Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
File:                     rlEpNifxvXqfU3iOKmXqBBNGpwI.mft (raw, json)
Hash identifier:          ZWn5RgisBN+Y4lFI9meBN72Lv4PZuAT4x9ek04Z72+g=
Subject key identifier:   B6:E4:B2:E1:A8:AF:98:DD:4B:9A:34:71:3C:7C:D7:D6:C1:FD:A4:98
Authority key identifier: AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02
Certificate issuer:       /CN=F3620C16AR/serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
Certificate serial:       0357
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
Manifest number:          034B
Signing time:             Sat 23 Aug 2025 03:43:19 +0000
Manifest this update:     Sat 23 Aug 2025 03:43:18 +0000
Manifest next update:     Mon 25 Aug 2025 03:43:18 +0000
Files and hashes:         1: rlEpNifxvXqfU3iOKmXqBBNGpwI.crl (hash: prg133jvqmoA1FG1cvrq2eWevkrR1ReifBIBMVOz8gQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                          rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855 (0x357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620C16AR, serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
        Validity
            Not Before: Aug 23 03:43:18 2025 GMT
            Not After : Aug 25 03:43:18 2025 GMT
        Subject: CN=68a938d7-cac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6f:63:c4:1b:3a:f7:a6:3e:07:e9:49:5e:f9:
                    83:66:9d:dd:dd:5a:11:9f:9c:8d:ce:a8:9b:12:5b:
                    2a:0b:a4:d1:3c:1e:47:89:cd:8d:4b:b7:a0:fa:54:
                    8f:cd:d6:7a:08:ec:22:81:4e:1e:31:75:30:f0:e7:
                    93:60:2b:e5:b8:e9:d8:b9:1a:6f:0e:14:bd:d7:d4:
                    e8:29:f8:5e:e8:29:98:94:f7:14:c6:e2:65:cc:8b:
                    78:51:f8:46:a8:a8:da:9b:28:b5:67:2e:84:c0:60:
                    d4:27:c9:55:b3:ae:f5:a9:24:cc:ee:67:f9:ac:d3:
                    06:c2:4d:10:f0:e8:39:6b:6c:6c:4a:e9:2f:09:84:
                    26:6a:50:7b:ca:d4:42:7c:d8:5c:df:3a:6c:de:f5:
                    37:68:c3:68:1a:bf:63:22:f4:28:03:8e:3a:f8:ef:
                    ec:6f:60:5b:38:53:25:6a:fa:8f:48:02:34:58:c6:
                    fc:24:87:ce:30:ad:df:92:7b:9c:25:47:f6:9c:be:
                    17:d0:94:b7:18:43:b5:f2:84:c1:80:bb:b0:8d:c3:
                    97:2b:4c:1c:72:a5:87:37:5a:9b:93:8f:57:e5:c7:
                    cb:e9:c1:c1:40:64:58:6b:83:ef:b2:33:4a:81:e6:
                    a4:af:1a:2e:fa:cb:d4:51:16:10:2d:36:13:48:d3:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E4:B2:E1:A8:AF:98:DD:4B:9A:34:71:3C:7C:D7:D6:C1:FD:A4:98
            X509v3 Authority Key Identifier:
                keyid:AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:90:12:e8:81:60:33:b7:a3:03:a3:b5:89:68:aa:61:b6:34:
         f2:76:ce:1e:10:ed:09:0f:9b:d1:b5:9f:7c:21:91:fe:0f:bd:
         d1:7a:1e:66:83:7d:8e:35:13:6d:8f:80:29:e0:cc:fe:c7:f6:
         91:e7:cb:b1:ed:4b:d5:19:68:c2:b4:52:3d:f6:07:0a:0d:f6:
         65:57:2a:b7:5a:0c:d6:69:ff:76:da:c0:9a:17:99:b9:7d:2c:
         7a:f6:68:09:7d:a9:b1:9c:9f:66:6d:b4:5f:65:fa:b2:6a:7d:
         22:fd:d2:6b:09:13:c4:17:af:7d:1c:a4:79:6c:44:39:01:f9:
         01:ae:d1:fc:e3:df:b1:33:0b:c5:5b:7f:e4:d8:e0:82:44:07:
         ac:1a:63:0a:49:40:7c:45:2f:1e:73:80:84:77:58:1f:d5:c5:
         f3:d8:a0:54:3a:d8:02:af:62:b8:79:26:64:c5:99:06:12:44:
         c9:17:1f:d7:86:f2:1f:5c:b0:a8:dc:b0:10:52:6f:24:7f:b4:
         52:df:85:27:bd:c4:94:92:87:31:de:56:68:2d:0c:4b:aa:5f:
         8d:52:76:1c:b6:57:06:a6:46:7a:13:04:8f:68:69:1b:91:8f:
         e9:fa:3e:54:8e:d7:d4:88:7f:f0:35:60:de:d5:0d:f6:49:95:
         60:db:bc:74
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA1cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjBDMTZBUjExMC8GA1UEBRMoQUU1MTI5MzYyN0YxQkQ3QTlGNTM3ODhFMkE2NUVB
MDQxMzQ2QTcwMjAeFw0yNTA4MjMwMzQzMThaFw0yNTA4MjUwMzQzMThaMBgxFjAU
BgNVBAMTDTY4YTkzOGQ3LWNhYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDzb2PEGzr3pj4H6Ule+YNmnd3dWhGfnI3OqJsSWyoLpNE8HkeJzY1Lt6D6
VI/N1noI7CKBTh4xdTDw55NgK+W46di5Gm8OFL3X1Ogp+F7oKZiU9xTG4mXMi3hR
+EaoqNqbKLVnLoTAYNQnyVWzrvWpJMzuZ/ms0wbCTRDw6DlrbGxK6S8JhCZqUHvK
1EJ82FzfOmze9Tdow2gav2Mi9CgDjjr47+xvYFs4UyVq+o9IAjRYxvwkh84wrd+S
e5wlR/acvhfQlLcYQ7XyhMGAu7CNw5crTBxypYc3WpuTj1flx8vpwcFAZFhrg++y
M0qB5qSvGi76y9RRFhAtNhNI0ypVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUtuSy
4aivmN1LmjRxPHzX1sH9pJgwHwYDVR0jBBgwFoAUrlEpNifxvXqfU3iOKmXqBBNG
pwIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIwQzE2LzlERDBDMzg4MDUyMzExRUU5OEFGRjMzNTRBRDlFNkZDL3JsRXBO
aWZ4dlhxZlUzaU9LbVhxQkJOR3B3SS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3JsRXBOaWZ4dlhxZlUzaU9LbVhxQkJOR3B3SS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MjBDMTYvOUREMEMzODgwNTIzMTFFRTk4QUZGMzM1NEFEOUU2
RkMvcmxFcE5pZnh2WHFmVTNpT0ttWHFCQk5HcHdJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgkBLogWAzt6MDo7WJaKphtjTyds4eEO0J
D5vRtZ98IZH+D73Reh5mg32ONRNtj4Ap4Mz+x/aR58ux7UvVGWjCtFI99gcKDfZl
Vyq3WgzWaf922sCaF5m5fSx69mgJfamxnJ9mbbRfZfqyan0i/dJrCRPEF699HKR5
bEQ5AfkBrtH849+xMwvFW3/k2OCCRAesGmMKSUB8RS8ec4CEd1gf1cXz2KBUOtgC
r2K4eSZkxZkGEkTJFx/XhvIfXLCo3LAQUm8kf7RS34UnvcSUkocx3lZoLQxLql+N
UnYctlcGpkZ6EwSPaGkbkY/p+j5UjtfUiH/wNWDe1Q32SZVg27x0
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:44 2025 by rpki-client