Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          PT2ASCzVk5ZwZLSvbrHo/GLPOSTQbPUr1YI/6DUyBh0=
Subject key identifier:   01:FE:6A:8C:B8:DB:26:1E:86:59:42:61:6C:20:E6:AE:CA:73:E1:E3
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       469F43C6E8AA82CB1F8549CE5AACF4E62FA7309D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          DF
Signing time:             Wed 08 Oct 2025 13:02:45 +0000
Manifest this update:     Wed 08 Oct 2025 12:57:45 +0000
Manifest next update:     Thu 09 Oct 2025 15:36:45 +0000
Files and hashes:         1: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=)
                          2: 323430343a336438303a3a2f33322d3438203d3e203631313338.roa (hash: vR13YTps2IOLJ32Czol962tgM592qRm1uemaECC1xjU=)
                          3: 3130332e3230382e38342e302f32342d3234203d3e203533383530.roa (hash: FXU2BOZtL90B1obM1s07UWKQTLZt5lRjO+wB7UMEG/U=)
                          4: 323430343a336438303a3a2f33322d3438203d3e20313531383137.roa (hash: Ne68E09zoDQRBk9inQni3vpBYIBAMeRKDNt1f2IWRb0=)
                          5: 3130332e3230382e38362e302f32332d3234203d3e203631313338.roa (hash: vTK6sEV7joXKRp0wkFdncV/xbR2SIxNz0+q46rwBcC8=)
                          6: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: Ukq5RLVbbT27lDR/U2YYU3qrphfx8NmmKN1Upt5m2Ec=)
                          7: 3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (hash: xenml2DtldDc1AME+ONCgNO05UC9yi+x8jLwONvYCYc=)
                          8: 3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (hash: ZcPW7+BE1LN+IBKqmSb+c1D8xmcmnOrZ+AV6UlpS48I=)
                          9: 3130332e3230382e38342e302f32322d3234203d3e203631313338.roa (hash: EFokon3uzovDNn0Unk4MoVGX2uXU8iSPtyRbEFKVwE8=)
                          10: 323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: cfy0Lb3p1KGIvT1Dv3WTKXomnigIqUZxC3qUSKU1X8Q=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Oct 2025 15:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9f:43:c6:e8:aa:82:cb:1f:85:49:ce:5a:ac:f4:e6:2f:a7:30:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Oct  8 12:57:45 2025 GMT
            Not After : Oct  9 15:36:45 2025 GMT
        Subject: CN=01FE6A8CB8DB261E865942616C20E6AECA73E1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ee:2c:c6:d8:d0:a6:53:39:5b:bf:bf:e5:34:
                    e4:77:ee:5e:23:4d:19:4e:4f:b9:a5:66:9a:b6:c8:
                    8b:8c:a8:f2:f3:0c:b1:56:d4:a3:e3:f8:d3:9c:35:
                    26:ac:6f:7d:ff:fa:28:ad:21:9d:80:94:b6:df:10:
                    42:4b:7f:f1:59:7b:fd:c7:9e:8a:45:9e:bb:87:fa:
                    54:a4:04:c5:3a:94:82:2d:bb:6d:1a:8a:d4:4b:4c:
                    12:8c:0d:ac:c4:a9:36:47:ec:f8:04:d2:fc:02:45:
                    1a:95:d5:19:a4:dc:39:75:a4:a7:a1:a2:c4:df:1b:
                    3c:10:7a:b5:86:65:48:35:57:ca:35:e4:13:3c:ab:
                    1a:82:f7:b2:c8:7f:99:1f:47:4c:a2:98:97:19:16:
                    f0:d7:c7:53:57:d7:86:ca:ec:1c:e4:9d:32:7e:99:
                    2d:e6:ca:6e:26:84:d8:16:6d:7f:b8:ec:84:ae:d3:
                    86:53:11:57:12:a3:8b:b9:b7:07:1d:bf:a7:ce:80:
                    54:b7:2c:76:5e:ec:c3:4f:0b:19:e9:ab:b1:7a:64:
                    8a:8d:2a:ef:08:29:9f:4f:2f:21:93:22:40:7b:97:
                    b5:42:15:62:95:0d:53:07:d9:1f:9e:17:bf:da:e9:
                    69:73:98:92:31:b9:09:fc:ec:32:f7:da:c2:fe:6f:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FE:6A:8C:B8:DB:26:1E:86:59:42:61:6C:20:E6:AE:CA:73:E1:E3
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a3:f8:f4:04:cb:16:53:7a:ce:43:ff:af:2c:c4:cc:e8:6d:
         9a:0d:83:55:71:91:43:ab:1e:10:bd:f1:b8:5f:e6:f0:ab:d4:
         c8:80:b9:21:26:2c:b1:ef:0e:4b:67:24:b6:96:50:78:40:a0:
         d6:d9:c8:bc:1c:d4:0e:f2:04:00:19:a3:10:c6:db:10:d1:66:
         20:3b:d3:04:3b:d1:a1:2a:35:03:4e:cb:5b:14:99:22:34:64:
         b2:a2:98:11:39:44:01:b1:5d:56:76:25:19:1e:f4:95:59:24:
         fd:07:ec:98:f0:49:36:d8:47:60:d6:99:56:c1:22:b2:c3:77:
         d0:da:93:34:fd:e8:fa:3d:93:36:28:6e:9e:4d:ed:e3:25:20:
         56:70:9a:58:86:e3:9f:1a:6f:cc:7f:fe:5c:8a:50:75:b7:1d:
         7d:e6:20:5b:9f:f8:3d:8a:df:04:02:42:df:69:d1:a2:f7:2a:
         c6:b3:ab:e7:76:a7:5d:af:91:81:43:53:a7:4a:0f:88:2a:5a:
         8c:3b:11:ed:42:21:49:46:bb:7f:39:a0:dc:21:2a:1d:85:b1:
         04:d4:dd:7f:4d:26:b3:c0:51:5f:ff:51:ab:ec:f9:61:75:3e:
         62:a9:1d:34:28:b5:91:56:4e:5d:7e:cf:78:72:f9:91:16:cc:
         ae:4f:5a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:50:03 2025 by rpki-client