Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
File:                     DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft (raw, json)
Hash identifier:          1rLt2Bx3vPa7MpU1PncCsX8gsgkXEJt0S4n8wUSaUOE=
Subject key identifier:   77:E0:FD:3E:78:F6:8B:C6:3F:A2:45:5D:79:6A:70:54:63:23:0C:9C
Authority key identifier: 0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9
Certificate issuer:       /CN=F3639A71AR/serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
Certificate serial:       0231
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
Manifest number:          0230
Signing time:             Fri 04 Jul 2025 04:17:26 +0000
Manifest this update:     Fri 04 Jul 2025 04:17:25 +0000
Manifest next update:     Sun 06 Jul 2025 04:17:25 +0000
Files and hashes:         1: DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl (hash: qGuZddkLmTd6PE3QpTZW/7q6cLsF5V3dBrw2lquKdtA=)
                          2: CE2F2690AD5311EE8E27B3B1775412E6.roa (hash: 8IJ5uu88BzDrvRLts60KNKjSTABo8XS/43EbjaMJPDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                          rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AR, serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
        Validity
            Not Before: Jul  4 04:17:25 2025 GMT
            Not After : Jul  6 04:17:25 2025 GMT
        Subject: CN=686755d6-ff07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:76:d0:90:42:9f:76:5b:62:35:51:03:d2:f3:
                    cb:07:1d:d9:a0:77:57:21:0c:3d:b0:13:95:be:75:
                    37:72:1b:ba:83:94:53:d6:f6:28:3f:48:fd:fe:5c:
                    5b:7a:e3:1c:e5:72:3b:fa:73:89:9a:55:37:43:54:
                    be:7b:5b:28:f5:da:bb:be:c1:04:21:3b:a1:f1:56:
                    a9:c9:a4:77:ca:14:fd:2b:b9:b6:82:7e:cd:26:cc:
                    4a:af:2e:c1:10:3a:cb:50:4f:79:53:14:4e:ad:9c:
                    4d:12:d5:42:53:11:39:d0:33:a3:07:b5:2d:74:f0:
                    96:ba:45:df:c5:05:0e:f3:e0:73:72:be:bc:cf:de:
                    d4:9f:a4:0f:c0:04:96:96:1b:c8:02:37:f8:6c:04:
                    2a:c0:06:03:58:62:42:fc:72:6c:5f:0b:89:ef:72:
                    70:99:f1:1b:c2:12:5a:d9:ca:cc:3a:0d:28:e2:32:
                    5c:e9:b9:d0:df:cb:35:26:4c:fb:a5:19:ee:84:e9:
                    4e:8e:f7:46:4b:ab:45:c9:2b:17:fc:e2:85:2f:13:
                    b0:bc:22:a3:55:29:76:68:4f:e8:37:97:40:d0:1c:
                    92:d2:d4:68:e8:ba:49:fb:13:eb:8b:19:03:8e:15:
                    f6:e2:ed:7e:9f:05:a0:d3:75:15:f9:c7:de:5d:e7:
                    d3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E0:FD:3E:78:F6:8B:C6:3F:A2:45:5D:79:6A:70:54:63:23:0C:9C
            X509v3 Authority Key Identifier:
                keyid:0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7e:78:01:35:3c:3c:d2:f8:87:1a:a5:fd:53:ba:56:6e:5c:
         34:23:5f:c5:7e:41:62:87:d8:c1:ff:95:09:9e:46:79:83:76:
         ee:55:41:c5:e4:0e:ff:2e:dc:1f:b9:b4:cc:0c:2d:65:49:24:
         a8:4e:5c:07:e4:b1:11:2f:4a:7f:b5:b4:0a:6b:39:09:d4:9d:
         e8:83:ed:d2:88:3b:88:9d:51:fa:71:3e:4c:93:1b:d1:8a:db:
         d9:d1:fd:ac:61:db:91:a8:56:a8:f9:f4:e2:d9:be:fb:25:21:
         44:3b:fd:3d:f3:bb:85:f0:ff:77:ed:fb:04:91:d3:68:b6:08:
         3d:f4:88:d3:46:4b:0c:24:be:05:76:72:59:d5:8c:7d:76:11:
         7d:3b:34:f0:de:3d:0c:35:f1:96:83:3d:08:ae:b6:75:9c:e7:
         70:4e:31:7b:61:e0:89:35:60:f1:f3:2a:fd:d6:9f:24:af:e2:
         24:65:b4:50:0e:90:63:af:3f:b2:38:59:3c:5b:13:ab:7c:67:
         26:51:7e:08:dd:bd:ac:00:b1:04:1a:65:22:01:df:07:87:47:
         28:74:73:0b:b2:bb:d1:01:44:c5:05:42:08:62:45:73:29:c3:
         58:0e:79:92:92:8c:9b:71:91:e2:bb:0b:a9:a3:05:3c:fa:0f:
         bb:d4:da:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:26:41 2025 by rpki-client