Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
File:                     3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json)
Hash identifier:          BGgXGj0lNBRZ5RHOThDAVblgIs8pg3r0A2282Bgp6K8=
Subject key identifier:   08:27:A7:9C:D7:F6:72:04:31:A1:3B:C4:27:DF:3C:F1:2B:E5:DD:53
Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Certificate issuer:       /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Certificate serial:       18C6DE4EE836821C6A7A749487890FEB93BDB66F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
Manifest number:          0293
Signing time:             Sun 20 Sep 2026 10:19:40 +0000
Manifest this update:     Sun 20 Sep 2026 10:14:40 +0000
Manifest next update:     Mon 21 Sep 2026 11:07:40 +0000
Files and hashes:         1: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: vaIM3W/NI4eWaAUFbYEcuj0d6QNGU2jXUCGyCm/e5eI=)
                          2: 3136352e39392e3132342e302f32332d3234203d3e20343031363832.roa (hash: LEjTWe6fpK8sHggE9hBQ7iuKgwnA3HoC/5f5zkwhZbE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 11:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c6:de:4e:e8:36:82:1c:6a:7a:74:94:87:89:0f:eb:93:bd:b6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
        Validity
            Not Before: Sep 20 10:14:40 2026 GMT
            Not After : Sep 21 11:07:40 2026 GMT
        Subject: CN=0827A79CD7F6720431A13BC427DF3CF12BE5DD53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:8d:72:1f:b2:d7:66:1e:30:cd:9d:87:f0:
                    a7:f2:e4:48:14:df:37:36:cf:fe:03:98:b6:00:92:
                    6c:5f:ba:4b:4f:a7:57:82:05:47:82:bb:d6:ba:16:
                    54:9c:53:4c:17:80:23:45:c1:c4:d7:fe:e2:fd:72:
                    c6:e6:9a:51:61:7a:85:fd:3d:e9:43:6d:c0:01:36:
                    9a:db:9d:19:6a:e8:8b:81:68:49:d7:1f:be:b9:2d:
                    77:28:b5:3c:3a:08:9e:71:c3:29:01:67:49:f9:43:
                    00:76:24:ad:55:e1:65:9e:f0:37:04:62:a1:87:38:
                    2e:45:ed:35:6a:52:a1:9e:62:4d:9b:be:ed:75:32:
                    40:90:44:28:42:a1:36:92:11:0b:d1:4c:2b:66:9a:
                    15:09:ca:5b:26:23:d8:47:21:15:67:c8:fd:b6:4f:
                    1a:be:e5:14:a5:e2:5c:90:94:86:a0:16:68:19:32:
                    45:47:a5:e3:e0:99:8d:28:b0:40:e3:0f:8a:6d:78:
                    83:7f:a3:44:48:08:7c:e2:e1:4f:d9:a7:9d:3c:03:
                    07:c7:1b:a3:e4:5f:24:be:7e:de:41:8f:cd:94:3b:
                    ca:f9:6b:a6:ae:a8:5e:0b:c5:24:11:1c:3e:d3:77:
                    e5:61:cb:b2:de:64:25:a5:68:ce:3d:35:c6:f5:02:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:27:A7:9C:D7:F6:72:04:31:A1:3B:C4:27:DF:3C:F1:2B:E5:DD:53
            X509v3 Authority Key Identifier:
                keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:54:a2:a3:e5:17:85:ef:6f:f4:d0:ea:90:5b:86:4b:16:9e:
         c4:b2:c7:26:4b:c5:c2:5a:15:b3:90:0e:48:ea:dd:42:96:33:
         18:42:1c:e3:ed:90:a1:57:7c:9a:1d:9f:73:eb:9e:65:3a:32:
         e2:80:44:f7:31:a6:b0:76:aa:c3:5b:44:83:4f:dd:a8:6a:c4:
         43:be:e7:df:38:00:e3:c8:81:00:bd:2e:9f:c7:44:ce:31:16:
         28:fd:38:ac:04:6f:6f:dc:eb:bb:d2:2a:90:e9:cb:94:22:6b:
         09:9b:7a:f0:a3:80:ea:5f:c3:bd:7f:30:b0:42:71:68:25:9b:
         29:86:12:23:ad:df:2d:1f:09:7f:7b:e0:11:03:c4:13:22:2f:
         d5:74:22:ae:26:f1:ba:46:96:2f:73:6c:5a:e0:74:bc:93:a9:
         19:45:d8:0b:df:3f:fd:44:90:d4:c2:57:c0:0a:0b:20:63:77:
         a3:bc:7e:a9:4f:ac:6d:be:55:2a:f9:4b:78:27:76:32:a6:c5:
         73:13:42:07:3f:19:47:ea:6b:a0:78:60:7d:44:8b:98:e8:8b:
         87:54:12:d8:12:3b:69:e6:8a:50:dc:c9:2e:e1:78:6b:58:5f:
         3d:9f:52:3c:10:3e:43:ce:fa:82:26:30:fc:26:b6:f9:55:46:
         a3:18:a0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:50:57 2026 by rpki-client