Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
File:                     5953AC0A64BF9656B442D3C32313435ECB495F68.mft (raw, json)
Hash identifier:          FHZ7ljtZwssFVigedTXSNwtESq31MWMxyW728kXzOmg=
Subject key identifier:   7C:CA:75:6E:8D:40:0F:DE:60:15:4E:C9:33:3C:83:81:63:E9:2C:BB
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       054F7017E7E4AEB672D2916CCBF3FAB729C234BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
Manifest number:          0D7B
Signing time:             Fri 25 Apr 2025 10:59:08 +0000
Manifest this update:     Fri 25 Apr 2025 10:54:08 +0000
Manifest next update:     Sat 26 Apr 2025 12:00:08 +0000
Files and hashes:         1: EE962658B1226680140B4EA86F7D68CF498158D9.cer (hash: mngQ4kb91L5uHRGAPc7W6Lf2w7EzTTDyV29LLnhnHMI=)
                          2: 3130332e36382e3130382e302f32322d3234203d3e203631313338.roa (hash: y71Jqn/IsEeUZRC1HkfWAUfedxJ4Io2cxc3Cn/07aRQ=)
                          3: 323430343a336438303a3a2f33322d3438203d3e20313531383137.roa (hash: zn8s+iQYn3Bu653AJb7ALHYLRSkVvuUn8ISHvDSNLWg=)
                          4: 323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: npHdjTtF56K3mgLf1InuwXhPXZWD+/cOleIZk+cX5wk=)
                          5: 323430343a336438303a3a2f33322d3438203d3e203631313338.roa (hash: /c/X143yChLTjZ34Frn6v7TKMTTbgLHR9tQy12OVHvM=)
                          6: 3130332e36382e3130382e302f32322d3234203d3e20313531383137.roa (hash: 3ph0Z9ow7khXCH2+1q0bzUj2cJFEnHGKhkL5nCBvurM=)
                          7: 3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (hash: DZm7eY1dDQqpgM+Bj24LbZlETuRRB0Yhf62KfdcOMC4=)
                          8: 3130332e3230382e38342e302f32322d3234203d3e203631313338.roa (hash: 7waZZobnyji08SIeGjEeeWN0pPchc4HGx7/G05RTGL4=)
                          9: 3130332e36382e3130392e302f32342d3234203d3e20313336353537.roa (hash: hVB+MDtMs9vcnlXRBbJoSNzvilI9btPbCTuEKSp7v0s=)
                          10: 3130332e36382e3130382e302f32342d3234203d3e203631313338.roa (hash: F6/A8X0bwdTuQhkBPj8Rg2BKVJB7vnu46apG2DA0gc0=)
                          11: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: STWJgizYfSvXoLc0xVLeX1S33lyCdFxHmoUznReSgcg=)
                          12: 3130332e3230382e38342e302f32322d3234203d3e20313531383137.roa (hash: MjY6SC/b8YsxoAoqrFVGxDw3XKmvMoSkSbSoe/jQLT0=)
                          13: 3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa (hash: ZQZLI1qPtNAxxry3up6DA8hMI4oyLs/BP/YpeGON6P4=)
                          14: 3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (hash: VayEcM2ZIzNaJt0L7h0Ogu1a/1DA9bJr61hv5Xj1wCs=)
                          15: 3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa (hash: Jgln94ptStg0N3qt80yl/TjMDkHxjgAJgrK0/SDTRfQ=)
                          16: 5953AC0A64BF9656B442D3C32313435ECB495F68.crl (hash: HB+aRBC3Kf4uym5tIR4jtjFq8xnQia8I0F1vPNGgBjs=)
                          17: 3130332e36382e3130382e302f32342d3234203d3e20313439303230.roa (hash: eYPR8Cu25/8q+r29OhCMMv5LR2VLperNDhxK9ETwqp4=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4f:70:17:e7:e4:ae:b6:72:d2:91:6c:cb:f3:fa:b7:29:c2:34:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Apr 25 10:54:08 2025 GMT
            Not After : Apr 26 12:00:08 2025 GMT
        Subject: CN=7CCA756E8D400FDE60154EC9333C838163E92CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:f0:74:42:a4:12:71:0a:f7:9a:48:4c:32:
                    8e:a8:88:36:be:d3:16:b5:a5:82:7f:61:9a:6b:2f:
                    4a:d4:d4:ec:b5:44:d2:b4:00:7e:a1:07:f1:1e:e2:
                    1b:dc:aa:77:f0:23:a0:13:89:9c:95:71:6e:76:6a:
                    4f:d3:b6:c9:ec:b7:1e:d1:b1:22:91:1c:19:8c:5b:
                    07:e1:2e:2c:7b:42:52:a3:69:17:c5:f9:89:75:0c:
                    59:f7:9a:00:73:0d:c6:8e:67:bd:7e:c9:26:ca:2e:
                    8e:ab:ca:30:71:10:ce:d6:82:f2:fc:89:ba:74:84:
                    55:96:1d:85:cb:b1:4b:d1:81:11:94:f1:be:8c:39:
                    3f:9d:d3:4d:78:11:b9:d7:38:9a:e4:99:f2:69:5a:
                    95:a1:ab:3c:91:d3:8f:68:56:3e:f6:a5:d7:f3:10:
                    32:d5:0b:8c:28:2b:b7:9d:22:9f:aa:d5:10:b6:32:
                    e6:d4:ac:c3:d5:bd:a3:c4:95:07:60:2f:24:0a:b1:
                    a8:ed:6d:cb:b2:ee:0a:c3:8c:01:fe:e9:65:b9:ba:
                    7c:09:80:4a:6d:b2:f1:d4:23:7e:c6:5a:0e:89:78:
                    bd:25:bf:e1:e8:11:f6:7e:d5:b7:6e:66:77:de:88:
                    85:1b:10:63:e2:95:2a:e0:ad:b8:e1:a1:bc:3f:88:
                    38:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CA:75:6E:8D:40:0F:DE:60:15:4E:C9:33:3C:83:81:63:E9:2C:BB
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e7:47:aa:53:b9:ba:34:8b:a4:1f:a6:f7:58:40:bb:60:44:
         1c:ab:e4:d8:c1:99:37:04:a3:30:03:cd:88:93:6b:b8:f6:22:
         56:c1:af:1f:a7:ba:d5:9b:32:2c:13:57:7c:b6:6f:66:fb:a5:
         b3:f2:56:11:0b:f2:c9:12:96:0c:31:42:10:09:8e:36:1f:3d:
         c5:02:3a:32:e6:de:24:06:1f:75:09:cf:be:36:35:9a:7b:06:
         83:c1:01:60:04:01:fe:9e:37:53:f3:c5:5d:cf:a3:b8:61:31:
         c7:fc:a9:30:55:e8:1c:30:60:ff:0c:e8:cb:fb:27:b2:ec:2f:
         44:5b:f9:62:b9:4e:b8:f8:bf:bd:39:5b:ba:f3:99:a6:25:8c:
         1d:fd:58:cf:05:48:0f:e9:6b:29:4b:4d:54:d5:cb:2d:9c:35:
         99:df:83:6d:a8:43:e1:4b:fb:62:48:07:60:be:ce:5f:4a:8e:
         eb:b0:6e:74:09:c8:6a:ea:8c:ba:41:75:0b:8a:92:2e:6b:fe:
         34:e4:d5:07:e8:98:d8:a2:cb:42:3b:7f:22:a7:e1:d4:8c:c5:
         93:cb:2b:f6:d2:75:c3:ff:8c:c9:fb:b3:8f:35:b2:22:02:b7:
         8d:e2:99:6b:ba:50:11:f5:b1:c8:59:24:64:d5:c3:d2:28:45:
         a1:18:cd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:49:03 2025 by rpki-client