Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          ZcZf/cgYsOsp3BUmFXclyLCegejy+XhS9zDRfGkFk7s=
Subject key identifier:   E7:67:66:43:B6:94:50:29:6C:A7:44:73:76:9F:CB:DD:E8:51:63:94
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       1F50FEA2B3AC373751940BBC489CE00CB0068EE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          FA
Signing time:             Mon 20 Oct 2025 06:41:00 +0000
Manifest this update:     Mon 20 Oct 2025 06:36:00 +0000
Manifest next update:     Tue 21 Oct 2025 10:11:00 +0000
Files and hashes:         1: 3130332e3230382e38342e302f32342d3234203d3e203533383530.roa (hash: FXU2BOZtL90B1obM1s07UWKQTLZt5lRjO+wB7UMEG/U=)
                          2: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: Yhv2BrO/tbRBbxkrrWpYAJTNGy1gBE8Sm33Qc+ycmjo=)
                          3: 323430343a336438303a3a2f33322d3438203d3e203631313338.roa (hash: vR13YTps2IOLJ32Czol962tgM592qRm1uemaECC1xjU=)
                          4: 3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (hash: ZcPW7+BE1LN+IBKqmSb+c1D8xmcmnOrZ+AV6UlpS48I=)
                          5: 3130332e3230382e38362e302f32332d3234203d3e203631313338.roa (hash: vTK6sEV7joXKRp0wkFdncV/xbR2SIxNz0+q46rwBcC8=)
                          6: 323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: cfy0Lb3p1KGIvT1Dv3WTKXomnigIqUZxC3qUSKU1X8Q=)
                          7: 3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (hash: xenml2DtldDc1AME+ONCgNO05UC9yi+x8jLwONvYCYc=)
                          8: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=)
                          9: 3130332e3230382e38342e302f32322d3234203d3e203631313338.roa (hash: EFokon3uzovDNn0Unk4MoVGX2uXU8iSPtyRbEFKVwE8=)
                          10: 323430343a336438303a3a2f33322d3438203d3e20313531383137.roa (hash: Ne68E09zoDQRBk9inQni3vpBYIBAMeRKDNt1f2IWRb0=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 10:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:50:fe:a2:b3:ac:37:37:51:94:0b:bc:48:9c:e0:0c:b0:06:8e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Oct 20 06:36:00 2025 GMT
            Not After : Oct 21 10:11:00 2025 GMT
        Subject: CN=E7676643B69450296CA74473769FCBDDE8516394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cf:26:34:d1:41:e5:47:d0:77:cb:e9:5c:23:
                    d4:f6:ae:ef:a2:13:a2:c0:a0:1d:8b:bc:ab:a8:01:
                    3c:7d:e6:8a:99:49:f7:6f:bd:b9:a1:50:34:bc:f8:
                    aa:38:c9:43:8e:06:8c:cb:21:e2:b6:ec:3d:e0:4c:
                    08:78:d9:fb:8e:8a:e2:a7:44:dc:b9:42:a4:41:c0:
                    bd:25:2f:79:4e:1d:fa:e5:4e:77:31:4c:74:28:50:
                    bc:26:21:a7:25:fd:ce:ba:cc:1d:1f:3b:fc:df:1b:
                    33:b5:12:5c:1b:3b:dc:20:16:c7:13:35:ce:90:6f:
                    30:09:99:05:84:89:9a:a1:2c:f0:23:bd:a3:34:86:
                    1d:9f:4a:55:c6:91:0f:44:65:d0:66:6e:27:26:08:
                    7d:25:5a:ad:fd:ff:56:a7:ea:f9:58:87:c2:9a:a1:
                    3d:6e:7b:d3:9a:19:f7:15:be:55:1f:94:3e:77:55:
                    6a:dd:1e:c8:31:4b:8b:75:7b:05:2d:40:81:c3:7d:
                    3f:13:bf:38:f6:ff:1f:8e:de:5b:9d:62:ed:2f:d3:
                    fe:c9:de:97:ca:c6:81:04:5f:3e:70:e1:e7:8a:3f:
                    63:de:65:d8:e8:73:7d:5d:9d:19:af:7c:45:d6:01:
                    f5:d3:5e:16:d8:31:47:2f:ca:95:a9:52:ae:72:87:
                    f5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:67:66:43:B6:94:50:29:6C:A7:44:73:76:9F:CB:DD:E8:51:63:94
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b4:35:30:17:d3:b6:19:29:5f:e8:f1:73:b5:8a:c5:ac:3e:
         fd:88:2c:6e:9e:6d:54:d9:60:ad:4b:fa:09:73:ad:c7:92:27:
         0d:42:d1:6a:d8:68:49:15:7a:54:1c:87:c2:8d:29:fd:87:4f:
         0f:4d:4d:89:69:9e:39:5a:b6:76:bd:a4:3b:1c:0b:6d:85:83:
         76:a1:39:5a:e5:fe:44:9d:e6:4d:b9:f8:97:60:3f:d2:f2:95:
         48:4d:d2:ab:76:34:8c:b7:80:06:0e:57:81:dc:cc:37:03:6c:
         79:25:33:49:f4:51:5f:a6:f9:72:86:39:b0:d7:20:3c:87:26:
         90:97:bd:0a:88:94:8f:5e:35:f6:ba:0b:98:91:f5:1c:68:89:
         9f:15:40:7e:64:fb:f5:d1:c0:0f:4c:c8:94:b4:0b:b1:d5:03:
         3d:d2:04:01:78:5b:af:7d:ea:3b:17:2c:01:cd:87:7d:39:bf:
         82:da:0f:01:0c:b0:1d:a9:67:ee:97:a0:40:f8:ef:19:2c:e5:
         bd:70:a9:0a:54:70:f2:1c:8f:e2:aa:6f:16:b3:bf:40:92:b3:
         38:4b:a5:fd:99:0a:79:91:b9:9c:45:9a:79:ba:82:58:ef:8e:
         22:01:4c:b9:f9:e8:8a:9a:bf:8d:eb:25:30:b3:33:28:36:0a:
         6f:bc:0a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:38:47 2025 by rpki-client