Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
File:                     3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json)
Hash identifier:          3n0nr6PdYjEJIp6wHQZbwkdxoQSRjzENq4yVps0NyZ8=
Subject key identifier:   CF:B0:D7:1B:EE:1C:DA:93:32:22:8E:3F:47:FF:56:14:66:11:63:72
Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Certificate issuer:       /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Certificate serial:       4C5C3E8279852F4AEDA786E1A0E10C5880D31F8F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
Manifest number:          64
Signing time:             Mon 04 Aug 2025 02:30:00 +0000
Manifest this update:     Mon 04 Aug 2025 02:25:00 +0000
Manifest next update:     Tue 05 Aug 2025 03:55:00 +0000
Files and hashes:         1: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: 67/Fr/u4nbAh5scf3WxX4clMF5TVQy1cZ3GjcS+Ajjs=)
                          2: 3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa (hash: 85gBMcl8T92cShSttg2IE1+cL7srToN1WMPpMffNR/c=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 Aug 2025 03:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5c:3e:82:79:85:2f:4a:ed:a7:86:e1:a0:e1:0c:58:80:d3:1f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
        Validity
            Not Before: Aug  4 02:25:00 2025 GMT
            Not After : Aug  5 03:55:00 2025 GMT
        Subject: CN=CFB0D71BEE1CDA9332228E3F47FF561466116372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:3a:6b:ea:78:64:36:93:34:15:59:94:13:
                    6d:a6:3f:c8:2b:d7:8c:03:f3:cd:16:db:b9:4c:70:
                    88:bd:0f:58:16:c0:8a:90:f7:6e:0c:57:d5:70:51:
                    57:82:32:f5:84:2a:c8:da:84:9a:f9:ee:e6:c4:7d:
                    b6:00:c2:4d:74:4c:f7:4b:18:fc:61:54:a6:7c:0a:
                    7a:c8:81:1f:b7:50:bc:97:75:82:8a:a5:b4:d5:86:
                    b8:f1:07:36:48:f3:6d:80:68:7a:89:6e:ad:f8:c2:
                    f0:8f:73:8b:b4:f8:ab:1d:2e:6d:e0:c1:84:df:58:
                    7e:b4:2e:e8:65:ae:5a:f8:c3:cc:b6:0e:c3:e3:1c:
                    a2:f7:3e:ce:fa:aa:de:6e:60:d4:82:57:59:ef:a4:
                    24:e6:6c:46:90:35:6a:ea:83:44:63:9e:db:3f:06:
                    bb:08:2f:0a:07:75:ea:69:a1:4f:38:5f:c1:3f:c0:
                    c9:cf:9e:39:4b:7f:46:83:6a:f7:63:4b:80:79:9e:
                    97:6e:6d:c1:73:b1:26:b3:95:82:b3:11:40:de:e6:
                    3c:e6:bd:e6:5c:64:ca:90:5b:9e:c6:32:aa:43:1d:
                    3f:2c:2f:a8:d6:ca:28:7c:6e:9a:85:75:66:d8:06:
                    44:10:4d:1f:3d:19:e2:53:86:d3:4d:96:04:a7:f5:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B0:D7:1B:EE:1C:DA:93:32:22:8E:3F:47:FF:56:14:66:11:63:72
            X509v3 Authority Key Identifier:
                keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:16:cf:bb:1e:57:2b:b9:7c:d6:bf:10:b6:00:2f:80:87:5c:
         5e:30:f5:d6:4e:31:bb:12:b6:79:ff:9a:7b:75:e3:1c:c0:6c:
         50:5b:ab:26:a0:21:1b:a6:58:db:4b:1e:2a:16:b4:99:1c:e3:
         ad:e5:e2:e4:79:50:9d:18:fa:b6:ae:ff:dd:67:b0:20:d6:6e:
         d8:17:97:99:be:dc:31:7e:eb:de:81:cd:1b:c9:d7:24:6c:de:
         0b:a0:e6:a7:d9:b9:5f:53:81:54:1f:be:67:e7:cc:5d:61:cc:
         99:86:c4:5e:35:31:2c:7d:b1:51:35:f1:79:a8:cf:8a:a7:2c:
         a5:71:10:7e:c0:bf:ac:12:dd:cd:f3:5b:0e:4a:f5:35:7a:fb:
         e7:f5:7c:35:4a:44:5a:88:93:02:b2:2e:3f:8a:1d:97:37:96:
         5a:8f:6c:13:a8:1a:dc:7e:85:a2:e0:12:99:ad:c4:35:a3:d4:
         40:7c:39:df:bf:e5:5d:b1:56:0a:1e:99:26:42:a1:52:58:e4:
         15:de:44:0c:e3:c2:00:07:43:bf:c1:ad:a8:32:8c:ee:3f:df:
         b9:98:cf:4e:74:7f:31:66:6c:19:f5:9a:5a:31:2f:c2:08:75:
         7b:a5:08:7e:92:d5:58:fb:e3:ba:b0:d9:cd:fc:77:00:31:78:
         d5:4a:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:37 2025 by rpki-client