Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
File:                     3wZml7CgNZiMDvM7Qr7tfnClVUs.mft (raw, json)
Hash identifier:          v/iPjiDOSXNloUSlAtty95wCYcMDpj/BkoJVyB3H2BU=
Subject key identifier:   56:45:1F:36:3D:F5:01:9B:D4:C2:F4:38:9F:3E:27:C0:AC:AF:5A:31
Authority key identifier: DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
Certificate issuer:       /CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Certificate serial:       0581
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
Manifest number:          057D
Signing time:             Sat 23 Aug 2025 02:40:48 +0000
Manifest this update:     Sat 23 Aug 2025 02:40:47 +0000
Manifest next update:     Mon 25 Aug 2025 02:40:47 +0000
Files and hashes:         1: 3wZml7CgNZiMDvM7Qr7tfnClVUs.crl (hash: OMrdz6rMIe5NF+ZQZS625ZTAHOsS0k7Udb88BYZuU98=)
                          2: 8065B86A532E11EC801D331CD8A014CE.roa (hash: F5eLw3Oa+DcohLxtO7dVJeRypNojvOsC5f+wTgH4pR0=)
                          3: 21625A96533111ECB2F6BE24D8A014CE.roa (hash: D7uWKw4MsAwTkL/YB/+bUaU6FUc2W7evgUV4IerLvVk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                          rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409 (0x581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAR, serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
        Validity
            Not Before: Aug 23 02:40:47 2025 GMT
            Not After : Aug 25 02:40:47 2025 GMT
        Subject: CN=68a92a30-d941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:14:23:a7:5e:16:2a:23:b2:2c:d1:ec:9e:
                    1c:fa:2c:5a:44:78:f6:98:17:f6:08:04:31:bf:85:
                    75:36:89:58:83:a3:b0:b4:5a:11:86:1c:9e:9d:29:
                    75:34:ba:d9:f6:c7:52:63:a7:e1:47:cb:85:ff:ad:
                    ed:5b:69:5d:ca:dc:80:63:9e:5e:ff:d7:36:49:f8:
                    3c:8d:0b:5b:b6:87:9b:95:e0:e5:43:0c:7e:fc:bb:
                    eb:24:31:68:9f:e2:94:19:5b:2a:5f:c7:82:30:1b:
                    40:a9:e3:90:de:d4:d0:6a:9a:33:32:a9:3c:6b:23:
                    aa:b9:0e:11:64:62:83:a2:cb:3c:84:28:a0:1a:ee:
                    d2:7a:78:20:5f:c3:e5:0a:6c:2d:a2:b7:d9:e7:68:
                    9a:fe:4b:2b:53:89:e2:fa:2d:66:6c:56:ce:05:ab:
                    b6:1e:c7:59:a8:e1:53:a2:0b:24:4e:ce:76:16:6f:
                    66:82:e2:66:29:81:c8:90:0e:a5:2e:41:54:96:e9:
                    1b:98:26:1b:15:49:18:19:ae:90:6b:dc:b0:54:76:
                    a3:13:08:2b:3a:90:c8:7f:fc:0c:39:e4:eb:38:f0:
                    be:60:c4:84:49:87:3b:34:24:9e:80:07:3a:b2:91:
                    3a:0d:74:84:a0:13:b1:51:2b:57:18:d3:55:41:c6:
                    4d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:45:1F:36:3D:F5:01:9B:D4:C2:F4:38:9F:3E:27:C0:AC:AF:5A:31
            X509v3 Authority Key Identifier:
                keyid:DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a1:cc:2a:f5:35:af:4b:f8:cc:0f:25:8d:c2:81:0c:a4:c9:
         e3:6c:77:09:de:9b:22:7a:be:12:e1:6b:1b:ca:1f:b8:29:63:
         2b:03:a4:50:1b:f5:3d:8b:51:16:b8:3b:87:ec:3a:e7:a8:62:
         fa:ea:ec:b5:02:92:db:5d:dc:42:48:3f:31:9e:0d:00:c1:cd:
         7e:75:e9:44:67:93:95:fd:f9:c6:7b:88:1c:28:34:9f:4e:61:
         04:a9:3a:93:e0:97:63:d9:67:5e:03:73:3f:62:82:85:7f:6b:
         c0:3e:34:78:ab:d0:be:5e:8e:49:47:b2:97:d7:10:22:17:15:
         ee:1c:16:25:3a:d0:0f:aa:f7:ee:af:da:29:78:f4:4d:75:5e:
         c7:cd:4c:1a:f5:b8:19:a3:b3:5d:83:35:0d:2e:ba:6b:25:ce:
         e4:a9:de:71:a7:36:9f:ab:54:30:f2:fa:36:ea:5e:a3:ae:06:
         3f:d0:c2:dd:f8:9a:2c:0a:ad:de:0b:53:f6:8b:fe:f8:5a:50:
         fc:2f:69:a4:ae:45:e4:9e:51:ba:9a:8a:8d:03:e7:49:bd:79:
         9d:6e:c0:53:db:c3:a3:ea:35:8b:bc:6b:e0:76:9c:1f:0e:ca:
         37:ca:da:88:0e:84:5a:ae:61:9f:8c:78:87:2f:e7:c6:ea:91:
         59:7e:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:36 2025 by rpki-client