Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
File:                     3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json)
Hash identifier:          NbJ4Rh/lC9V+JzgGj0ObwgguhhEwuU/c2O08aH/uFGQ=
Subject key identifier:   F3:AB:93:18:B3:14:0A:ED:B0:C5:7B:F1:65:A8:A2:FD:94:CF:48:A3
Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Certificate issuer:       /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Certificate serial:       771524F02DC16F36F2D4AEE2CA0F54ADF2291D7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
Manifest number:          029D
Signing time:             Sun 27 Sep 2026 15:40:45 +0000
Manifest this update:     Sun 27 Sep 2026 15:35:45 +0000
Manifest next update:     Mon 28 Sep 2026 19:33:45 +0000
Files and hashes:         1: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: yvVgQGI2kMT1b0Qmpe3fZt87b+iGOtuP8uxB7dRW+pE=)
                          2: 3136352e39392e3132342e302f32332d3234203d3e20343031363832.roa (hash: LEjTWe6fpK8sHggE9hBQ7iuKgwnA3HoC/5f5zkwhZbE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 19:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:15:24:f0:2d:c1:6f:36:f2:d4:ae:e2:ca:0f:54:ad:f2:29:1d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
        Validity
            Not Before: Sep 27 15:35:45 2026 GMT
            Not After : Sep 28 19:33:45 2026 GMT
        Subject: CN=F3AB9318B3140AEDB0C57BF165A8A2FD94CF48A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:4b:9e:c7:b4:d6:9d:1c:e2:3f:3c:fc:30:
                    b5:12:9d:82:1a:3c:09:23:e5:ce:e3:de:2c:96:6e:
                    24:cd:df:5c:a1:43:38:bd:b0:20:38:a0:dd:1e:15:
                    79:ee:21:62:15:10:8c:89:50:82:d6:49:f2:24:fe:
                    0a:ed:f7:04:97:c5:e2:e6:9c:0f:6a:38:a3:32:4c:
                    52:a9:b1:7a:f4:e3:d7:a4:c9:a9:d8:98:54:50:ae:
                    6d:ce:41:0b:dd:4f:25:cb:3d:d2:9f:b3:4b:1e:e6:
                    5e:94:6d:b7:56:4d:b3:e7:cf:06:cb:a5:d1:8c:43:
                    10:5b:bb:c6:ae:47:cb:43:fd:3b:45:d1:1e:c9:d2:
                    f8:17:6c:3a:19:ec:c9:16:df:c4:d8:1f:fa:cd:ba:
                    12:47:ca:31:ce:a3:0f:64:a3:98:65:36:78:d3:2f:
                    c7:6d:c7:7c:a9:31:e5:be:41:fd:80:1c:e6:93:04:
                    cd:7a:33:45:37:97:2a:07:bc:c8:97:e8:43:a1:99:
                    c9:62:30:fb:6a:5f:16:7a:b2:0f:6a:e0:a7:07:4d:
                    f0:ea:28:6d:b6:1d:f9:a7:09:f0:10:79:73:15:60:
                    2c:31:b9:dc:75:0e:c9:7c:b3:0f:29:4f:be:cc:fc:
                    dd:1a:e7:19:0e:0d:cf:4e:67:41:10:05:3e:c5:ba:
                    fc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AB:93:18:B3:14:0A:ED:B0:C5:7B:F1:65:A8:A2:FD:94:CF:48:A3
            X509v3 Authority Key Identifier:
                keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6c:59:45:94:12:10:d6:a5:27:b3:a7:8b:f6:e1:78:15:56:
         7e:6d:c0:a5:c1:5e:5b:70:28:27:05:bd:32:6c:07:c6:ba:15:
         73:e1:37:5d:42:46:56:c5:65:0c:e3:1b:26:f9:5b:2a:a1:f9:
         81:3e:b1:90:80:78:0f:18:12:d2:ba:3f:2c:cd:52:03:b2:1b:
         9d:61:9a:73:8f:d9:5f:ec:4e:53:09:57:6d:90:02:17:ae:1b:
         c5:f9:fb:8a:34:dd:47:d6:0d:47:33:9b:db:53:24:72:d6:4f:
         af:11:e7:05:d6:d9:fb:06:6a:8e:ac:2e:3c:c4:ca:03:d7:df:
         db:ad:8c:e9:d6:c2:5a:c0:bb:e9:7e:45:cb:ee:42:7c:43:a4:
         42:46:ae:d6:07:b4:bc:6e:6d:15:10:c9:6d:23:45:9b:5d:ab:
         a1:21:25:c3:78:1d:71:20:08:a5:f8:eb:c7:68:dd:d8:d1:61:
         d9:81:9b:54:d7:e5:bf:71:16:72:c7:0d:cf:b3:15:ee:47:9a:
         a1:9b:16:b4:77:5a:56:07:f1:68:3c:24:e6:0c:2b:ab:53:4c:
         85:49:f0:c3:68:cf:72:63:11:5c:df:64:93:85:59:21:d9:7e:
         73:41:35:fc:b4:b4:9a:98:5c:e3:cb:7a:94:6e:b8:45:b7:1f:
         0d:c1:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:33:03 2026 by rpki-client