
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
File: 3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json)
Hash identifier: 08t92viXQQr09VbRI/1fCLgyrUfqS5d8cQb++OQsWiI=
Subject key identifier: B7:E6:E1:E3:FF:84:60:BB:72:42:01:9F:74:9F:8D:BD:2D:92:B6:22
Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Certificate issuer: /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Certificate serial: 52F2EF36DAF411102B2D5672C143EA7656A95DE2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
Manifest number: D8
Signing time: Thu 30 Oct 2025 03:56:41 +0000
Manifest this update: Thu 30 Oct 2025 03:51:41 +0000
Manifest next update: Fri 31 Oct 2025 05:50:41 +0000
Files and hashes: 1: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: oGkl5Vip/e1CsUxh0puc8FybeZhYjFVE/WjKhm2O2oE=)
2: 3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa (hash: 85gBMcl8T92cShSttg2IE1+cL7srToN1WMPpMffNR/c=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 05:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f2:ef:36:da:f4:11:10:2b:2d:56:72:c1:43:ea:76:56:a9:5d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Validity
Not Before: Oct 30 03:51:41 2025 GMT
Not After : Oct 31 05:50:41 2025 GMT
Subject: CN=B7E6E1E3FF8460BB7242019F749F8DBD2D92B622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:7c:88:dd:85:e5:6a:cc:d7:41:3c:08:70:
c7:6c:48:5c:91:ff:f8:3c:e3:b5:bf:ba:06:72:a9:
00:bc:f7:f1:5b:a7:57:2d:0a:0b:02:46:50:f4:a5:
95:01:3e:fe:4f:15:00:22:62:21:33:ad:46:ec:02:
7f:f6:f2:6c:6a:2f:08:5e:42:c1:cc:3f:59:b5:81:
53:1e:36:ff:b2:99:52:3a:fa:26:fc:60:14:03:8b:
8e:15:ba:76:ac:72:61:aa:58:ab:08:e1:ff:07:63:
9e:f3:df:0b:fb:94:87:01:ac:a1:9a:dd:54:37:80:
61:f8:cd:f0:bd:06:89:d1:2b:53:5e:30:00:ee:9f:
4c:1b:ba:c2:79:63:de:2c:88:cb:58:b6:f1:a5:f1:
d4:97:50:77:1f:89:63:de:ea:9f:36:a6:17:d9:f7:
e3:ee:28:d7:38:14:9a:8d:a3:1a:d2:79:dc:24:52:
99:e2:b3:6c:ba:d6:ce:dd:ea:08:b1:cd:41:3a:3a:
53:75:5f:45:5d:44:91:f9:3d:0e:d0:e0:e5:26:0d:
ea:64:83:3c:73:52:9a:f4:77:54:2f:13:0a:52:03:
e4:fa:12:04:0f:0e:2c:cf:a1:9f:d0:87:f6:c9:c1:
50:08:27:cb:9a:3d:cb:0d:0f:ea:9f:c5:27:e3:7c:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E6:E1:E3:FF:84:60:BB:72:42:01:9F:74:9F:8D:BD:2D:92:B6:22
X509v3 Authority Key Identifier:
keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:26:d5:b1:1d:b1:a5:99:b9:9f:6a:38:71:8c:c9:eb:67:1d:
bb:7a:e9:a1:d0:58:72:ec:aa:ad:f6:be:17:3e:a6:1c:93:6f:
bb:11:80:d9:78:c9:b1:c5:d9:74:41:63:a2:d4:ab:3e:a7:ba:
e1:6b:72:6c:d6:b1:2c:97:db:0f:cc:45:66:fc:77:7b:8b:4e:
63:3f:c3:cd:d6:1f:bd:2e:0e:46:0c:fd:40:90:0c:2c:46:9c:
ba:45:9d:49:06:49:fb:8b:e6:50:07:56:05:f8:b0:8b:51:25:
00:c9:0e:51:7f:68:ec:e2:1a:a1:f0:ab:ef:b4:f1:4c:1a:72:
25:73:3c:4c:da:2d:3d:50:1f:87:ea:db:7a:ae:8e:b5:d8:17:
18:2f:9a:73:b2:c4:e7:cd:f9:7c:4f:05:1d:bf:64:59:c4:34:
9b:a5:69:fd:8c:71:3b:f5:3e:31:49:01:2b:59:5f:50:9a:1e:
ae:cc:9a:b4:8b:85:00:71:1f:9e:f0:68:15:6c:c1:e3:15:8d:
a6:d0:dc:ac:8c:4a:80:6e:83:17:85:ba:a2:0c:a0:8d:52:2b:
95:cf:d1:8e:f7:0d:f2:04:fa:d7:cc:aa:cd:12:a0:32:19:7b:
4f:32:9d:5e:a2:e4:ef:58:3c:ff:32:e7:e4:c0:39:78:a2:75:
4e:2c:93:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 14:55:03 2025 by rpki-client