Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
File:                     3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json)
Hash identifier:          YuWY646boFRsllX3Mhi6MapyP24qcvNls9HbJFz3z5U=
Subject key identifier:   25:0B:AB:4A:4A:FE:FD:AE:5D:B1:9F:09:F7:B7:F4:EE:58:FC:23:57
Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Certificate issuer:       /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Certificate serial:       2325F20827EA6BD697B47749F6FDFF3C1AFFEDC3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
Manifest number:          01BF
Signing time:             Thu 16 Apr 2026 15:53:32 +0000
Manifest this update:     Thu 16 Apr 2026 15:48:32 +0000
Manifest next update:     Fri 17 Apr 2026 16:55:32 +0000
Files and hashes:         1: 3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa (hash: 85gBMcl8T92cShSttg2IE1+cL7srToN1WMPpMffNR/c=)
                          2: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: hYef3aGLyXlGIXZmoooQix2zdP5kz37AOnGQfGToXSc=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 16:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:25:f2:08:27:ea:6b:d6:97:b4:77:49:f6:fd:ff:3c:1a:ff:ed:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
        Validity
            Not Before: Apr 16 15:48:32 2026 GMT
            Not After : Apr 17 16:55:32 2026 GMT
        Subject: CN=250BAB4A4AFEFDAE5DB19F09F7B7F4EE58FC2357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:8d:7e:f2:02:7b:b2:a5:8a:e3:48:60:24:
                    af:21:78:78:b0:01:95:04:63:44:b5:ff:45:81:96:
                    cf:3e:06:07:da:4a:bf:71:b7:21:d3:87:a9:a0:eb:
                    aa:28:b4:0e:d2:71:57:e1:9a:d0:00:4f:86:19:2c:
                    77:8c:94:be:e7:e9:a0:e1:5c:0b:4e:de:fd:51:aa:
                    b0:dc:17:bd:35:f6:cb:1d:59:d7:7c:c1:8c:62:77:
                    d1:a1:9a:87:e2:ae:cb:6e:43:d3:0e:d1:c0:8c:ae:
                    44:1c:53:8c:27:fa:14:11:96:1b:ed:d8:1a:d4:2b:
                    6b:13:75:b4:64:da:dd:68:dc:b5:a0:f5:81:1b:41:
                    c8:44:b2:b2:64:7d:6d:7e:f9:81:60:4c:5b:67:48:
                    e8:ea:dd:94:95:6e:86:50:e0:91:18:f1:94:19:b3:
                    c2:71:8d:fa:0b:c7:ad:f5:f8:fa:bd:ea:64:70:d2:
                    17:0a:0e:c0:ee:9b:23:51:b6:c3:97:fb:f7:28:d5:
                    0a:f5:73:2e:ea:45:be:f5:63:c7:c0:a9:1e:db:7f:
                    c1:78:80:30:12:e8:72:0a:cd:01:fe:a1:53:f2:06:
                    df:74:06:9f:87:b0:64:9e:d0:da:5f:a9:7f:05:7e:
                    00:4f:89:2d:2a:6b:f7:32:ac:a5:fe:cb:d0:8f:f1:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0B:AB:4A:4A:FE:FD:AE:5D:B1:9F:09:F7:B7:F4:EE:58:FC:23:57
            X509v3 Authority Key Identifier:
                keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:49:32:66:b0:93:32:9a:6e:be:f4:0e:64:91:08:88:f6:df:
         7a:f0:da:1c:6b:0c:cf:0e:5d:74:99:bc:ee:bb:d7:ac:d1:8f:
         bc:c4:cb:40:90:6f:df:df:a7:ca:f0:89:19:8d:d1:bf:a1:4a:
         56:bf:f6:80:7d:85:2b:17:fd:75:9b:26:c5:7f:ab:51:97:cc:
         51:e6:8a:4d:8c:05:99:69:85:52:6a:ec:73:bf:9d:d1:39:2a:
         4f:62:7f:87:91:1f:8d:35:ca:7f:f3:df:9c:bd:0c:92:b3:a0:
         45:53:1d:82:d1:ae:de:6d:bd:88:c7:b2:bf:f0:60:c5:2c:4c:
         d7:13:aa:29:70:46:b7:42:1e:55:04:fe:d4:c1:a9:6f:a7:61:
         c2:e5:1a:30:39:ce:c4:ad:19:74:f6:70:ad:fc:2f:64:c7:92:
         4d:a1:27:3c:aa:ad:1c:99:90:4b:6d:15:88:42:dd:0a:4b:6c:
         14:43:38:36:94:7f:ff:67:c6:f6:73:a5:10:bc:e1:c1:8a:3d:
         93:e1:9d:d4:5b:7f:2f:46:e6:5b:5b:9c:43:a0:dd:81:3c:55:
         51:f6:29:aa:13:95:fa:eb:6c:c5:f2:62:88:6a:28:18:43:c9:
         79:33:7d:8f:5d:82:49:7b:e2:50:72:79:0c:e7:aa:a4:d0:b5:
         24:a5:59:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:42 2026 by rpki-client