Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
File:                     3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json)
Hash identifier:          lB7NLym7YHcMiPhcFn4HocY7A7XOi9wM4MQMosb/GkQ=
Subject key identifier:   E5:8E:B8:4F:4D:7A:EE:DD:4D:C7:C9:6A:1D:E4:23:06:0E:8F:47:96
Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Certificate issuer:       /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Certificate serial:       1A185FDD5CC76660B456FFC563A9C885D60398D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
Manifest number:          E0
Signing time:             Wed 05 Nov 2025 06:01:44 +0000
Manifest this update:     Wed 05 Nov 2025 05:56:44 +0000
Manifest next update:     Thu 06 Nov 2025 08:03:44 +0000
Files and hashes:         1: 3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa (hash: 85gBMcl8T92cShSttg2IE1+cL7srToN1WMPpMffNR/c=)
                          2: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: VeUaF9Fs+vmhGZmhJRDPE5pYzDka0DB7WP5LLxv96M4=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 08:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:18:5f:dd:5c:c7:66:60:b4:56:ff:c5:63:a9:c8:85:d6:03:98:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
        Validity
            Not Before: Nov  5 05:56:44 2025 GMT
            Not After : Nov  6 08:03:44 2025 GMT
        Subject: CN=E58EB84F4D7AEEDD4DC7C96A1DE423060E8F4796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:67:84:f0:96:a1:3d:bf:f5:f9:d9:bf:4a:ba:
                    6c:7a:0e:95:d3:c1:f2:1a:e8:03:6a:a7:62:ee:dc:
                    81:f3:b7:65:68:65:11:14:2d:a0:45:17:d5:6c:0f:
                    b3:80:0c:35:f3:c8:72:4b:c7:fe:c3:d0:8c:ce:4e:
                    d5:95:75:4d:a8:72:68:51:70:1d:b8:28:c3:2b:14:
                    ab:54:aa:40:e5:51:ca:44:17:0f:45:4d:c9:52:dd:
                    d0:f4:f7:85:e5:a8:29:c2:fe:47:74:58:ce:23:c3:
                    8e:e1:26:ed:06:8d:69:ca:3f:fb:7f:b6:c2:8d:07:
                    b0:57:22:ad:7b:c6:be:11:3e:bc:80:16:13:fa:d2:
                    3e:64:fd:e8:c3:b5:3f:05:74:76:cf:41:b5:aa:cf:
                    9e:62:df:ff:52:69:df:fc:40:3b:fb:2b:33:48:20:
                    b5:d4:64:a2:11:60:2f:d5:72:ca:17:37:46:4e:af:
                    f2:69:bd:6f:47:80:fc:17:34:5c:f0:ed:99:49:ac:
                    0f:92:6d:bf:3e:e4:1a:53:91:0c:4f:df:4d:da:9f:
                    da:ae:34:7c:ac:75:00:1d:8d:02:93:31:97:29:1e:
                    5f:fb:0d:ac:11:66:39:c4:3d:f5:86:4d:a1:27:99:
                    7e:68:c1:88:d7:a8:5e:b3:2e:42:86:7e:b1:b4:4d:
                    98:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8E:B8:4F:4D:7A:EE:DD:4D:C7:C9:6A:1D:E4:23:06:0E:8F:47:96
            X509v3 Authority Key Identifier:
                keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:76:8b:1e:a3:94:58:8b:33:4a:f6:58:4d:9b:68:83:fd:d3:
         73:08:61:78:a2:ac:de:a3:96:f4:80:e7:77:58:54:1d:0e:34:
         95:21:28:78:ce:e4:38:ab:c3:50:2f:73:a4:53:9a:ad:66:4f:
         a0:3b:e4:c8:b0:e1:27:63:d7:f7:a0:d5:0b:22:f7:4b:17:4c:
         9c:72:87:a7:88:d6:5f:4b:89:8f:75:92:96:af:29:ca:9a:e8:
         53:39:5a:e8:74:67:26:90:7d:e7:ca:04:07:cb:3f:43:ef:41:
         fb:f0:52:ad:2f:78:0c:9b:5a:07:7b:49:5f:00:7f:ba:16:4b:
         f6:e9:6f:f6:70:9b:ea:5c:6d:03:0f:0f:78:f0:96:4a:10:1a:
         2a:8b:d3:52:6e:24:33:5f:e1:fe:8e:6b:df:2e:0c:76:be:3b:
         26:30:0f:98:33:15:23:fc:34:c3:27:79:32:6e:fb:62:d3:0a:
         96:d4:e7:89:9a:0a:ee:3c:34:6d:53:7f:0f:4c:ed:6d:a3:25:
         14:27:da:d9:b7:15:88:0b:b2:c7:21:be:e2:71:10:14:61:4b:
         f6:58:fe:a6:32:15:c3:14:61:1d:51:15:95:12:84:68:ad:7c:
         ed:6e:c6:37:cb:38:91:ff:cb:c4:72:fb:46:f8:43:36:34:49:
         95:19:e4:6b
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUGhhf3VzHZmC0Vv/FY6nIhdYDmNcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzAxRUUwMDAwMTEwLwYDVQQFEygzRjY3MDU3Rjc3
Qjg2NjAzQjZDMjE2RkY1NzdDQjMxNDYwNTNFNEU1MB4XDTI1MTEwNTA1NTY0NFoX
DTI1MTEwNjA4MDM0NFowMzExMC8GA1UEAxMoRTU4RUI4NEY0RDdBRUVERDREQzdD
OTZBMURFNDIzMDYwRThGNDc5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM1nhPCWoT2/9fnZv0q6bHoOldPB8hroA2qnYu7cgfO3ZWhlERQtoEUX1WwP
s4AMNfPIckvH/sPQjM5O1ZV1TahyaFFwHbgowysUq1SqQOVRykQXD0VNyVLd0PT3
heWoKcL+R3RYziPDjuEm7QaNaco/+3+2wo0HsFcirXvGvhE+vIAWE/rSPmT96MO1
PwV0ds9BtarPnmLf/1Jp3/xAO/srM0ggtdRkohFgL9Vyyhc3Rk6v8mm9b0eA/Bc0
XPDtmUmsD5Jtvz7kGlORDE/fTdqf2q40fKx1AB2NApMxlykeX/sNrBFmOcQ99YZN
oSeZfmjBiNeoXrMuQoZ+sbRNmNsCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBTljrhP
TXru3U3HyWod5CMGDo9HljAfBgNVHSMEGDAWgBQ/ZwV/d7hmA7bCFv9XfLMUYFPk
5TAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3
NGI0MmNhMTg2Ny8wLzNGNjcwNTdGNzdCODY2MDNCNkMyMTZGRjU3N0NCMzE0NjA1
M0U0RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3
QzcyRkQxRkYyL1AyY0ZmM2U0WmdPMndoYl9WM3l6RkdCVDVPVS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3
LzAvM0Y2NzA1N0Y3N0I4NjYwM0I2QzIxNkZGNTc3Q0IzMTQ2MDUzRTRFNS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIt2ix6jlFiLM0r2WE2baIP903MIYXiirN6jlvSA53dYVB0ONJUhKHjO
5Dirw1Avc6RTmq1mT6A75Miw4Sdj1/eg1Qsi90sXTJxyh6eI1l9LiY91kpavKcqa
6FM5Wuh0ZyaQfefKBAfLP0PvQfvwUq0veAybWgd7SV8Af7oWS/bpb/Zwm+pcbQMP
D3jwlkoQGiqL01JuJDNf4f6Oa98uDHa+OyYwD5gzFSP8NMMneTJu+2LTCpbU54ma
Cu48NG1Tfw9M7W2jJRQn2tm3FYgLsschvuJxEBRhS/ZY/qYyFcMUYR1RFZUShGit
fO1uxjfLOJH/y8Ry+0b4QzY0SZUZ5Gs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:40:19 2025 by rpki-client