Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
File:                     5953AC0A64BF9656B442D3C32313435ECB495F68.mft (raw, json)
Hash identifier:          jOE93KiQ0gQwPsl2yQhdJwMz7v3GGISCCI3X3xW0pkg=
Subject key identifier:   87:42:4B:68:C6:DA:FC:8F:90:4B:26:E5:1A:81:EA:85:AA:E1:39:E1
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       3CD6D1B104F71F3C029CF926FA96D294FD36B4DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
Manifest number:          0DFB
Signing time:             Sat 14 Jun 2025 04:07:45 +0000
Manifest this update:     Sat 14 Jun 2025 04:02:45 +0000
Manifest next update:     Sun 15 Jun 2025 07:52:45 +0000
Files and hashes:         1: 3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (hash: DZm7eY1dDQqpgM+Bj24LbZlETuRRB0Yhf62KfdcOMC4=)
                          2: 3130332e36382e3130392e302f32342d3234203d3e20313336353537.roa (hash: hVB+MDtMs9vcnlXRBbJoSNzvilI9btPbCTuEKSp7v0s=)
                          3: 3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa (hash: ZQZLI1qPtNAxxry3up6DA8hMI4oyLs/BP/YpeGON6P4=)
                          4: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: STWJgizYfSvXoLc0xVLeX1S33lyCdFxHmoUznReSgcg=)
                          5: 3130332e36382e3130382e302f32322d3234203d3e203631313338.roa (hash: y71Jqn/IsEeUZRC1HkfWAUfedxJ4Io2cxc3Cn/07aRQ=)
                          6: 323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: npHdjTtF56K3mgLf1InuwXhPXZWD+/cOleIZk+cX5wk=)
                          7: 3130332e3230382e38362e302f32332d3234203d3e203631313338.roa (hash: CHT6G56fzaLGy1vOGCTjWL6I4eUNVpiRyVpCS5exgPs=)
                          8: 3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (hash: VayEcM2ZIzNaJt0L7h0Ogu1a/1DA9bJr61hv5Xj1wCs=)
                          9: 3130332e36382e3130382e302f32342d3234203d3e203631313338.roa (hash: F6/A8X0bwdTuQhkBPj8Rg2BKVJB7vnu46apG2DA0gc0=)
                          10: 3130332e36382e3130382e302f32342d3234203d3e20313439303230.roa (hash: w7nn29Q9Zo2hHtcWMx6PcPtmu/ApeiULYVzyscjDdbE=)
                          11: 323430343a336438303a3a2f33322d3438203d3e20313531383137.roa (hash: zn8s+iQYn3Bu653AJb7ALHYLRSkVvuUn8ISHvDSNLWg=)
                          12: EE962658B1226680140B4EA86F7D68CF498158D9.cer (hash: mngQ4kb91L5uHRGAPc7W6Lf2w7EzTTDyV29LLnhnHMI=)
                          13: 3130332e36382e3130382e302f32322d3234203d3e20313531383137.roa (hash: 3ph0Z9ow7khXCH2+1q0bzUj2cJFEnHGKhkL5nCBvurM=)
                          14: 5953AC0A64BF9656B442D3C32313435ECB495F68.crl (hash: Ht7JJt1d3dt3qM+mXpNZAn9zy1J3yWETW201IhnePPo=)
                          15: 3130332e3230382e38342e302f32342d3234203d3e203533383530.roa (hash: c1CmWIprRghJM5qA0rzW2dyWXCf9Hsni/hlHNnZFKuM=)
                          16: 3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa (hash: Jgln94ptStg0N3qt80yl/TjMDkHxjgAJgrK0/SDTRfQ=)
                          17: 323430343a336438303a3a2f33322d3438203d3e203631313338.roa (hash: /c/X143yChLTjZ34Frn6v7TKMTTbgLHR9tQy12OVHvM=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 07:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d6:d1:b1:04:f7:1f:3c:02:9c:f9:26:fa:96:d2:94:fd:36:b4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Jun 14 04:02:45 2025 GMT
            Not After : Jun 15 07:52:45 2025 GMT
        Subject: CN=87424B68C6DAFC8F904B26E51A81EA85AAE139E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:6a:fd:b6:0f:ab:19:16:01:03:65:37:b7:
                    8c:0c:47:1e:8d:7d:39:3b:e5:78:bb:98:f2:c1:e2:
                    56:7e:b3:6f:18:88:62:8f:bf:be:43:b4:20:3f:e6:
                    2d:24:35:76:c6:01:4d:d1:49:fa:fd:91:04:f7:ae:
                    78:1f:5f:e8:e7:dd:cb:18:38:49:4c:ec:3d:08:87:
                    2f:57:f5:21:e2:99:01:24:c2:b4:06:fb:40:cf:00:
                    35:dc:ab:76:25:c1:c5:63:cd:ee:00:18:50:5e:2b:
                    75:3c:60:56:b2:35:0c:bb:f3:84:55:1e:f4:d2:eb:
                    8e:2d:13:7a:31:50:c5:93:88:d5:13:15:18:3d:a7:
                    fa:d9:2a:e9:93:0a:7e:ba:ac:a5:e7:43:8c:3d:e9:
                    22:47:76:24:6b:15:16:3d:a1:1c:97:0b:5e:8b:b3:
                    a3:75:55:80:ac:06:49:36:30:d0:00:2b:b7:86:34:
                    61:42:5c:50:66:af:17:05:a7:28:c4:7b:1c:d9:ee:
                    7f:79:3c:6d:a6:d9:2e:bd:f7:2c:d9:19:22:ac:a6:
                    6d:5f:cc:2e:3f:55:22:13:f9:bc:d8:c2:01:1c:51:
                    a1:f7:ba:f1:78:e0:a3:fb:0f:b2:17:43:6d:2f:77:
                    26:ea:34:ec:0d:a2:ad:c0:f1:b1:64:22:28:2a:0c:
                    a0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:42:4B:68:C6:DA:FC:8F:90:4B:26:E5:1A:81:EA:85:AA:E1:39:E1
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:7b:d7:19:12:4f:85:74:0d:53:6c:b4:88:57:c1:6c:a4:1b:
         0c:09:67:26:05:85:76:78:c0:db:4c:06:c8:a9:2d:e1:02:aa:
         96:83:d4:3e:87:55:2d:49:7e:ee:07:e6:db:51:a0:ad:4e:e9:
         d7:2e:73:02:1c:b0:4b:44:69:ec:32:13:95:59:c1:92:91:ac:
         e4:89:a8:c8:62:ef:bf:95:6f:53:96:b0:e4:4b:26:37:9a:60:
         61:32:6f:3e:0f:f1:ef:4e:f5:54:a0:44:0c:be:c7:b3:04:29:
         af:57:2e:b3:2d:f5:f9:2a:66:87:d2:a0:7c:dd:04:33:14:c4:
         63:6e:5d:22:21:11:7c:6a:0c:99:60:11:92:51:8c:15:c8:71:
         d7:6c:d8:30:47:dd:3e:6d:ff:18:69:34:6a:ca:cc:8f:b8:95:
         f0:bd:fd:91:bb:0b:80:86:3b:13:9f:47:f6:58:bc:31:a2:e5:
         1c:74:89:be:7e:69:ad:57:c6:05:a6:8c:39:94:80:e8:c4:5c:
         cd:6e:b2:b7:a7:49:97:06:c1:9d:2e:07:c2:ed:35:66:ab:e2:
         22:c9:04:d9:6d:97:00:4c:d6:fa:75:94:ce:61:d9:1f:ae:b8:
         7d:97:6a:8a:21:dc:89:ed:f0:2c:2c:7c:e4:6d:33:26:b8:ff:
         71:89:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:40:49 2025 by rpki-client