Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
File:                     cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft (raw, json)
Hash identifier:          S2ms7yKD8+nlF+2jY4ikBlQnP1yRNhsFTGxCNp9SxvU=
Subject key identifier:   61:56:22:BD:6F:22:1F:94:B7:C0:73:83:C7:8D:04:12:A2:48:FF:8F
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Certificate issuer:       /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial:       0993
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
Manifest number:          0992
Signing time:             Sat 23 Aug 2025 01:19:31 +0000
Manifest this update:     Sat 23 Aug 2025 01:19:30 +0000
Manifest next update:     Mon 25 Aug 2025 01:19:30 +0000
Files and hashes:         1: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl (hash: oLfczKGO0HR9YlK0V8lLZoTjwt2yXkGLJA7dIUUmazE=)
                          2: 8506A5F2291811E9A5145C67F8AEA228.roa (hash: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                          rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2451 (0x993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E67CAR, serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
        Validity
            Not Before: Aug 23 01:19:30 2025 GMT
            Not After : Aug 25 01:19:30 2025 GMT
        Subject: CN=68a91723-0499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ff:3a:aa:73:6c:55:87:b6:f9:c6:97:0a:79:
                    99:40:db:c5:f3:b1:56:f6:ba:6a:8c:8c:12:bc:bc:
                    c7:cd:43:c4:4c:c1:f4:3e:53:fa:01:ce:6e:fe:30:
                    7f:84:56:af:c9:da:54:93:f7:93:c9:63:51:00:d9:
                    d9:b9:37:d2:a3:01:00:4a:30:33:c6:17:a6:95:06:
                    59:c4:49:66:ae:6c:f4:35:47:ba:93:8d:c3:29:c5:
                    27:97:85:68:17:86:c9:41:f3:94:0e:f7:34:ec:45:
                    43:f6:cd:d5:91:d6:c7:67:a8:12:f1:96:d1:4b:47:
                    dc:3d:32:73:8a:d2:3a:c9:82:82:45:92:48:d1:fe:
                    72:1c:21:3f:e3:21:49:18:14:40:8c:41:21:e6:84:
                    da:07:1a:6b:94:f1:f0:34:66:76:8c:0a:64:ec:78:
                    83:a9:1b:67:a0:cf:ec:ae:9d:6a:e7:47:01:f9:68:
                    3b:a8:6b:0f:8e:ef:f2:80:47:72:02:ae:6e:dd:d4:
                    67:94:8c:5a:a4:fa:48:b3:b6:d7:96:16:50:fc:d0:
                    94:cc:d8:2a:73:4d:be:4d:25:8a:20:5e:1f:05:38:
                    bb:33:23:a7:18:21:93:51:85:0e:c5:56:c4:6c:e6:
                    5b:8f:b7:51:74:44:d2:98:28:c6:fb:84:be:6e:18:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:56:22:BD:6F:22:1F:94:B7:C0:73:83:C7:8D:04:12:A2:48:FF:8F
            X509v3 Authority Key Identifier:
                keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:62:38:2b:b9:f2:f0:99:2d:57:19:cf:59:26:32:d0:f3:81:
         ac:2a:f6:f3:75:cb:d1:db:9d:3b:6b:cf:fb:dc:bd:ed:b0:bc:
         a9:9e:16:da:75:40:ab:74:cd:2f:1e:df:10:bf:a1:0b:35:db:
         44:a8:fc:8a:fa:d3:9c:79:98:a0:c8:ad:da:a3:33:c6:fc:7d:
         eb:8c:57:ef:d4:af:39:63:dd:bb:95:90:24:a5:98:6c:5f:10:
         d0:00:ef:53:3a:c9:ae:73:f4:83:c9:da:34:f1:4b:29:49:25:
         0d:9e:d6:1e:af:df:ce:83:c9:04:b8:0c:8c:68:86:b9:2f:68:
         46:a6:6d:5b:76:49:89:72:85:33:26:ea:f0:cd:a9:2a:90:63:
         dc:60:9f:47:29:17:4e:dd:08:3e:66:11:d6:72:62:8d:10:46:
         ff:88:a9:1c:4c:14:79:e1:f7:a0:fb:d7:d4:70:d8:6b:ed:fe:
         c2:3a:c7:9d:02:39:ed:6a:9f:9b:8c:0c:aa:64:94:a6:8e:b0:
         db:2e:9d:46:6a:9b:96:7b:e1:4e:97:2d:23:48:e9:40:63:d1:
         d0:78:e5:2a:cf:0b:79:8b:5a:47:82:67:3e:8c:06:2c:f1:d1:
         96:62:c9:91:a2:1a:67:7d:d6:62:82:75:42:22:d5:91:c3:a0:
         26:50:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:45 2025 by rpki-client