Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
File:                     3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json)
Hash identifier:          RKBdYUuVQIkPSbuPXwkLW6bmLpMid4U7iMQUxqUnKJI=
Subject key identifier:   9D:ED:FE:F8:7B:09:99:2F:3A:9A:DF:AE:0D:1F:23:5A:8D:0A:6E:F5
Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Certificate issuer:       /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Certificate serial:       474E94FA8BD1C581E326136314AF92BCFE62E027
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
Manifest number:          17
Signing time:             Sat 07 Jun 2025 07:02:48 +0000
Manifest this update:     Sat 07 Jun 2025 06:57:48 +0000
Manifest next update:     Sun 08 Jun 2025 10:38:48 +0000
Files and hashes:         1: 3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa (hash: 85gBMcl8T92cShSttg2IE1+cL7srToN1WMPpMffNR/c=)
                          2: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: IbYMYnUjk/BwAGCS+fMLhiXKyi8o67hcOgEpa9wmdu8=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 10:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4e:94:fa:8b:d1:c5:81:e3:26:13:63:14:af:92:bc:fe:62:e0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
        Validity
            Not Before: Jun  7 06:57:48 2025 GMT
            Not After : Jun  8 10:38:48 2025 GMT
        Subject: CN=9DEDFEF87B09992F3A9ADFAE0D1F235A8D0A6EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7c:c5:84:28:12:65:55:f5:ac:25:97:3d:05:
                    e9:ce:92:83:a4:d1:bc:a3:6d:0b:84:46:7b:42:89:
                    62:7c:b8:61:d2:0c:05:8c:01:42:66:d6:a5:f0:e4:
                    58:42:6b:89:f5:8e:11:66:5e:18:0c:fe:40:e7:6c:
                    a1:61:d2:a1:8a:2e:0c:d7:06:b3:2b:68:85:a6:c3:
                    6a:6f:2a:5b:40:ba:65:f6:6a:53:9d:c5:fa:19:5e:
                    7e:ee:41:aa:5c:71:8b:03:8b:db:2b:29:d7:75:cd:
                    e9:89:e9:d2:bc:1a:b3:e2:bb:65:2e:bf:9c:1c:76:
                    1f:eb:92:d5:e9:ff:fd:4f:77:0f:65:d7:d6:bb:54:
                    05:d6:bc:22:5a:4a:d2:aa:79:65:ad:b0:cc:5c:3d:
                    b5:24:e6:cc:07:2b:a0:96:b3:e8:17:53:62:e1:96:
                    8c:08:1b:a5:f6:d7:0e:db:2d:21:eb:9f:66:db:5c:
                    cb:e1:4d:19:fe:36:f2:28:d2:8c:3b:71:6a:27:72:
                    da:d5:cf:69:cf:f1:a8:5b:e0:a2:05:b8:ff:2a:89:
                    75:a4:1e:dc:27:0f:57:a6:d5:9e:f2:92:88:f0:15:
                    51:c0:9d:04:3c:9c:80:a0:17:61:e2:f8:78:52:c4:
                    51:21:c8:23:d0:08:7c:9f:68:0f:fd:52:59:aa:92:
                    7f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:FE:F8:7B:09:99:2F:3A:9A:DF:AE:0D:1F:23:5A:8D:0A:6E:F5
            X509v3 Authority Key Identifier:
                keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:92:50:8b:b7:5a:15:d6:e3:2d:1c:4b:9e:f7:90:9e:86:20:
         4a:2b:11:db:a0:14:8f:9c:5e:ec:b0:12:96:1b:77:d5:dd:cb:
         db:aa:84:e4:79:15:f2:e4:11:82:b7:8a:e9:ce:42:91:85:3e:
         88:53:a8:b1:e8:78:14:26:d8:fc:64:49:8e:e9:ae:44:6b:e6:
         9f:c6:f5:0a:7c:fb:05:da:64:9a:39:d0:ee:1e:26:a2:fe:54:
         dd:66:3c:97:61:3e:b2:66:8f:58:7e:7a:ce:ff:a8:98:99:10:
         d0:4a:97:af:a2:c5:27:d3:e6:55:c5:22:8d:5d:27:83:ed:43:
         55:a3:85:0e:f7:3a:da:ea:a7:48:30:89:49:c7:1c:21:33:47:
         78:b3:18:e0:a3:c3:91:00:f5:53:c3:c6:0f:6d:c4:d1:c9:1c:
         ab:ad:8e:50:9e:1c:4a:ce:9e:52:e0:b3:db:d9:d2:d8:65:42:
         a9:f9:99:b1:b5:ec:93:02:b1:ef:0d:e1:d6:9a:63:7c:79:07:
         a4:b5:45:37:39:11:3a:06:9d:00:5d:37:98:36:c4:70:6e:2b:
         92:1d:6b:dc:a8:a4:5a:16:2b:f0:31:6b:d9:ff:35:c1:66:90:
         f0:d2:49:96:f6:88:42:4d:c4:b3:94:f9:00:06:2d:79:a1:9f:
         dc:80:4f:26
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUR06U+ovRxYHjJhNjFK+SvP5i4CcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzAxRUUwMDAwMTEwLwYDVQQFEygzRjY3MDU3Rjc3
Qjg2NjAzQjZDMjE2RkY1NzdDQjMxNDYwNTNFNEU1MB4XDTI1MDYwNzA2NTc0OFoX
DTI1MDYwODEwMzg0OFowMzExMC8GA1UEAxMoOURFREZFRjg3QjA5OTkyRjNBOUFE
RkFFMEQxRjIzNUE4RDBBNkVGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJB8xYQoEmVV9awllz0F6c6Sg6TRvKNtC4RGe0KJYny4YdIMBYwBQmbWpfDk
WEJrifWOEWZeGAz+QOdsoWHSoYouDNcGsytohabDam8qW0C6ZfZqU53F+hlefu5B
qlxxiwOL2ysp13XN6Ynp0rwas+K7ZS6/nBx2H+uS1en//U93D2XX1rtUBda8IlpK
0qp5Za2wzFw9tSTmzAcroJaz6BdTYuGWjAgbpfbXDtstIeufZttcy+FNGf428ijS
jDtxaidy2tXPac/xqFvgogW4/yqJdaQe3CcPV6bVnvKSiPAVUcCdBDycgKAXYeL4
eFLEUSHII9AIfJ9oD/1SWaqSf/cCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBSd7f74
ewmZLzqa364NHyNajQpu9TAfBgNVHSMEGDAWgBQ/ZwV/d7hmA7bCFv9XfLMUYFPk
5TAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3
NGI0MmNhMTg2Ny8wLzNGNjcwNTdGNzdCODY2MDNCNkMyMTZGRjU3N0NCMzE0NjA1
M0U0RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3
QzcyRkQxRkYyL1AyY0ZmM2U0WmdPMndoYl9WM3l6RkdCVDVPVS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3
LzAvM0Y2NzA1N0Y3N0I4NjYwM0I2QzIxNkZGNTc3Q0IzMTQ2MDUzRTRFNS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAG2SUIu3WhXW4y0cS573kJ6GIEorEdugFI+cXuywEpYbd9Xdy9uqhOR5
FfLkEYK3iunOQpGFPohTqLHoeBQm2PxkSY7prkRr5p/G9Qp8+wXaZJo50O4eJqL+
VN1mPJdhPrJmj1h+es7/qJiZENBKl6+ixSfT5lXFIo1dJ4PtQ1WjhQ73Otrqp0gw
iUnHHCEzR3izGOCjw5EA9VPDxg9txNHJHKutjlCeHErOnlLgs9vZ0thlQqn5mbG1
7JMCse8N4daaY3x5B6S1RTc5EToGnQBdN5g2xHBuK5Ida9yopFoWK/Axa9n/NcFm
kPDSSZb2iEJNxLOU+QAGLXmhn9yATyY=
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:29:39 2025 by rpki-client