$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft File: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json) Hash identifier: QPAtOP88SRXJz0nFbwFKiyRAh8UjF8MA0pxWTT1JpBY= Subject key identifier: 60:96:3F:18:0A:70:43:88:F8:D6:13:A1:C3:B5:4F:4C:50:A3:33:E8 Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4 Certificate issuer: /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4 Certificate serial: 6BB96D4293ECD4849A4DDAD69E290075B57538D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft Manifest number: 0665 Signing time: Wed 13 May 2026 01:31:43 +0000 Manifest this update: Wed 13 May 2026 01:26:43 +0000 Manifest next update: Thu 14 May 2026 04:16:43 +0000 Files and hashes: 1: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=) 2: 3130332e3230382e38342e302f32322d3332203d3e20313531383137.roa (hash: JCDln+JMBGtNGpBy8g4kVtJ9W6HwLOH1eY/2mhO+3kc=) 3: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=) 4: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: GkEUPXdsaOHizrkZWUZwcsg4/Sdo3a2cDLHyhnO2W7s=) 5: 3130332e3230382e38342e302f32322d3332203d3e203631313338.roa (hash: FjLx2GQm7zO0Ax8do1MldUsAWWJvi9/fJiwqLS8UXI8=) 6: 3130332e3230382e38342e302f32342d3234203d3e20343030383130.roa (hash: wj8P1MYtL5SU/gbF1C+95xRc/98DFaAZ1cBCDWKIMNI=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b9:6d:42:93:ec:d4:84:9a:4d:da:d6:9e:29:00:75:b5:75:38:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4 Validity Not Before: May 13 01:26:43 2026 GMT Not After : May 14 04:16:43 2026 GMT Subject: CN=60963F180A704388F8D613A1C3B54F4C50A333E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:61:10:81:26:b8:e6:ff:8b:44:70:c0:7b:ce: 39:09:2d:4e:73:ab:3f:d3:f5:e9:22:6f:ba:ac:f2: 11:ad:74:f4:64:e2:7b:bb:4b:e7:e2:33:c2:9f:5e: 28:6e:6f:82:54:fd:1b:c5:b6:59:45:f9:65:2e:de: e0:1b:7d:a9:c0:bb:c5:5a:73:c2:82:30:80:bc:24: 7d:7e:00:78:82:7d:09:c9:85:da:6d:af:fb:ab:0e: c2:fa:02:87:af:23:c9:77:d9:40:a9:b0:d8:2a:82: b9:28:49:47:24:71:58:e4:22:07:95:2e:6c:bb:87: c6:3c:a8:30:a3:6f:60:58:90:2c:74:f3:9b:ad:79: 83:8d:c6:fe:6f:2f:57:d9:0a:78:30:c0:0a:70:13: 36:d2:c9:d6:92:33:a5:86:e8:c4:24:d5:4b:7c:21: ed:dc:88:38:db:30:75:b3:23:d4:7e:65:97:e5:25: c4:45:f4:1b:8d:73:99:94:dd:6e:d5:ed:07:19:b0: 27:f6:c3:82:28:cc:cf:50:4e:68:e9:da:70:96:dc: 65:55:33:d2:30:0a:0e:a8:df:28:5c:84:e8:0c:18: bb:b3:d2:b2:9e:31:4a:35:e8:59:63:a7:0b:25:7e: ae:97:9d:df:89:ce:a9:af:f0:d6:6d:24:b5:a9:99: db:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:96:3F:18:0A:70:43:88:F8:D6:13:A1:C3:B5:4F:4C:50:A3:33:E8 X509v3 Authority Key Identifier: keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e7:f8:b2:4a:fc:ba:e5:a9:35:c8:76:59:16:32:21:08:64: 2e:79:d9:0d:08:4d:50:85:dd:ee:89:fc:9d:6c:f4:b6:f6:71: 2a:a9:aa:e8:bf:60:92:a7:fe:72:1a:c2:32:2f:1e:2b:b6:1a: 99:be:7a:00:10:da:23:e4:4e:aa:3b:61:91:a4:2d:9b:82:02: a0:19:72:58:8d:3f:c3:c7:08:0c:e2:cb:2b:66:16:5a:91:bc: 53:54:ec:bf:c3:06:e5:50:6f:fb:64:00:aa:60:24:7a:35:d2: 87:c2:c1:92:48:49:f5:5e:f8:ed:dd:a6:67:d9:85:bd:69:64: c0:63:03:4d:f5:c7:89:5e:8e:d9:40:91:05:6e:d9:ae:a3:6c: 76:05:77:db:b2:64:7c:ee:ba:c9:9f:87:7f:11:aa:1f:39:43: 4a:b0:22:ee:7c:09:9c:9a:28:93:34:64:d6:c6:aa:7a:da:0f: b8:91:09:5b:9e:9a:83:2a:47:83:f8:55:41:6d:ae:d7:2f:2b: ad:c5:6d:71:51:83:a1:59:d7:a5:2d:a4:7c:da:82:c6:d6:b3: 2a:2e:5b:6c:32:ff:2e:c5:8c:41:14:93:64:4c:7f:04:92:70: 72:fd:f5:54:58:f5:89:13:b7:ae:0c:70:4e:d0:17:ea:f6:01: 75:f4:96:56 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUa7ltQpPs1ISaTdrWnikAdbV1ONMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg5Q0RBNzExMTZF MjI4MTJBREY2MEI3NTAwRjkyRDdFNENCQjJCOUI0MB4XDTI2MDUxMzAxMjY0M1oX DTI2MDUxNDA0MTY0M1owMzExMC8GA1UEAxMoNjA5NjNGMTgwQTcwNDM4OEY4RDYx M0ExQzNCNTRGNEM1MEEzMzNFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO9hEIEmuOb/i0RwwHvOOQktTnOrP9P16SJvuqzyEa109GTie7tL5+Izwp9e KG5vglT9G8W2WUX5ZS7e4Bt9qcC7xVpzwoIwgLwkfX4AeIJ9CcmF2m2v+6sOwvoC h68jyXfZQKmw2CqCuShJRyRxWOQiB5UubLuHxjyoMKNvYFiQLHTzm615g43G/m8v V9kKeDDACnATNtLJ1pIzpYboxCTVS3wh7dyIONswdbMj1H5ll+UlxEX0G41zmZTd btXtBxmwJ/bDgijMz1BOaOnacJbcZVUz0jAKDqjfKFyE6AwYu7PSsp4xSjXoWWOn CyV+rped34nOqa/w1m0ktamZ2+UCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBRglj8Y CnBDiPjWE6HDtU9MUKMz6DAfBgNVHSMEGDAWgBSc2nERbiKBKt9gt1APktfky7K5 tDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1 NWM5MWJlM2Y5ZC84LzlDREE3MTExNkUyMjgxMkFERjYwQjc1MDBGOTJEN0U0Q0JC MkI5QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL25OcHhFVzRpZ1NyZllMZFFENUxYNU11eXViUS5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk LzgvOUNEQTcxMTE2RTIyODEyQURGNjBCNzUwMEY5MkQ3RTRDQkIyQjlCNC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfn+LJK/LrlqTXIdlkWMiEIZC552Q0ITVCF3e6J/J1s9Lb2cSqpqui/ YJKn/nIawjIvHiu2Gpm+egAQ2iPkTqo7YZGkLZuCAqAZcliNP8PHCAziyytmFlqR vFNU7L/DBuVQb/tkAKpgJHo10ofCwZJISfVe+O3dpmfZhb1pZMBjA031x4lejtlA kQVu2a6jbHYFd9uyZHzuusmfh38Rqh85Q0qwIu58CZyaKJM0ZNbGqnraD7iRCVue moMqR4P4VUFtrtcvK63FbXFRg6FZ16UtpHzagsbWsyouW2wy/y7FjEEUk2RMfwSS cHL99VRY9YkTt64McE7QF+r2AXX0llY= -----END CERTIFICATE-----Generated at Wed May 13 03:44:39 2026 by rpki-client