Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File:                     FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier:          3+8yqUVSyjRPahEwxVX4uxoxsg7t5FEzjrLQbR3HDxs=
Subject key identifier:   81:6E:1B:29:7D:38:0B:5F:E0:C0:45:28:2D:13:07:EF:BB:90:6B:DA
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer:       /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial:       039D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number:          039A
Signing time:             Tue 01 Jul 2025 03:29:18 +0000
Manifest this update:     Tue 01 Jul 2025 03:29:17 +0000
Manifest next update:     Thu 03 Jul 2025 03:29:17 +0000
Files and hashes:         1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: HzhcOzpoqortoJJD+OZUoP8ONpmEykqj5yF7b1RbWkQ=)
                          2: CF8B10CE1DB711EFA609B0217DDC24C2.roa (hash: cUUrYIHHPxFgWnYQbOftBzdS94Gj26Vr5vz5884oWrA=)
                          3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                          rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 00:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
        Validity
            Not Before: Jul  1 03:29:17 2025 GMT
            Not After : Jul  3 03:29:17 2025 GMT
        Subject: CN=6863560d-9aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:21:bc:a6:ab:62:90:3b:d0:88:83:d7:f2:cc:
                    7e:eb:ac:40:83:6e:67:ca:28:60:6a:f3:b0:a5:40:
                    28:84:a2:43:28:40:b3:dd:88:a2:ba:6d:8a:46:7c:
                    fa:2a:c6:0d:cd:00:09:96:ca:8a:07:0d:c4:ae:24:
                    fb:6c:56:ce:d0:8f:6f:11:bd:79:cc:15:b9:ad:4b:
                    a9:60:8f:6e:ae:9a:28:f3:e4:47:87:78:c0:b6:95:
                    80:16:86:0f:b2:12:a3:d3:0d:1d:9c:5e:c0:b7:bf:
                    e9:bc:37:91:f4:9f:d9:4f:e3:3e:94:28:ba:71:0b:
                    f4:55:7b:af:f7:f9:5f:67:52:25:fe:9c:3f:4e:9f:
                    9f:46:11:aa:5d:6e:39:3e:6c:de:f9:a5:6e:60:9f:
                    65:7c:06:76:77:e5:66:62:74:eb:57:7e:36:8a:26:
                    b2:a0:a4:78:71:d5:11:e6:60:7d:db:2a:ec:32:89:
                    79:e7:49:d9:28:dd:62:2e:ba:96:75:5d:1e:b7:99:
                    bf:0f:d4:c8:1e:11:a7:0a:17:d3:d0:49:ea:37:f1:
                    0f:80:56:dd:04:d0:94:93:88:f6:56:02:c1:41:8c:
                    d3:b8:23:71:01:cb:30:10:cd:3a:0d:2d:ec:75:86:
                    52:40:10:1a:fa:fd:9a:a0:50:8d:f8:8d:82:b6:28:
                    4e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6E:1B:29:7D:38:0B:5F:E0:C0:45:28:2D:13:07:EF:BB:90:6B:DA
            X509v3 Authority Key Identifier:
                keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:64:87:53:dc:de:d9:96:86:db:a7:09:7c:92:ee:b7:1b:9b:
         9c:29:d8:f8:1f:9e:d3:30:dc:1e:ae:40:2e:45:72:a6:72:ac:
         d6:29:5b:54:b4:8b:9d:b3:10:64:f9:a1:c3:d0:35:79:ec:e2:
         d4:02:3a:72:16:bd:c1:ce:0b:19:a6:16:81:1e:08:90:71:42:
         81:67:11:fc:9c:c4:e1:71:1a:ba:6f:3e:33:54:70:81:cf:58:
         92:3b:e1:90:a1:ff:e1:6e:11:66:2d:90:90:c6:7f:4f:3b:71:
         32:ff:56:56:f1:0b:68:d5:52:22:73:5e:a5:e7:08:cb:5b:90:
         44:5e:7e:3b:eb:7c:cf:c6:ae:eb:c1:11:23:ed:b0:8d:cf:b4:
         91:a1:27:4e:7b:b1:2b:76:09:e6:82:08:ca:bb:71:1d:e4:a2:
         3a:0d:6e:b3:ae:1b:4f:1d:73:91:8a:34:00:23:54:c2:8a:60:
         d8:17:3c:20:54:f3:5b:62:38:bb:e9:ad:11:6c:8f:89:c0:9a:
         c9:bc:a2:cc:48:44:a8:6e:97:5e:a9:91:0e:64:c8:a2:bd:56:
         87:92:29:f0:bd:de:eb:b4:2a:01:63:3b:a4:c2:6a:31:0f:8f:
         c7:57:50:5e:77:7f:4f:b0:25:01:f2:88:45:76:2a:1b:ee:6c:
         82:01:d2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:30:21 2025 by rpki-client