65:99:62:24:0d:b3:30:
d9:22:a6:e9:e8:ba:b2:e9:bc:47:37:01:17:f3:bf:
4e:61:69:80:61:c7:ee:14:0a:38:86:b4:88:7f:bb:
6a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7E:37:0D:57:24:3D:BE:0A:98:CB:B5:3B:5A:4F:78:2E:FD:71:8D
X509v3 Authority Key Identifier:
keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b2:d3:f1:7e:f2:04:56:6e:0d:fb:f3:63:de:f3:96:38:fe:
6f:84:4b:39:f8:37:6b:df:32:f1:2b:a7:f8:21:f1:40:6f:8f:
6e:00:6b:8d:fc:af:2a:df:c3:44:7c:e3:c9:88:d6:6c:8e:b7:
9b:73:09:04:f9:0b:76:0a:ba:c0:1e:43:47:c7:5f:4c:8b:d9:
5b:e2:ca:73:b6:50:d7:09:71:40:ca:fc:10:64:02:9e:c9:d6:
c7:e1:77:cc:a8:62:40:3a:5c:4f:2d:cd:1f:b6:bf:49:df:17:
e5:8c:1e:5f:65:91:83:c6:75:ff:4b:b9:3b:c8:e7:9c:1b:b2:
fe:bf:94:35:b8:5f:12:ed:d5:bc:19:f5:b9:7a:f7:be:7c:f6:
8d:7e:90:4a:b4:0e:c4:0f:f8:46:6e:e0:2b:0d:d6:6c:81:f0:
db:2f:4a:fd:49:c2:ce:24:6e:f5:10:95:26:8e:bd:2d:9c:5f:
85:38:84:41:65:3a:93:21:c8:de:14:32:6d:51:41:4f:19:fe:
a9:31:2a:d2:fc:90:5b:85:59:a2:0d:7a:38:88:5f:6b:7b:34:
37:64:e0:96:2b:a9:e5:ec:9b:3c:e8:63:8b:b5:64:37:88:fd:
5e:51:c3:6f:5e:6d:9a:e1:2d:67:81:3b:00:06:7a:10:b3:33:
a7:9c:2c:38
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUcOluNJNUhK5OgfQXMk8sMbZqzlQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTMwMDAwMDAwMTEwLwYDVQQFEyg5MTE4RTVBNkJF
NUU4MkFFNTBBOUJGQTA3MTk3NUY2NkVDNTkxNzBGMB4XDTI1MTEwNDAwNDc0NVoX
DTI1MTEwNTA0NDk0NVowMzExMC8GA1UEAxMoNkM3RTM3MEQ1NzI0M0RCRTBBOThD
QkI1M0I1QTRGNzgyRUZENzE4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKqRBoeWZSx3Xsjee2N+zvmsCtcDgAxQn4ZJX9DZbjvHaBl4Lvqo83lBvZSW
vnKcChV33H/8298H5DE5BbQ7yrf8sjwYsP7lTDWsqI3s6bBZJpTcpFemxlaXT5iQ
17zoLKRe6rF+pc928XIZW7emPMVXIXISyF3UGzg1N8EDJqzCV/GeIIKn5tS0BIze
ZOjL6z5EM753yxFXk+U2juIFN/ioWnTZdDs83UBHkuC6B6n7roaEjChhcZ6XdFXp
GCtkXRxE5Ommyw9jFAmtq2rnyKegTuMnrXJw1DFlmWIkDbMw2SKm6ei6sum8RzcB
F/O/TmFpgGHH7hQKOIa0iH+7auECAwEAAaOCAkYwggJCMB0GA1UdDgQWBBRsfjcN
VyQ9vgqYy7U7Wk94Lv1xjTAfBgNVHSMEGDAWgBSRGOWmvl6CrlCpv6Bxl19m7FkX
DzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNGUwYWE2MDE5MTU5
ZjJmYjI3MGNhOC8zLzkxMThFNUE2QkU1RTgyQUU1MEE5QkZBMDcxOTc1RjY2RUM1
OTE3MEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2tSamxwcjVlZ3E1UXFiLWdjWmRmWnV4WkZ3OC5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTE0ZTBhYTYwMTkxNTlmMmZiMjcwY2E4
LzMvOTExOEU1QTZCRTVFODJBRTUwQTlCRkEwNzE5NzVGNjZFQzU5MTcwRi5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBADyy0/F+8gRWbg3782Pe85Y4/m+ESzn4N2vfMvErp/gh8UBvj24Aa438
ryrfw0R848mI1myOt5tzCQT5C3YKusAeQ0fHX0yL2VviynO2UNcJcUDK/BBkAp7J
1sfhd8yoYkA6XE8tzR+2v0nfF+WMHl9lkYPGdf9LuTvI55wbsv6/lDW4XxLt1bwZ
9bl697589o1+kEq0DsQP+EZu4CsN1myB8NsvSv1Jws4kbvUQlSaOvS2cX4U4hEFl
OpMhyN4UMm1RQU8Z/qkxKtL8kFuFWaINejiIX2t7NDdk4JYrqeXsmzzoY4u1ZDeI
/V5Rw29ebZrhLWeBOwAGehCzM6ecLDg=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:08:26 2025 by rpki-client