Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
File:                     3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json)
Hash identifier:          yI1zzGMoDnMeeJ5lXO58dYcU8l4/dHatbbs1PRZGEWY=
Subject key identifier:   B1:57:12:88:D4:F5:F0:92:B9:79:BD:0A:9D:C4:58:39:55:77:98:B5
Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Certificate issuer:       /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Certificate serial:       30B5272ABB6AB80B99313C2DD0E300649B2359D0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
Manifest number:          024C
Signing time:             Tue 28 Jul 2026 21:36:54 +0000
Manifest this update:     Tue 28 Jul 2026 21:31:54 +0000
Manifest next update:     Thu 30 Jul 2026 00:58:54 +0000
Files and hashes:         1: 3136352e39392e3132342e302f32332d3234203d3e20343031363832.roa (hash: LEjTWe6fpK8sHggE9hBQ7iuKgwnA3HoC/5f5zkwhZbE=)
                          2: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: MSW6IFONPKDBJomWgltcN7fbM8vfXrIXhUUM+0iMAY4=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b5:27:2a:bb:6a:b8:0b:99:31:3c:2d:d0:e3:00:64:9b:23:59:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
        Validity
            Not Before: Jul 28 21:31:54 2026 GMT
            Not After : Jul 30 00:58:54 2026 GMT
        Subject: CN=B1571288D4F5F092B979BD0A9DC45839557798B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:6f:1c:8c:b9:c5:82:aa:04:eb:ed:1c:f3:
                    1f:7a:18:8b:da:e1:46:18:dd:c2:f7:04:b3:fa:ee:
                    5d:d7:fd:37:54:53:6d:3a:f6:20:1c:c9:c2:a7:9a:
                    a2:2f:f8:bf:93:e7:39:7d:cc:0c:4a:f0:c1:9c:9d:
                    d4:f3:48:82:fc:a7:7f:64:02:27:ac:d5:9b:fc:16:
                    7f:3b:43:5b:82:aa:85:bc:a2:58:89:db:ae:cd:b7:
                    91:1b:e8:3f:4d:6c:c1:3b:53:d5:fd:9e:27:65:8e:
                    22:a8:6f:d3:ab:91:dd:6d:1c:ce:41:ab:dc:03:6a:
                    14:1a:ba:c7:4b:20:d7:68:c9:ea:ef:2b:b0:06:38:
                    f7:6e:b7:ec:93:57:2d:b5:d0:15:36:ce:b5:e0:c0:
                    e7:4d:a0:54:03:80:7e:90:91:14:62:51:63:6b:c5:
                    7d:8e:1b:d6:26:35:23:bb:51:aa:76:0e:08:fa:9e:
                    f4:43:9b:2c:bd:b6:e8:72:71:2f:4a:04:88:c7:92:
                    23:b4:60:46:f3:a0:d9:55:eb:a8:c2:49:3d:99:5b:
                    dc:04:81:6d:48:5e:fb:5d:2a:0f:de:ea:33:27:9f:
                    4b:8a:76:99:48:ff:07:7c:bb:bc:57:e0:9c:91:a2:
                    82:3d:07:09:43:52:e1:cc:81:33:34:88:70:2e:ad:
                    92:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:57:12:88:D4:F5:F0:92:B9:79:BD:0A:9D:C4:58:39:55:77:98:B5
            X509v3 Authority Key Identifier:
                keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:70:c9:96:5b:4d:3e:d0:22:ad:16:2d:44:40:79:79:36:18:
         cc:21:6d:30:c8:11:21:72:07:e4:76:ad:26:3c:3d:4f:cb:e8:
         03:43:36:c2:ab:57:97:25:49:fd:ea:ca:89:86:cb:ca:7a:e3:
         1b:3b:5c:91:48:47:83:50:3e:3b:05:73:92:5d:ca:5f:44:40:
         e0:bd:6c:4d:b1:ae:8f:ca:9b:18:f1:40:fd:19:6f:2d:cf:cb:
         2d:4a:d4:2a:b4:68:71:41:59:21:1a:ed:9d:1c:17:3e:35:62:
         d3:ea:06:29:4e:cb:f0:1b:3d:d7:69:f8:2c:54:50:53:a2:0a:
         f1:48:b4:6e:af:f1:2d:f2:4c:92:87:e4:fb:71:4c:ac:85:bc:
         79:bb:41:6e:ec:75:89:96:81:02:d3:c6:88:1d:ee:5f:cf:23:
         0e:f4:8d:05:18:e8:0d:92:46:fa:f3:84:62:45:9c:c3:68:8e:
         a7:52:a7:57:10:b7:f1:51:d4:b1:ea:c1:9c:da:e9:dc:8e:bd:
         a7:b9:57:93:dc:e6:26:d1:d5:a3:0e:b7:fe:e3:50:74:02:00:
         c4:4a:e0:00:f6:35:e7:c2:8b:0c:03:45:94:a4:95:79:08:36:
         29:a9:c8:35:1f:cb:d2:0f:5c:07:3d:a8:17:0a:09:78:31:4c:
         c4:cb:db:bd
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUMLUnKrtquAuZMTwt0OMAZJsjWdAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzAxRUUwMDAwMTEwLwYDVQQFEygzRjY3MDU3Rjc3
Qjg2NjAzQjZDMjE2RkY1NzdDQjMxNDYwNTNFNEU1MB4XDTI2MDcyODIxMzE1NFoX
DTI2MDczMDAwNTg1NFowMzExMC8GA1UEAxMoQjE1NzEyODhENEY1RjA5MkI5NzlC
RDBBOURDNDU4Mzk1NTc3OThCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANNJbxyMucWCqgTr7RzzH3oYi9rhRhjdwvcEs/ruXdf9N1RTbTr2IBzJwqea
oi/4v5PnOX3MDErwwZyd1PNIgvynf2QCJ6zVm/wWfztDW4KqhbyiWInbrs23kRvo
P01swTtT1f2eJ2WOIqhv06uR3W0czkGr3ANqFBq6x0sg12jJ6u8rsAY492637JNX
LbXQFTbOteDA502gVAOAfpCRFGJRY2vFfY4b1iY1I7tRqnYOCPqe9EObLL226HJx
L0oEiMeSI7RgRvOg2VXrqMJJPZlb3ASBbUhe+10qD97qMyefS4p2mUj/B3y7vFfg
nJGigj0HCUNS4cyBMzSIcC6tkg8CAwEAAaOCAkYwggJCMB0GA1UdDgQWBBSxVxKI
1PXwkrl5vQqdxFg5VXeYtTAfBgNVHSMEGDAWgBQ/ZwV/d7hmA7bCFv9XfLMUYFPk
5TAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3
NGI0MmNhMTg2Ny8wLzNGNjcwNTdGNzdCODY2MDNCNkMyMTZGRjU3N0NCMzE0NjA1
M0U0RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3
QzcyRkQxRkYyL1AyY0ZmM2U0WmdPMndoYl9WM3l6RkdCVDVPVS5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3
LzAvM0Y2NzA1N0Y3N0I4NjYwM0I2QzIxNkZGNTc3Q0IzMTQ2MDUzRTRFNS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBADRwyZZbTT7QIq0WLURAeXk2GMwhbTDIESFyB+R2rSY8PU/L6ANDNsKr
V5clSf3qyomGy8p64xs7XJFIR4NQPjsFc5Jdyl9EQOC9bE2xro/KmxjxQP0Zby3P
yy1K1Cq0aHFBWSEa7Z0cFz41YtPqBilOy/AbPddp+CxUUFOiCvFItG6v8S3yTJKH
5PtxTKyFvHm7QW7sdYmWgQLTxogd7l/PIw70jQUY6A2SRvrzhGJFnMNojqdSp1cQ
t/FR1LHqwZza6dyOvae5V5Pc5ibR1aMOt/7jUHQCAMRK4AD2NefCiwwDRZSklXkI
NimpyDUfy9IPXAc9qBcKCXgxTMTL270=
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:16:45 2026 by rpki-client