Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
File:                     D-g4ATBnRIcNHQamDPfzuj5UJlI.mft (raw, json)
Hash identifier:          XqxJ3gb7AZO8KjYwTiPQkkOWCH65if9jjzBPNQGNEtY=
Subject key identifier:   72:4E:DF:4E:B3:90:66:27:FE:8A:6C:C2:A4:3F:FE:1B:22:8C:27:BE
Authority key identifier: 0F:E8:38:01:30:67:44:87:0D:1D:06:A6:0C:F7:F3:BA:3E:54:26:52
Certificate issuer:       /CN=F362E39EAR/serialNumber=0FE83801306744870D1D06A60CF7F3BA3E542652
Certificate serial:       0D08
Authority info access:    rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
Manifest number:          0D05
Signing time:             Sat 23 Aug 2025 01:06:04 +0000
Manifest this update:     Sat 23 Aug 2025 01:06:04 +0000
Manifest next update:     Mon 25 Aug 2025 01:06:04 +0000
Files and hashes:         1: D-g4ATBnRIcNHQamDPfzuj5UJlI.crl (hash: piJaBVzL3Qi4LuDQVK8aUje8/C8WOh6RRM1RJgGg1PI=)
                          2: 85751D2246C411F0B35CB878DAE4EC9C.roa (hash: 8RnruMpMOyIroRB7WdabR+dI97SGVIprP/OPugvR+SU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
                          rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3336 (0xd08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAR, serialNumber=0FE83801306744870D1D06A60CF7F3BA3E542652
        Validity
            Not Before: Aug 23 01:06:04 2025 GMT
            Not After : Aug 25 01:06:04 2025 GMT
        Subject: CN=68a913fc-a518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:59:4f:44:e4:2e:fd:9e:1d:dd:b3:e2:0d:
                    d8:bb:2c:b1:7f:91:ce:2b:55:83:66:c0:1a:5a:52:
                    0c:60:2d:8b:2e:fe:26:c0:79:fc:2e:37:1b:07:da:
                    c9:82:b7:d5:c6:f6:30:eb:e5:1e:e9:a7:56:de:92:
                    2a:64:6d:d1:6c:ac:9f:4d:2a:68:6d:b5:9a:e2:95:
                    4f:e2:e1:8c:83:ab:a4:53:ee:5a:f8:9c:aa:c3:76:
                    fb:81:da:2f:52:b6:0f:82:36:bb:76:a8:02:7b:04:
                    91:1f:82:ce:bc:00:90:b0:a9:44:2a:9e:91:3e:2c:
                    97:08:fe:16:9e:7f:d3:60:9f:e1:b4:3c:dd:d9:a8:
                    8d:d2:63:cd:00:11:ad:e9:05:d5:cc:d4:15:4c:4c:
                    15:e5:37:27:36:a2:b7:e1:af:7b:d1:46:ab:a9:97:
                    7f:e5:2a:3a:ea:10:3e:2a:e1:80:5c:96:d5:09:61:
                    c0:16:6c:3d:a3:74:0c:e6:58:0c:14:9a:46:c1:a9:
                    05:d1:71:41:c1:18:d5:1d:d0:ad:56:77:76:1c:2e:
                    dc:09:4c:5e:9f:58:11:d8:94:93:62:f5:70:e0:6a:
                    3b:69:6e:89:a6:00:88:df:eb:9b:7f:c3:ca:8c:5f:
                    0d:14:cf:dc:45:5e:1d:64:5c:af:ef:e5:00:4b:28:
                    c0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4E:DF:4E:B3:90:66:27:FE:8A:6C:C2:A4:3F:FE:1B:22:8C:27:BE
            X509v3 Authority Key Identifier:
                keyid:0F:E8:38:01:30:67:44:87:0D:1D:06:A6:0C:F7:F3:BA:3E:54:26:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:8d:5f:37:e9:db:37:61:84:5d:7e:28:c9:bf:30:1d:39:9c:
         61:8b:b5:17:51:55:b9:48:11:da:6b:8a:83:3f:ce:8f:79:a3:
         fd:12:08:0d:b4:dd:75:4e:16:c1:11:63:cf:c9:f9:03:b5:09:
         0c:7f:db:ef:90:50:bc:6c:fc:86:e5:46:18:65:59:16:39:61:
         da:fa:b9:2d:00:d0:8d:e0:ed:59:52:0d:16:77:23:49:c3:52:
         43:df:7d:ee:81:61:35:56:05:92:0b:f8:db:8b:59:05:63:0c:
         2f:1a:1c:69:62:b3:bd:a3:df:5b:68:e0:53:33:3b:25:d2:49:
         e7:bd:59:46:12:36:47:2f:9a:42:4d:45:04:8a:10:cc:4c:a7:
         a4:8f:68:bf:ad:da:00:ef:6a:39:58:25:85:f3:2c:56:72:11:
         e2:9d:76:36:30:fd:ae:be:05:dc:68:9f:c1:a4:09:4c:fb:d7:
         0e:93:70:9c:f6:a8:26:20:a9:b8:42:1d:16:26:23:b1:91:6d:
         d8:1b:fd:3f:8c:92:5d:5a:2b:92:99:54:a8:97:e8:35:f1:96:
         8c:c4:38:ca:ff:d1:75:19:46:2e:32:60:2c:06:90:dd:f7:8e:
         15:df:3e:d0:a1:6a:ce:c4:ac:81:3e:a5:cd:31:8e:5b:77:25:
         a8:9c:8f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:12 2025 by rpki-client