Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
File:                     3wZml7CgNZiMDvM7Qr7tfnClVUs.mft (raw, json)
Hash identifier:          0Qt/lP4j8Bi29+qgZDQRm4SG7MDB0M2/NJ/199OyEbU=
Subject key identifier:   DB:85:E8:CC:DE:04:47:C2:1E:5E:1A:F9:DF:A6:0D:90:F5:49:A8:D0
Authority key identifier: DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
Certificate issuer:       /CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Certificate serial:       054F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
Manifest number:          054B
Signing time:             Fri 04 Jul 2025 02:43:37 +0000
Manifest this update:     Fri 04 Jul 2025 02:43:36 +0000
Manifest next update:     Sun 06 Jul 2025 02:43:36 +0000
Files and hashes:         1: 3wZml7CgNZiMDvM7Qr7tfnClVUs.crl (hash: HDE7uwqAzz4LwmWIFNz0/jW+CJ7VgZgWePDIBr/QXkw=)
                          2: 8065B86A532E11EC801D331CD8A014CE.roa (hash: F5eLw3Oa+DcohLxtO7dVJeRypNojvOsC5f+wTgH4pR0=)
                          3: 21625A96533111ECB2F6BE24D8A014CE.roa (hash: D7uWKw4MsAwTkL/YB/+bUaU6FUc2W7evgUV4IerLvVk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                          rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359 (0x54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAR, serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
        Validity
            Not Before: Jul  4 02:43:36 2025 GMT
            Not After : Jul  6 02:43:36 2025 GMT
        Subject: CN=68673fd8-6590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:06:66:93:39:14:fe:74:46:ef:51:35:3f:
                    59:3b:e3:a9:23:96:0f:c2:a4:a2:d6:b7:25:82:db:
                    30:1b:bc:6a:b0:15:1f:da:83:8b:79:e4:ea:dc:bb:
                    bc:fc:ae:c4:46:ca:e3:4f:c9:1d:5a:11:ee:17:12:
                    c0:56:4c:66:4e:76:3d:63:74:05:bd:2f:3e:01:a8:
                    e6:3e:be:7a:4c:ff:a8:be:75:2e:10:93:89:f8:70:
                    08:99:a8:f1:1f:0b:93:8e:1c:3c:c0:a1:08:fb:c9:
                    1c:f9:6a:2e:67:a2:10:dc:34:e4:8e:c6:4a:24:f9:
                    5b:e4:51:65:6e:35:23:c5:c3:57:a9:a7:2e:bf:6e:
                    28:3f:69:5d:c8:27:c3:36:04:4f:61:dc:37:d4:e1:
                    c5:5c:f5:d6:c0:2d:09:a2:ac:cb:c9:f8:3c:e5:08:
                    ba:5a:ec:cc:c3:aa:a7:5f:22:fd:cb:85:f1:ed:22:
                    1c:43:75:1c:71:c0:6e:d1:29:76:48:f5:02:e3:4c:
                    ce:76:a5:a6:f3:56:26:04:10:74:05:cf:3a:ec:87:
                    aa:19:4c:d3:b5:a9:c7:24:e5:4c:8c:76:4e:6c:1c:
                    75:bf:6b:93:bb:d0:7d:e9:ad:de:c1:66:b1:14:fc:
                    28:48:e2:30:d1:ab:37:d0:27:40:a4:c2:71:7c:6a:
                    87:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:85:E8:CC:DE:04:47:C2:1E:5E:1A:F9:DF:A6:0D:90:F5:49:A8:D0
            X509v3 Authority Key Identifier:
                keyid:DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:cc:82:c9:d2:17:75:2f:2c:2f:75:4d:37:0f:be:60:ca:79:
         f1:c4:c6:30:76:1d:56:78:2a:7a:15:e6:24:a5:ce:2a:44:32:
         2b:5a:c2:25:da:53:12:a4:20:b4:a2:17:a5:e9:47:77:e2:de:
         2d:da:c4:58:4c:68:47:0a:fe:a3:57:bf:53:0a:35:0b:7b:9b:
         ab:65:da:f2:19:41:2d:8d:01:01:e4:24:73:59:47:23:36:c2:
         b1:d1:59:9d:a8:b9:7f:34:be:b5:83:ce:88:27:75:b2:ad:50:
         8d:43:24:4a:68:08:bb:6d:39:a5:59:e5:30:44:b0:62:dd:24:
         bc:81:ba:a2:e0:f2:f0:f1:e0:7a:95:7e:06:3a:3f:9f:67:2e:
         30:17:b0:00:29:03:75:7a:9f:08:a8:f0:5c:b0:e7:03:d7:a6:
         cb:3a:5f:a2:1e:9b:50:d5:d4:54:65:7a:88:de:76:3c:01:15:
         b5:d9:6a:33:84:98:28:c0:09:3d:74:3a:8f:df:ed:39:bd:bd:
         f8:45:fb:88:7e:27:27:81:88:cb:b8:02:11:9a:c1:df:49:69:
         10:72:0f:4d:75:5c:1f:64:45:93:18:62:8f:cd:5d:02:b4:9d:
         18:80:35:f7:89:db:c7:64:9a:31:0d:88:49:0a:d9:6c:1a:4e:
         1f:b9:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:08:43 2025 by rpki-client