Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          yhsovy9xY12ea0I6kW8ePwdWbsB/PIl8kdrM065QEF4=
Subject key identifier:   CC:E3:10:D2:92:71:BC:59:59:03:D4:FC:B6:25:A5:DD:2A:8A:FC:BE
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       6E9A43CFD7CA8757A9C478E5F1C8B6A0893FA600
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          04
Signing time:             Sat 05 Jul 2025 16:56:50 +0000
Manifest this update:     Sat 05 Jul 2025 16:51:50 +0000
Manifest next update:     Sun 06 Jul 2025 17:12:50 +0000
Files and hashes:         1: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=)
                          2: 323430343a336438303a3a2f33322d3332203d3e2030.roa (hash: UdiAxCD9dUJt8dJ13fYIsd65THW1RL3+fmPrtepm3VU=)
                          3: 323430343a336438303a3a2f33322d3438203d3e203631313338.roa (hash: vR13YTps2IOLJ32Czol962tgM592qRm1uemaECC1xjU=)
                          4: 3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (hash: ZcPW7+BE1LN+IBKqmSb+c1D8xmcmnOrZ+AV6UlpS48I=)
                          5: 323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: cfy0Lb3p1KGIvT1Dv3WTKXomnigIqUZxC3qUSKU1X8Q=)
                          6: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: HZ/0NgfLxYs574eSg9QyrZbs7z1wOOIzvXQMJlH9h1c=)
                          7: 3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (hash: xenml2DtldDc1AME+ONCgNO05UC9yi+x8jLwONvYCYc=)
                          8: 3130332e3230382e38362e302f32332d3234203d3e203631313338.roa (hash: vTK6sEV7joXKRp0wkFdncV/xbR2SIxNz0+q46rwBcC8=)
                          9: 3130332e3230382e38342e302f32342d3234203d3e203533383530.roa (hash: FXU2BOZtL90B1obM1s07UWKQTLZt5lRjO+wB7UMEG/U=)
                          10: 323430343a336438303a3a2f33322d3438203d3e20313531383137.roa (hash: Ne68E09zoDQRBk9inQni3vpBYIBAMeRKDNt1f2IWRb0=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 17:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9a:43:cf:d7:ca:87:57:a9:c4:78:e5:f1:c8:b6:a0:89:3f:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Jul  5 16:51:50 2025 GMT
            Not After : Jul  6 17:12:50 2025 GMT
        Subject: CN=CCE310D29271BC595903D4FCB625A5DD2A8AFCBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:52:8d:20:0c:01:b0:17:14:0d:54:23:a2:
                    d2:a8:68:14:d6:ed:bf:5b:d9:85:61:4a:e4:82:88:
                    63:28:d7:fd:6e:5d:55:80:09:d9:62:2c:5b:bd:fc:
                    d0:b5:3f:09:87:0f:03:8b:87:e6:87:35:62:54:e4:
                    26:bd:35:f5:00:79:37:e2:bd:5f:f6:6c:35:5c:12:
                    d4:6c:4f:77:f1:0f:e4:a1:3e:15:bd:7c:4d:f4:25:
                    20:bf:6a:dd:35:67:af:5c:cb:0d:f0:80:c5:54:33:
                    1e:ad:4d:63:bf:8f:f3:5e:30:81:cd:da:40:18:0e:
                    17:94:d8:2f:dc:c5:79:c7:3c:33:f4:de:d2:cd:38:
                    e0:1a:82:71:fe:77:ee:98:65:e6:ed:4a:e7:a4:eb:
                    1b:84:0e:ac:d3:ce:39:c0:06:9f:25:d5:8d:22:16:
                    ec:c7:6f:da:48:d1:6e:c5:bc:e4:f8:68:0a:bc:6d:
                    63:b4:0f:f7:6d:c6:0e:f1:ed:e8:bf:6e:03:d2:bf:
                    89:12:24:5a:76:b9:4e:21:74:bb:79:f6:fd:99:28:
                    28:0d:e9:b6:3e:3a:f2:84:59:3e:c9:d0:10:02:a2:
                    5a:7c:64:f0:5d:b0:4d:5d:0a:87:7d:bf:bc:b1:4c:
                    4a:e6:af:a6:5f:d8:d6:3e:9c:ec:40:e1:5c:46:ae:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E3:10:D2:92:71:BC:59:59:03:D4:FC:B6:25:A5:DD:2A:8A:FC:BE
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:89:0b:3e:83:09:5a:90:b1:15:0f:71:28:1a:30:2e:35:47:
         ca:f4:6f:e4:09:9a:73:f6:5b:65:ad:62:17:ca:b5:d4:ad:cf:
         80:9f:fe:b8:40:6c:40:c5:77:e3:1f:83:73:d1:32:21:81:0b:
         dc:e2:94:ab:a7:88:b2:34:e4:e4:54:63:b1:0f:49:92:50:db:
         6f:d5:d4:e7:cc:f7:f4:0c:0a:92:30:bd:68:5a:59:bc:e2:27:
         eb:62:a1:29:18:0b:70:a0:00:0f:15:eb:8a:9b:db:b2:39:13:
         04:10:90:0d:82:81:5d:07:90:2a:d9:92:a0:3a:12:a6:e4:01:
         90:86:28:f5:90:aa:e3:01:f6:c4:80:5e:fe:d0:6e:df:08:d4:
         5c:e5:5c:f8:2a:65:bd:25:91:ae:12:b4:b8:b8:a4:f1:fd:0c:
         ba:ff:9f:f8:dc:b4:9a:14:cb:e2:49:04:e6:6f:d7:b0:12:15:
         ef:2a:ce:79:c9:c2:8d:1d:63:ee:bd:44:f7:c0:ac:ac:0d:e6:
         da:7f:1d:97:05:21:c3:0e:d3:aa:84:e4:41:dc:f8:43:a6:67:
         c0:09:61:c2:7f:73:da:29:0e:04:7f:4a:36:c0:a8:d4:b3:d1:
         49:67:9b:f3:27:fc:45:20:ca:fc:2f:07:e4:4b:95:16:ed:96:
         ba:79:59:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 09:51:38 2025 by rpki-client