Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
File:                     XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft (raw, json)
Hash identifier:          1GQVM21+4vIAPRxQ0mBVNAXcRL4h5vlLbyJ/wiC4pWo=
Subject key identifier:   1E:A7:72:12:DC:68:B8:5F:62:23:7A:51:A0:55:DC:45:8A:1E:CE:91
Authority key identifier: 5D:56:25:6A:24:9D:56:47:5F:0F:E3:4A:42:84:A6:4C:52:2C:0F:B4
Certificate issuer:       /CN=F362BDD7AR/serialNumber=5D56256A249D56475F0FE34A4284A64C522C0FB4
Certificate serial:       014D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
Manifest number:          014B
Signing time:             Sat 23 Aug 2025 04:54:48 +0000
Manifest this update:     Sat 23 Aug 2025 04:54:47 +0000
Manifest next update:     Mon 25 Aug 2025 04:54:47 +0000
Files and hashes:         1: XVYlaiSdVkdfD-NKQoSmTFIsD7Q.crl (hash: 3fXvhqZssJV94OJqR0RjjnWXLVvlkjB276lLFWXAE7k=)
                          2: D60958CC856B11EFBE85FB5B762E951A.roa (hash: Pw5u5L+ZQ+31t8q31EOek7HdK9TGe6sXHf0Pw/O4YD4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
                          rsync://rpki.afrinic.net/repository/arin/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362BDD7AR, serialNumber=5D56256A249D56475F0FE34A4284A64C522C0FB4
        Validity
            Not Before: Aug 23 04:54:47 2025 GMT
            Not After : Aug 25 04:54:47 2025 GMT
        Subject: CN=68a94998-fc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:f6:1c:19:33:21:f3:1a:ec:31:e1:76:a1:
                    ff:cc:f8:d9:96:91:68:c8:4a:fd:73:80:b2:08:24:
                    45:3b:0b:bb:36:c7:59:53:b4:79:f0:5a:dc:8b:1f:
                    b3:b7:d4:ed:44:7c:b4:20:bd:c1:1a:57:eb:73:c6:
                    5d:2b:a8:a6:4a:49:80:a7:ec:f2:85:4e:27:ca:19:
                    95:43:b2:85:06:63:16:48:0d:e4:eb:3f:cb:2b:20:
                    8d:b0:50:ea:31:40:f9:4c:d5:57:2b:fa:37:9c:c2:
                    83:7e:75:7a:df:1b:95:70:55:9c:44:2f:2f:20:9f:
                    24:d1:7e:cb:93:1d:7c:41:47:e4:fb:ba:d6:08:89:
                    a5:6a:40:53:43:e6:a7:36:f7:61:67:27:6f:22:8f:
                    58:9e:81:aa:0d:ed:5d:44:72:a0:8c:ca:5b:d8:c6:
                    8f:8f:d5:85:19:30:62:b0:7e:8a:07:3a:03:a7:c4:
                    31:f5:c2:76:fb:b3:3f:47:02:71:72:de:50:e6:87:
                    1a:9e:61:bc:dd:a3:1a:98:3b:f1:b2:f2:b0:d2:3a:
                    da:db:6c:d7:b9:25:36:a8:4b:7c:eb:ce:10:59:74:
                    97:67:0e:cf:75:3e:ab:1a:74:fd:2f:9d:98:b4:40:
                    01:75:65:aa:b4:fe:de:aa:e3:e3:cc:cc:18:f8:f4:
                    ad:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A7:72:12:DC:68:B8:5F:62:23:7A:51:A0:55:DC:45:8A:1E:CE:91
            X509v3 Authority Key Identifier:
                keyid:5D:56:25:6A:24:9D:56:47:5F:0F:E3:4A:42:84:A6:4C:52:2C:0F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3f:9f:b2:1d:e8:e9:b7:87:a3:09:af:8c:c6:a1:5e:44:aa:
         ca:86:6e:e5:60:41:db:51:81:fb:ea:e7:d2:ce:6e:ed:87:d0:
         db:1d:25:97:7f:62:9f:e9:ef:ac:d5:ca:28:7f:ca:6b:97:52:
         c9:2e:0a:5f:36:69:ec:bb:14:45:be:bd:f3:b6:85:08:47:a6:
         a1:a3:66:a6:10:c0:af:9d:e5:98:af:1b:17:4b:d2:28:6c:7b:
         7d:58:8f:7e:f3:97:5d:bc:45:16:1e:0e:da:f3:e4:ba:d4:43:
         77:68:21:8d:01:f5:80:e6:8d:66:14:b1:76:de:58:12:2e:e4:
         f3:c6:7a:4e:95:71:eb:3c:fd:7d:0e:9d:24:d0:89:2e:f6:40:
         39:df:6c:01:7c:40:d2:d4:2b:79:a9:c6:64:fe:55:e4:a9:3b:
         9e:7a:5d:48:d1:91:94:67:e4:7b:dc:e1:6c:36:7d:63:d3:5a:
         b4:14:2a:a5:7e:47:da:61:06:5c:51:c1:c1:71:a3:ca:5c:06:
         2f:b9:2d:46:2f:c6:02:f1:b3:d4:52:bd:2d:45:c2:43:88:75:
         72:73:0c:46:a3:1b:f7:d9:10:f5:43:88:9b:44:df:ca:b1:0e:
         88:79:f9:45:e9:16:33:ad:ff:34:90:a9:54:31:fc:d8:a6:e5:
         58:0f:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:45 2025 by rpki-client