Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
File:                     9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft (raw, json)
Hash identifier:          2UZ77jU4lubZ0XC9M0kxmw5l7hGth3ULmx70Y4CqMuw=
Subject key identifier:   27:1D:11:A8:B3:3B:85:1C:E3:01:AC:27:01:C4:35:9E:8E:67:4A:4F
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       5B4049FCA72A2520B5D9BD64E02A9F1D9FB30032
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
Manifest number:          65
Signing time:             Sat 23 Aug 2025 13:27:39 +0000
Manifest this update:     Sat 23 Aug 2025 13:22:39 +0000
Manifest next update:     Sun 24 Aug 2025 15:25:39 +0000
Files and hashes:         1: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: N19ozJrvmqRsOHtx+ELO6YVi2YfuaPR/bMfC2sd0ToE=)
                          2: 3130332e3230382e38342e302f32342d3234203d3e203533383530.roa (hash: FXU2BOZtL90B1obM1s07UWKQTLZt5lRjO+wB7UMEG/U=)
                          3: 323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: cfy0Lb3p1KGIvT1Dv3WTKXomnigIqUZxC3qUSKU1X8Q=)
                          4: 3130332e3230382e38342e302f32322d3234203d3e203631313338.roa (hash: EFokon3uzovDNn0Unk4MoVGX2uXU8iSPtyRbEFKVwE8=)
                          5: 323430343a336438303a3a2f33322d3438203d3e20313531383137.roa (hash: Ne68E09zoDQRBk9inQni3vpBYIBAMeRKDNt1f2IWRb0=)
                          6: 3130332e3230382e38362e302f32332d3234203d3e203631313338.roa (hash: vTK6sEV7joXKRp0wkFdncV/xbR2SIxNz0+q46rwBcC8=)
                          7: 9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl (hash: Uh5z3P4VRAlfe03ErI4nZqP02SzJQlkzrAGlNEedEKw=)
                          8: 3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (hash: ZcPW7+BE1LN+IBKqmSb+c1D8xmcmnOrZ+AV6UlpS48I=)
                          9: 323430343a336438303a3a2f33322d3438203d3e203631313338.roa (hash: vR13YTps2IOLJ32Czol962tgM592qRm1uemaECC1xjU=)
                          10: 3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (hash: xenml2DtldDc1AME+ONCgNO05UC9yi+x8jLwONvYCYc=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 15:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:40:49:fc:a7:2a:25:20:b5:d9:bd:64:e0:2a:9f:1d:9f:b3:00:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Aug 23 13:22:39 2025 GMT
            Not After : Aug 24 15:25:39 2025 GMT
        Subject: CN=271D11A8B33B851CE301AC2701C4359E8E674A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:f0:1b:cc:05:76:a9:d5:16:bf:51:86:69:
                    3b:2a:97:31:6d:9b:e7:b5:27:2c:de:f7:9f:2a:66:
                    89:fe:69:88:c6:58:28:c4:46:0d:68:05:da:4c:67:
                    ce:51:ed:ab:9a:4b:ed:a9:53:97:be:43:80:87:3e:
                    30:4e:68:b0:91:33:13:53:ab:d0:30:dd:2e:47:da:
                    a6:4f:24:d3:e1:cb:a2:c9:b0:d2:9a:09:0a:df:c0:
                    33:0d:1c:a7:aa:52:91:d4:c6:ba:eb:51:a9:3e:b7:
                    09:2e:64:0c:64:da:69:73:22:31:55:fd:f2:67:01:
                    2a:33:1e:7e:8e:53:30:a0:fb:90:06:bc:aa:8f:5e:
                    c3:8b:3b:a7:df:ab:5a:4e:a3:8e:97:54:98:2f:cc:
                    1e:c1:2b:b8:6e:8d:92:05:73:86:60:59:00:61:3a:
                    e6:20:e1:a8:5f:01:10:8d:0b:e8:eb:21:84:6d:c4:
                    a7:1c:7d:2a:85:53:98:44:ff:36:80:0c:54:0b:07:
                    58:34:fc:9f:50:d0:3c:7c:48:79:37:0d:35:d6:06:
                    f5:8a:d9:24:46:4b:c5:91:8f:3f:79:d5:9c:08:20:
                    44:fd:09:9f:ca:90:4e:72:ee:53:2f:6d:d0:66:eb:
                    f9:0a:50:e3:9c:f2:2a:9c:b9:15:05:8c:27:7c:0f:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1D:11:A8:B3:3B:85:1C:E3:01:AC:27:01:C4:35:9E:8E:67:4A:4F
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:30:4f:e6:06:cb:04:bc:2b:99:63:4a:c9:fb:cf:6e:f8:f0:
         af:75:36:35:d0:7a:95:bf:66:53:19:3f:ee:cd:a1:b1:b1:37:
         55:47:4c:72:09:0f:ac:af:a4:a4:13:85:72:f5:54:c2:35:26:
         bc:af:2e:a0:8e:13:f6:be:97:10:31:5c:16:38:1d:ca:1d:43:
         0a:bf:fa:4b:08:03:ca:3f:e3:8d:f8:20:dd:00:de:ab:1a:01:
         3b:ea:ed:30:33:47:60:fa:d6:e2:ac:e1:9c:54:68:0d:30:d5:
         9f:da:e3:6e:58:11:af:fb:f7:72:86:6f:08:94:af:98:9d:10:
         77:c0:01:4e:66:ab:1c:75:62:bc:39:6b:8b:a4:65:b7:b3:a1:
         ac:d0:f9:5c:ba:7e:0d:cb:6b:ab:6d:87:e1:ac:aa:46:1c:24:
         38:70:e3:a9:8a:ea:bd:35:b4:40:43:cd:20:e9:70:0e:79:77:
         cb:62:ef:fa:e3:7f:f7:f8:25:d6:06:68:1a:1b:db:6a:b2:13:
         35:8f:b0:ef:99:aa:a2:a0:e5:b6:93:9a:e9:ff:e2:aa:e8:77:
         15:24:e2:0d:21:d3:e8:e9:8f:54:8d:b6:1a:7d:10:72:f7:7b:
         ba:be:02:69:bf:a9:34:95:60:8e:79:73:6d:01:57:b7:39:02:
         a4:56:d9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:57:37 2025 by rpki-client