Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          BuguWWihlvvHLMLp3sXjHOuki9C3SEg2X1ZIYIUhY7Y=
Subject key identifier:   82:DD:51:0C:87:F8:34:31:34:4B:2F:76:22:45:D6:2E:2A:79:89:98
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       5E72B87392A5CAF7233E358E6DFE2CD6FC75D190
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          07B4
Signing time:             Thu 23 Jul 2026 16:59:54 +0000
Manifest this update:     Thu 23 Jul 2026 16:54:54 +0000
Manifest next update:     Fri 24 Jul 2026 17:43:54 +0000
Files and hashes:         1: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=)
                          2: AS151817.asa (hash: wTrAYN9s7bfwaIQnYOvnVK5KUx58lGBv5nEfO8YXQwE=)
                          3: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: 9hYzXJP5QAK3BeMRoluREeDZDdkPrBFeNXN3AITfy8c=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 17:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:72:b8:73:92:a5:ca:f7:23:3e:35:8e:6d:fe:2c:d6:fc:75:d1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Jul 23 16:54:54 2026 GMT
            Not After : Jul 24 17:43:54 2026 GMT
        Subject: CN=82DD510C87F83431344B2F762245D62E2A798998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3b:92:17:91:cf:52:e4:16:ae:31:e6:db:29:
                    3f:5d:70:5d:e9:59:6c:bf:0a:3b:2c:83:de:d2:e5:
                    cc:cc:e3:8e:d3:c1:74:82:dc:52:c4:d7:97:34:76:
                    b9:b9:ec:49:e1:3a:71:fd:96:d0:75:ce:19:f4:56:
                    e0:f6:ce:d3:c2:f6:02:e9:01:8d:b5:f4:70:08:e4:
                    a2:b3:ca:11:54:f2:15:81:40:05:df:c9:ca:c2:55:
                    e0:ef:0b:25:82:c9:76:bc:2f:17:bb:4d:27:01:94:
                    f5:56:d8:8c:50:9a:fc:5c:2f:52:9c:d6:c0:25:78:
                    01:c3:4f:ba:66:c7:de:9c:23:d8:bc:36:59:b1:9c:
                    2b:63:f3:3a:0b:66:c8:3d:38:02:aa:24:4c:d4:45:
                    7e:ed:a2:41:61:a6:88:55:da:75:e5:1c:b6:57:4f:
                    eb:1e:6a:11:41:50:d6:c4:45:d1:7a:17:7b:7b:06:
                    90:c9:c0:5e:e9:cc:dc:7b:8a:aa:74:e5:ec:9c:57:
                    63:69:38:2a:cb:97:c7:c2:0b:ea:4a:f4:43:f4:e3:
                    57:a4:73:f4:ce:b6:d1:26:f0:fe:f7:3c:09:44:3f:
                    ff:b8:b7:7e:e6:f3:8f:8e:59:6a:cc:39:18:be:59:
                    df:c0:b2:79:39:1b:bb:c6:18:e0:23:03:0b:2b:40:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DD:51:0C:87:F8:34:31:34:4B:2F:76:22:45:D6:2E:2A:79:89:98
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f6:69:74:ed:d4:3e:6f:b5:14:9b:45:b7:43:45:bc:9e:67:
         e2:f3:50:7a:42:00:07:d5:7f:85:76:cb:87:b9:21:32:fc:3f:
         ce:4f:9f:c6:05:5a:a2:67:0a:05:fa:40:72:f4:44:28:25:c5:
         99:c7:8b:6a:19:df:f0:94:1f:98:6c:d0:b1:05:a0:2a:2a:21:
         43:7b:85:49:d6:5d:24:7f:55:94:cc:89:98:da:18:80:72:2e:
         70:e2:5f:e5:5d:5b:35:dc:89:61:db:51:6b:f6:3a:41:f2:9f:
         db:0e:1b:31:91:40:fd:f9:2c:a7:03:1d:22:bd:08:6f:4f:61:
         df:8f:0d:23:13:a8:5b:bf:d0:78:5d:80:60:45:aa:e1:b4:7d:
         17:28:15:d4:b4:19:05:c2:3a:bb:38:f6:fc:86:98:20:5f:b3:
         f0:d3:98:52:ed:8d:f2:5f:fa:66:d6:37:1e:0d:10:11:be:ea:
         22:b9:90:66:e6:1f:8c:6b:10:82:c0:d9:f4:c4:cd:31:b8:c5:
         8c:34:49:ed:8c:ac:da:61:61:0e:46:d3:d9:ae:fe:84:c1:35:
         b9:c7:3c:95:bf:83:03:d8:9d:cc:6c:b4:f8:d8:2a:69:c8:5d:
         e7:a4:84:7e:d6:0b:d2:ad:d5:4d:73:6d:4b:51:d3:62:cd:12:
         23:72:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:37 2026 by rpki-client