$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft File: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft (raw, json) Hash identifier: hUfrDQn7rs9wZe7aHtg56qLwxDXssu9f/B5op905G1I= Subject key identifier: CB:82:6E:E4:23:30:A5:31:8E:71:F8:A1:43:D1:A8:E7:0D:6E:F3:0C Authority key identifier: 91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F Certificate issuer: /CN=A91130000000/serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F Certificate serial: 4D2032C1B30009DAA6FC49F366F49B7A797E4828 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft Manifest number: 02A5 Signing time: Thu 26 Mar 2026 04:43:53 +0000 Manifest this update: Thu 26 Mar 2026 04:38:53 +0000 Manifest next update: Fri 27 Mar 2026 04:58:53 +0000 Files and hashes: 1: 323430313a323132303a3a2f33322d3438203d3e20393833.roa (hash: 9Y5ozUdXLpM7mPSDccTM1hUqUj6itpgpUxa0jF/SbrE=) 2: 3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa (hash: 5IS1Kat0lEIhiC6EmZKdLlAtCZ08dV03AfUvVZPqqhU=) 3: 9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl (hash: 858aGZJTeghmDoSZl7oVhVJF+58FVu4xpO02qdoSXyw=) 4: 323430313a323132303a3a2f33322d3438203d3e203338313336.roa (hash: +fVmnnc1IdeBfCQk+wm7zwGJz5E6xRV72VmJGynl2jQ=) 5: 3130332e3234382e3232382e302f32342d3234203d3e203338313336.roa (hash: rHEyyyKMoSLQziLjU85amnV34V6rygc6mhRXA5+ZrAk=) 6: 3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (hash: i8F2RRMTpNkdcMS7cljG+Ymy6U8qF9ju4zRoTmyXvsc=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 04:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:20:32:c1:b3:00:09:da:a6:fc:49:f3:66:f4:9b:7a:79:7e:48:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91130000000, serialNumber=9118E5A6BE5E82AE50A9BFA071975F66EC59170F Validity Not Before: Mar 26 04:38:53 2026 GMT Not After : Mar 27 04:58:53 2026 GMT Subject: CN=CB826EE42330A5318E71F8A143D1A8E70D6EF30C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8f:ed:07:fb:1d:27:d6:27:bd:bb:36:2c:45: 50:13:8a:03:52:d7:95:f2:72:ce:ac:ab:92:41:e8: 0a:f5:54:a6:b3:e2:1d:a2:0a:b1:f4:89:7d:b4:2f: b8:28:35:14:76:ac:e7:21:80:35:fb:8d:ec:31:f1: 38:51:51:42:4c:79:70:f9:f6:ca:a0:94:3b:c8:5f: e8:15:14:2c:e7:b4:4b:19:b5:64:27:21:d7:33:69: 72:46:d3:59:0b:b3:d2:22:80:30:83:0e:02:b3:d0: f2:19:1a:45:b7:e7:b5:13:46:fb:17:c5:36:2c:b6: d9:b8:91:f5:00:d9:47:78:6e:8d:81:08:fb:24:ef: da:82:33:84:0d:be:ac:46:aa:8a:d8:7d:2a:57:d1: 41:72:07:69:88:cf:45:6e:5c:42:df:15:9d:cb:90: af:30:40:5d:4b:35:b0:6c:f5:3b:71:f9:b0:ed:6a: 03:7c:68:cb:b2:8a:25:c2:6f:87:81:44:d7:f3:19: a0:bb:d2:8c:43:6b:18:a8:9e:b8:57:80:5f:21:13: 30:c7:99:3b:9b:2a:f8:a0:4c:7c:e9:d8:50:08:b9: 5e:5f:3c:78:15:ba:b7:9b:48:88:dc:ea:43:db:c1: 71:3c:ec:8f:8e:8f:f6:55:3d:9b:9b:f5:69:23:a3: 64:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:82:6E:E4:23:30:A5:31:8E:71:F8:A1:43:D1:A8:E7:0D:6E:F3:0C X509v3 Authority Key Identifier: keyid:91:18:E5:A6:BE:5E:82:AE:50:A9:BF:A0:71:97:5F:66:EC:59:17:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRjlpr5egq5Qqb-gcZdfZuxZFw8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/3/9118E5A6BE5E82AE50A9BFA071975F66EC59170F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f7:fa:9b:7c:1e:a6:9b:b8:60:53:f2:de:98:dc:b5:0c:d9: cf:0c:8f:4f:aa:97:d7:6d:ad:db:eb:1d:83:97:74:2b:56:1f: d4:5d:75:17:19:bd:77:4f:e9:bf:91:b3:c6:44:2a:05:8d:c9: b3:10:f0:98:6b:11:7b:4c:b6:db:15:46:ef:eb:7c:42:87:05: 0b:6c:31:89:5b:c4:49:92:2a:f4:36:7a:bf:75:24:14:63:3c: 21:a5:9c:f2:35:ab:c7:39:21:39:95:c6:4a:b5:e9:47:f2:58: 28:e3:04:49:84:79:c1:9e:cd:27:12:1c:2a:4d:01:55:6a:47: d3:db:f3:90:0e:91:df:24:4c:14:b4:92:a0:1f:46:de:c4:2d: 0e:ab:e2:b2:41:bb:2f:f7:26:db:66:d1:fd:fe:70:38:e1:51: 68:f3:1f:d4:86:2d:4d:af:b1:fb:ae:ba:a2:75:51:43:3f:ef: 73:fa:91:ef:0a:39:ef:1f:e7:25:b7:81:73:c2:59:62:fd:b8: 3c:a9:d5:6a:39:d3:f5:31:c4:65:43:3a:50:92:4d:8b:e6:68: 55:2b:68:98:02:c8:3b:3e:71:53:cf:51:18:28:f1:94:fe:00: 69:2b:88:b3:a1:b0:bd:b1:db:7d:75:e3:51:b3:88:90:97:46: f1:ac:25:80 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUTSAywbMACdqm/EnzZvSbenl+SCgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMTMwMDAwMDAwMTEwLwYDVQQFEyg5MTE4RTVBNkJF NUU4MkFFNTBBOUJGQTA3MTk3NUY2NkVDNTkxNzBGMB4XDTI2MDMyNjA0Mzg1M1oX DTI2MDMyNzA0NTg1M1owMzExMC8GA1UEAxMoQ0I4MjZFRTQyMzMwQTUzMThFNzFG OEExNDNEMUE4RTcwRDZFRjMwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOqP7Qf7HSfWJ727NixFUBOKA1LXlfJyzqyrkkHoCvVUprPiHaIKsfSJfbQv uCg1FHas5yGANfuN7DHxOFFRQkx5cPn2yqCUO8hf6BUULOe0Sxm1ZCch1zNpckbT WQuz0iKAMIMOArPQ8hkaRbfntRNG+xfFNiy22biR9QDZR3hujYEI+yTv2oIzhA2+ rEaqith9KlfRQXIHaYjPRW5cQt8VncuQrzBAXUs1sGz1O3H5sO1qA3xoy7KKJcJv h4FE1/MZoLvSjENrGKieuFeAXyETMMeZO5sq+KBMfOnYUAi5Xl88eBW6t5tIiNzq Q9vBcTzsj46P9lU9m5v1aSOjZMcCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBTLgm7k IzClMY5x+KFD0ajnDW7zDDAfBgNVHSMEGDAWgBSRGOWmvl6CrlCpv6Bxl19m7FkX DzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNGUwYWE2MDE5MTU5 ZjJmYjI3MGNhOC8zLzkxMThFNUE2QkU1RTgyQUU1MEE5QkZBMDcxOTc1RjY2RUM1 OTE3MEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2tSamxwcjVlZ3E1UXFiLWdjWmRmWnV4WkZ3OC5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTE0ZTBhYTYwMTkxNTlmMmZiMjcwY2E4 LzMvOTExOEU1QTZCRTVFODJBRTUwQTlCRkEwNzE5NzVGNjZFQzU5MTcwRi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFf3+pt8HqabuGBT8t6Y3LUM2c8Mj0+ql9dtrdvrHYOXdCtWH9RddRcZ vXdP6b+Rs8ZEKgWNybMQ8JhrEXtMttsVRu/rfEKHBQtsMYlbxEmSKvQ2er91JBRj PCGlnPI1q8c5ITmVxkq16UfyWCjjBEmEecGezScSHCpNAVVqR9Pb85AOkd8kTBS0 kqAfRt7ELQ6r4rJBuy/3Jttm0f3+cDjhUWjzH9SGLU2vsfuuuqJ1UUM/73P6ke8K Oe8f5yW3gXPCWWL9uDyp1Wo50/UxxGVDOlCSTYvmaFUraJgCyDs+cVPPURgo8ZT+ AGkriLOhsL2x231141GziJCXRvGsJYA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:54 2026 by rpki-client