Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          vOVzqF0kT9Ty/K1zrRu2ysLaOBRPymVsdJGp9Zfm7GQ=
Subject key identifier:   6B:8D:EA:EF:9B:63:DA:20:01:C6:85:C0:F3:C7:DA:1F:C5:F6:88:9D
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       3A97AF114C20B00147B71A066049DC8DFF4D92B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          61
Signing time:             Thu 21 Aug 2025 00:32:09 +0000
Manifest this update:     Thu 21 Aug 2025 00:27:09 +0000
Manifest next update:     Fri 22 Aug 2025 01:25:09 +0000
Files and hashes:         1: 323430343a336438303a3a2f33322d3438203d3e20313531383137.roa (hash: Ne68E09zoDQRBk9inQni3vpBYIBAMeRKDNt1f2IWRb0=)
                          2: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: n8AZWHfSgcaqmhSP5h89yS0XXkIRDwsCC7koHoE1T+Q=)
                          3: 3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (hash: ZcPW7+BE1LN+IBKqmSb+c1D8xmcmnOrZ+AV6UlpS48I=)
                          4: 3130332e3230382e38342e302f32342d3234203d3e203533383530.roa (hash: FXU2BOZtL90B1obM1s07UWKQTLZt5lRjO+wB7UMEG/U=)
                          5: 3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (hash: xenml2DtldDc1AME+ONCgNO05UC9yi+x8jLwONvYCYc=)
                          6: 323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: cfy0Lb3p1KGIvT1Dv3WTKXomnigIqUZxC3qUSKU1X8Q=)
                          7: 3130332e3230382e38362e302f32332d3234203d3e203631313338.roa (hash: vTK6sEV7joXKRp0wkFdncV/xbR2SIxNz0+q46rwBcC8=)
                          8: 323430343a336438303a3a2f33322d3438203d3e203631313338.roa (hash: vR13YTps2IOLJ32Czol962tgM592qRm1uemaECC1xjU=)
                          9: DA9D3E0D86B4A6BE3EE57FE831013A354095DCDE.cer (hash: Iy3P6SmzdfNgBhDFM7ijV3OlMUkRlFXeHIc9V00v6WU=)
                          10: 3130332e3230382e38342e302f32322d3234203d3e203631313338.roa (hash: EFokon3uzovDNn0Unk4MoVGX2uXU8iSPtyRbEFKVwE8=)
                          11: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Aug 2025 01:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:97:af:11:4c:20:b0:01:47:b7:1a:06:60:49:dc:8d:ff:4d:92:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Aug 21 00:27:09 2025 GMT
            Not After : Aug 22 01:25:09 2025 GMT
        Subject: CN=6B8DEAEF9B63DA2001C685C0F3C7DA1FC5F6889D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:3f:21:ee:e5:a2:94:38:13:c8:fb:d4:e3:
                    aa:02:da:de:3c:76:66:c0:89:61:91:c9:d4:f8:14:
                    24:ae:9c:0b:1d:95:5f:14:15:46:d3:d4:ea:b8:21:
                    3b:6a:13:39:d0:b6:a4:20:00:54:60:99:26:67:44:
                    b6:7e:b3:aa:51:52:d3:7d:37:5f:cf:20:c8:86:69:
                    b4:b1:31:90:20:0f:52:4d:13:17:ba:53:cc:a0:4b:
                    9f:62:c5:df:28:36:33:75:93:54:16:2a:8c:91:e3:
                    08:d4:3a:59:a0:c4:2a:09:1b:35:b4:8c:1c:02:92:
                    23:49:0f:7c:89:de:e6:2d:6c:03:d4:50:7c:1b:65:
                    b1:d0:a5:4c:70:00:eb:fb:23:63:af:ab:0c:6d:5c:
                    2e:4a:ee:96:bc:bb:56:18:e4:9e:ea:c0:9a:68:9f:
                    15:2f:d1:13:1d:ca:77:e3:bc:67:3a:1f:27:f3:5d:
                    10:c9:a5:57:4c:ef:75:d0:3a:14:a0:c6:65:8e:65:
                    9b:17:72:d8:68:4b:69:f3:93:cd:f4:6b:89:0c:7d:
                    31:51:fe:8b:3f:ee:29:c8:85:bf:9d:21:7d:f6:7b:
                    74:75:2e:f8:f2:28:8d:cb:7f:62:d9:ef:a1:93:65:
                    1c:d4:92:3a:16:d0:59:a3:56:ac:98:7f:a9:51:28:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8D:EA:EF:9B:63:DA:20:01:C6:85:C0:F3:C7:DA:1F:C5:F6:88:9D
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:35:00:b4:57:b0:ee:e4:c0:2a:54:96:ed:12:0b:84:34:85:
         db:7b:a9:44:c3:84:d6:d9:fc:ce:17:d0:84:04:c1:00:91:38:
         f0:c1:53:64:d1:03:35:0b:32:3c:0c:24:90:d0:7c:26:bb:89:
         31:e8:2d:cf:ab:74:cb:1c:4c:18:a4:81:fd:75:a1:f2:36:3e:
         d9:5f:35:d8:a1:4f:78:84:47:dc:5f:7a:7e:4c:fb:e7:b8:54:
         54:93:86:e7:c2:f2:bc:9c:d7:c3:63:51:bf:e6:56:62:5e:9d:
         61:b7:93:69:11:7f:7c:bc:46:af:a0:7a:c8:4c:c7:15:c1:d1:
         73:60:7c:fe:f2:25:e9:09:43:83:28:ad:15:18:1a:b7:5c:b9:
         38:db:3a:db:a9:bd:ba:c5:a3:3b:87:6c:d8:53:41:76:ce:97:
         5c:67:e6:25:0d:f7:57:4a:bb:06:6f:82:81:f6:8b:ee:e3:4e:
         2f:db:f6:86:92:d7:0b:f4:5d:84:e0:4f:6f:10:2f:43:26:b7:
         2b:08:3f:e6:55:4e:00:2e:49:9b:97:41:17:c5:12:0b:87:d7:
         5f:8b:d2:4d:05:2e:fd:1e:0f:da:27:09:eb:b4:ba:c9:d3:bb:
         c1:d5:db:38:f7:5e:0e:f0:49:75:2a:cc:b5:a0:65:d3:3f:d3:
         6f:44:0e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:08:25 2025 by rpki-client