
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier: 2YbabUBJv4KyfLkrnXtGKwZZesaXUDCuEH6ZF+5zNBc=
Subject key identifier: 66:D4:F4:CF:E0:8A:B0:94:60:19:CF:F5:0B:7A:9F:9E:AB:0F:D4:CF
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer: /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial: 40D5414068A3BE2C9A140AA52E88AB58CC80AEB2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number: 0901
Signing time: Thu 24 Sep 2026 18:41:40 +0000
Manifest this update: Thu 24 Sep 2026 18:36:40 +0000
Manifest next update: Fri 25 Sep 2026 19:14:40 +0000
Files and hashes: 1: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: kpmpSHDWgx+wJKAQXZpi9ZedTiKUfSYzfx9HM/Mtg7E=)
2: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (hash: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w=)
3: AS151817.asa (hash: wTrAYN9s7bfwaIQnYOvnVK5KUx58lGBv5nEfO8YXQwE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 19:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d5:41:40:68:a3:be:2c:9a:14:0a:a5:2e:88:ab:58:cc:80:ae:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Validity
Not Before: Sep 24 18:36:40 2026 GMT
Not After : Sep 25 19:14:40 2026 GMT
Subject: CN=66D4F4CFE08AB0946019CFF50B7A9F9EAB0FD4CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:8f:fd:34:98:c0:a3:b4:9a:f1:8f:e8:87:
23:10:eb:25:0a:e7:47:05:01:3d:c6:7f:01:8a:f6:
59:ef:95:da:2b:4b:9e:1a:a7:81:df:85:1e:e1:2c:
51:03:28:45:04:85:5b:f3:38:79:a1:77:39:eb:34:
85:8f:85:af:0b:92:b0:23:68:ac:d4:a0:d6:15:17:
62:2a:ad:00:f3:af:89:70:74:2a:2a:b4:8d:81:8d:
51:ad:a8:55:83:57:43:ab:60:52:c9:f7:75:1f:45:
85:c7:20:f6:94:48:63:86:78:d2:cf:55:a9:43:16:
01:3d:a7:46:ba:4b:18:3e:ec:f1:63:24:f0:65:b3:
fc:45:01:5d:c9:8f:6b:93:10:fb:50:ed:dd:4b:9e:
27:e6:82:68:b2:87:17:5e:1e:ce:01:ac:b0:57:57:
e9:bd:df:80:3b:ba:06:ac:3f:03:ba:44:e1:3f:a5:
db:63:61:68:ff:44:fd:0b:43:d9:ee:9b:69:7b:d1:
58:df:07:d8:bf:dc:cd:c3:66:35:89:15:1a:48:ca:
6f:54:ad:c7:fc:97:3d:4f:50:50:16:00:be:73:f1:
d1:82:8b:37:f2:41:05:5b:6e:34:93:57:0a:d6:dc:
e2:bf:5e:63:fd:40:eb:f7:88:d7:15:27:51:1c:ad:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:F4:CF:E0:8A:B0:94:60:19:CF:F5:0B:7A:9F:9E:AB:0F:D4:CF
X509v3 Authority Key Identifier:
keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c8:95:23:41:e9:70:bf:c8:f7:b1:6c:c1:ed:66:ae:c6:df:
af:1f:45:cd:f9:22:b8:aa:15:5f:10:de:fa:77:a2:ab:60:6b:
47:c8:f3:df:2b:04:65:b6:c8:33:eb:6b:fa:c9:f0:8b:26:94:
d5:f9:bd:80:1c:a2:2c:00:b0:9d:0f:45:a6:e5:71:20:e1:b8:
18:0e:76:d4:e7:04:82:61:0b:3e:30:56:46:37:07:ae:96:b0:
9b:c1:a1:9b:d1:fc:b7:9a:dc:07:e4:16:7d:48:9e:20:d4:75:
c5:3d:66:7a:9a:63:ab:8a:eb:f1:0d:d0:50:69:74:18:5d:ff:
1d:11:21:af:ac:f3:c6:2f:60:27:53:a4:87:ed:21:84:de:ec:
50:5b:4e:23:ab:a4:a2:90:84:37:1b:24:19:f6:63:99:d1:41:
0d:c0:fc:39:d2:59:26:02:6c:8d:a1:56:47:28:f8:93:f5:f3:
3f:7a:32:16:45:c2:26:5f:f6:8c:a5:ac:26:52:1e:13:b8:87:
7d:78:0e:23:96:52:f3:42:99:44:93:eb:d4:81:79:a3:1a:fa:
1e:7f:cf:f1:80:8d:e1:96:8b:03:90:57:40:71:1d:a8:c5:3d:
0f:0f:f4:75:47:24:5c:ab:10:11:d4:74:b6:43:81:4e:b4:ce:
d7:0d:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:26 2026 by rpki-client