
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
File: 6ED84CFF4976B923E315096476DD6623E49C8B79.mft (raw, json)
Hash identifier: 8/cR6n1KrhTTbVcEKuemBZvD3I1dC+Md+1LrfMqwqVY=
Subject key identifier: F9:0D:7C:82:0A:03:CD:16:42:A5:F8:56:C4:A0:0C:A9:68:77:07:55
Authority key identifier: 6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
Certificate issuer: /CN=A91A9C1E0000/serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Certificate serial: 3D20F0162E54AD77B80C3CE38A29BB7276284DA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
Manifest number: 059F
Signing time: Sat 28 Mar 2026 07:17:19 +0000
Manifest this update: Sat 28 Mar 2026 07:12:19 +0000
Manifest next update: Sun 29 Mar 2026 11:06:19 +0000
Files and hashes: 1: 3130332e3234342e3232362e302f32342d3234203d3e20323033333633.roa (hash: gKJ6KRXwSkLEScK/Pnq8ckZ0+aVLIbaF6Yt51de+geY=)
2: 6ED84CFF4976B923E315096476DD6623E49C8B79.crl (hash: DLvVYheQL3hNT4ow/ChR5i1zyOpEihiag9Trr93+wng=)
3: 3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa (hash: 2AjQ6oK0mFOk0c9CpaTvICyD2JdGT4R5dFs1mBr73rQ=)
4: AS151642.asa (hash: J9zBC4ZQBQ+VcoWk+4SKjXBib2AzPbqeLZhs6syiHfY=)
5: 323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa (hash: 5zyjZiHzfKFVIj8CROIKBwN4OHeQ+uy/14mqZgTNhgE=)
6: 3130332e3234342e3232362e302f32332d3332203d3e20313531363432.roa (hash: sPyoKorLiK9ByXmoMSNg668zU3RSvi8DBiCLDQzzk34=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 11:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:20:f0:16:2e:54:ad:77:b8:0c:3c:e3:8a:29:bb:72:76:28:4d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C1E0000, serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Validity
Not Before: Mar 28 07:12:19 2026 GMT
Not After : Mar 29 11:06:19 2026 GMT
Subject: CN=F90D7C820A03CD1642A5F856C4A00CA968770755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:00:fc:f9:2c:54:6b:92:4b:8e:c6:9d:56:94:
1c:02:01:8d:ca:7e:a6:b1:2a:e4:0a:b3:17:84:e6:
bd:0d:7a:d4:d9:06:58:ff:4c:27:48:03:bf:90:8a:
f2:58:b8:54:85:e5:d3:88:c1:40:b8:ae:58:0e:1b:
00:43:42:ab:56:a8:a6:81:66:b2:7c:53:aa:e8:03:
a9:7c:46:b7:1e:da:4b:cf:39:46:e9:d1:46:84:86:
4a:3a:25:1a:0d:9f:38:29:f5:6e:ba:19:e7:77:b2:
ec:a0:0e:09:9d:31:5f:48:53:5c:4d:ea:fb:78:97:
5f:8a:a1:22:38:6a:92:b1:7a:4f:2c:0f:95:2c:9f:
0e:e1:74:81:db:bf:8c:43:78:62:1b:ed:a5:a4:df:
3f:99:be:bb:ab:72:fe:43:6c:c5:89:84:21:6f:32:
7a:50:00:f6:db:90:0f:71:9f:ff:c0:bc:11:18:24:
09:aa:19:d1:36:99:0b:74:76:14:59:2a:19:63:3b:
0a:08:a8:80:ce:79:ec:da:f2:63:f4:0b:3b:31:42:
23:18:45:73:b5:c1:79:f1:e4:b6:b4:04:62:3d:08:
76:04:7b:46:63:2e:b7:45:5d:10:3f:b1:32:d8:74:
fa:eb:8a:fa:86:f5:11:70:5a:3a:5c:7b:8f:b4:fa:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0D:7C:82:0A:03:CD:16:42:A5:F8:56:C4:A0:0C:A9:68:77:07:55
X509v3 Authority Key Identifier:
keyid:6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c9:54:ff:ac:2d:f9:e8:4f:f5:a0:2e:f0:1d:88:a9:c2:6c:
56:06:3c:84:d1:25:af:94:e3:0a:fc:f4:d2:17:e2:3e:8e:b6:
d8:0d:4d:04:c5:ce:90:2b:22:10:11:de:2d:40:56:68:53:80:
c3:2d:24:32:ee:25:1b:b8:75:01:4b:37:bb:50:d1:bc:93:3b:
aa:12:4a:fd:d5:05:19:6f:ba:b9:fe:8a:ac:62:b3:8e:67:e6:
8b:38:85:0b:c3:15:a5:50:82:1a:76:2b:5f:3e:88:5b:91:91:
9d:88:0b:e3:9b:40:0e:49:53:43:b7:f5:8c:68:b7:96:93:16:
26:2c:e8:ae:92:40:4c:43:ec:2d:6e:70:11:d8:fd:21:b1:0c:
31:6f:f0:d0:be:2c:3e:57:c6:99:0c:64:4a:98:28:49:f9:f8:
51:3f:e8:ac:70:63:a2:f4:3c:b4:9c:6e:a5:d5:d9:8a:47:b3:
d3:66:0a:5d:a1:98:be:b1:45:7a:52:a0:f0:ea:51:27:c1:3a:
2b:e0:1a:74:ce:62:5c:22:04:9b:5e:45:e3:23:83:b3:ff:12:
c4:0a:e3:9d:c4:e0:4b:b2:df:37:c7:dd:37:02:f7:7e:ca:24:
e6:84:95:08:ec:27:73:65:a7:b3:9f:96:00:e6:79:6b:2e:50:
5f:e1:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:43:33 2026 by rpki-client