Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
File:                     xLvN753H5o-RhMgMCHGMIG7d9ws.mft (raw, json)
Hash identifier:          KTKRKZr5cgphG2Y9NA+tjuYfyVDm+1LB4QlRkmriKyY=
Subject key identifier:   B2:7E:26:D8:40:31:EA:91:B5:CE:A1:A3:13:91:8F:25:2B:2F:C1:84
Authority key identifier: C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Certificate issuer:       /CN=F363DCF2AR/serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Certificate serial:       A8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
Manifest number:          8A
Signing time:             Sun 11 May 2025 05:09:05 +0000
Manifest this update:     Sun 11 May 2025 05:09:04 +0000
Manifest next update:     Tue 13 May 2025 05:09:04 +0000
Files and hashes:         1: xLvN753H5o-RhMgMCHGMIG7d9ws.crl (hash: 5oixb6HP2A7KJKl0y6djNvzNapU+y2chZNAMPvlxj7I=)
                          2: 94141C50E71711EFAF193D9C762E951A.roa (hash: VGiUmDaGPBDjNZvWhcQkhm9XZwIn0CIlpM2Ja0UcQ+0=)
                          3: B8FB5766DD5A11EFB2603D5E762E951A.roa (hash: 2svHingahPmdzvx5gtKH1SYPhXizYnHWA4pucFmkyLA=)
                          4: 50CC203EDD5B11EF9DB00261762E951A.roa (hash: Z4PnVh8Bk+c+XTp3EPhtMIoJmqM2+4Q4V57HhoRV0LY=)
                          5: 00BC75E2DD6C11EFBCBF8D55762E951A.roa (hash: y7EM7ly8esE3gmQ9LHHQhoYVLXQXppG8c2G1B/8sdG0=)
                          6: B42883C6DCC411EFAC23BD65762E951A.roa (hash: AkFtukieotsHxs31iTfcs9UAP4Z5Rv++CP/N/7IV8to=)
                          7: DF9A8FB2E71511EF89845391762E951A.roa (hash: lYxv4PfU2pGQraX26B+rxFK/U2HF8vmIZzodopdyvFo=)
                          8: 3D11E624E71411EFBA884188762E951A.roa (hash: N6mTIIRTdRtPk9q/Y6bKJnmYoEtncqiN9VuNviAdVGs=)
                          9: 19688CE6E71411EFBF287786762E951A.roa (hash: 3SpAXKAI2oMnzDMtmx8bxJNcSrUMhykMz+m286lYBPc=)
                          10: 830569CEDD8411EF8C36D978762E951A.roa (hash: sDz4Gs1dxudYxxNtOWNHYeKAdaxdIwaTAlm/Pz6NP6k=)
                          11: 81B8D5EEDD8211EF8A3C396D762E951A.roa (hash: RsxH1fAU+htkReATXiltObbwhi4z8mSFSYmQbCVCbIo=)
                          12: BDF4436EE70E11EFBF868065762E951A.roa (hash: ABlF2DLPUzccMWKARFsuerTVc/Hf91fdWN1Myk8K5eY=)
                          13: D91C373CE71311EF8A4F3F84762E951A.roa (hash: L6t5A3CpklDtC6Pr0bb6KhzuYz40rl6jXuCDamji6jo=)
                          14: 3F2B1A20DD5F11EFB2C1057C762E951A.roa (hash: hO+aJIyyhqIgJLgK4ZzK1pihDT7/x5+QrELOs3PeExg=)
                          15: F2A4B242DD5911EF836FA259762E951A.roa (hash: fIuP82QOJoRzYwdnI+W0dZ872lW6Jo1aocyYnFQOGfg=)
                          16: 314121A0E71611EFB3368E93762E951A.roa (hash: tq07saenMGK8v+QpcyKGWS+QKHYWt2hPvwm5vAiTTyg=)
                          17: 3C8225CEE70B11EF90C4C54E762E951A.roa (hash: P1nsqXHVMhuhOX4+8Nj0hA2BUkP4xrW40MPYyOSP7Sg=)
                          18: B3C9F522E71411EFA2E00F89762E951A.roa (hash: 9C9VDXXQ6KQ5ThTqPs+xyYW2pc7hbMdz8GCDLQ9wuR4=)
                          19: F24D34A4E70E11EF92E4DB65762E951A.roa (hash: k/G9qck3d7Q62Hncuvh/EiwNmOeryAJ5cmUhSVW8eXA=)
                          20: A5EC6916DD6011EFB4384D86762E951A.roa (hash: AY+AO3HoFPCTXZ9NdsdrMBRaTdh3Wbi9aeFXDZL9Kl4=)
                          21: 06E8A27AE71611EF9638C291762E951A.roa (hash: Ot/zGZbzI2R4LzAmgGX8PT7Pb1NjpFW5prBl7CcOnKE=)
                          22: 7DF5A16CDD5A11EFB641675C762E951A.roa (hash: VPYWyUkSd2f/Oo+xyShQeMdrepS2BuZjuB3U+Dkf/kY=)
                          23: 4D0F66DCDCC411EF87DBFE61762E951A.roa (hash: 0pJAdh2krN7PN7ET77uSv5aEr89tUKUcawXGqKdQ8KE=)
                          24: 18F331CCE71311EF980CE67F762E951A.roa (hash: U6asCyD1O+BpSuJZbisAWolN+j2KzxhuuEzB1cz8LNI=)
                          25: E85D3C24DD5D11EF9F43C972762E951A.roa (hash: pGLOjm7GcbhVCAv4nSzg8/IEawOYrqF7wFQJVytsdnk=)
                          26: 3C836F96DD5C11EFB1D93769762E951A.roa (hash: iSI1Fg5i7pMaZuu3tpqcqvjjxXpFCYkWT8ucZIu0CLs=)
                          27: 1F3D7F78DD8211EF8E6CD76A762E951A.roa (hash: zr9mOOEpAw72/JZefMTyPFlI4TAyCVb1YiFHRT1Jgco=)
                          28: 2EB0BC54E70F11EFBF4A1268762E951A.roa (hash: 1jrEr+w8kh2VQB/TRu48/EIry3GrfRf6fRHj0ymkhOQ=)
                          29: 61908B4AE79B11EFB6805B7C762E951A.roa (hash: Xn+9BY2JsZcHSY8zfrWdXyWmaJjlSC/5wGIcSiN9iMc=)
                          30: 971449FADD5F11EFA3B35B7F762E951A.roa (hash: O/UnJEfpoStkh1iBmk5+WnDltBgh7Ls1BY+41hPq/2s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
                          rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363DCF2AR, serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
        Validity
            Not Before: May 11 05:09:04 2025 GMT
            Not After : May 13 05:09:04 2025 GMT
        Subject: CN=682030f1-c574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:90:60:05:ff:93:68:bf:6e:be:0d:c9:35:
                    3d:5e:e5:38:59:2b:83:f5:b6:0c:63:28:65:1d:d4:
                    fb:4d:71:82:5e:d0:99:ff:9d:00:33:7d:48:3f:32:
                    02:ac:9c:82:f3:a2:39:1d:18:7f:e6:90:df:b7:7a:
                    68:c5:63:af:82:ca:7c:e8:37:8e:d2:d3:67:a6:8e:
                    5f:18:3f:4e:b9:a0:aa:cd:3b:ce:7f:05:d6:af:43:
                    2d:5d:59:9f:c8:55:d6:80:58:83:b0:08:a3:d6:70:
                    66:f3:6b:1d:59:17:2b:c4:d2:94:73:26:5c:b0:5d:
                    7e:18:00:c6:88:ee:80:0f:c1:f5:82:16:3f:46:d6:
                    87:7e:a5:fa:95:59:a9:da:47:c4:ab:4b:16:6d:f8:
                    f4:fa:47:77:63:d6:a6:71:97:6b:e9:41:d7:49:82:
                    cd:38:93:71:0b:97:f3:2a:b8:37:84:d7:00:01:3a:
                    25:83:69:89:98:d5:ad:22:b4:ac:1c:c7:1e:b9:3c:
                    36:99:3f:9d:bf:a8:ed:73:ae:49:96:e0:86:a4:8a:
                    27:28:1f:76:38:3e:b9:3a:71:c0:58:64:d6:16:60:
                    8f:08:2e:66:36:72:2f:f5:b2:3c:cc:6e:a1:d1:a0:
                    1b:88:08:30:33:89:29:9a:c7:1e:f2:26:53:4c:e9:
                    63:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7E:26:D8:40:31:EA:91:B5:CE:A1:A3:13:91:8F:25:2B:2F:C1:84
            X509v3 Authority Key Identifier:
                keyid:C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a8:1f:44:4b:ad:b7:10:15:90:73:34:60:ed:56:23:3f:7e:
         83:ca:03:c7:ec:fb:b9:e4:76:82:5f:8a:6f:7a:ef:1a:1d:86:
         64:6a:df:5c:25:c8:84:8a:e9:29:98:b0:84:20:a9:2a:21:95:
         d7:8c:d3:cf:18:08:38:0e:00:a7:5d:e5:16:c0:4b:dd:31:ce:
         1c:b9:86:39:f6:27:fd:87:33:71:3f:d8:6c:10:3b:df:65:04:
         1b:37:57:74:53:85:bc:cf:bf:23:fd:1f:10:16:5a:a3:0b:5b:
         3a:a7:3c:c9:24:6e:37:97:c6:40:ce:f8:80:98:f4:43:39:ad:
         23:17:74:4a:5d:a5:cb:c0:bd:09:cc:17:16:3b:71:66:b4:da:
         04:89:58:6b:a7:c9:bc:a1:40:7c:d0:68:05:35:7f:e9:56:7b:
         78:45:4f:3b:67:70:91:5c:d8:59:13:82:54:ae:f1:d1:86:92:
         92:ae:df:28:71:d7:f5:62:2d:6a:5e:d6:dc:a4:44:9e:98:7b:
         bc:6f:9b:b3:57:0f:f7:55:3b:92:fb:a5:d9:e1:2c:b5:2d:f2:
         f0:06:a0:75:40:2f:c3:82:02:56:a1:7b:ae:fd:13:31:38:8a:
         21:f3:b1:54:e2:76:f8:5f:6c:f3:9f:30:a8:a2:ba:57:87:17:
         23:55:43:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:44:35 2025 by rpki-client