Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft
File:                     R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft (raw, json)
Hash identifier:          Xuy2RN51+/GzEcp1+Jb0+hmRrKKbxmEmN+LdAbSVkYE=
Subject key identifier:   1F:BA:D3:00:C9:0A:FE:6C:33:8E:B2:68:59:60:85:1B:1E:31:B4:D5
Authority key identifier: 47:4B:B4:B3:D8:72:65:BE:E0:5B:2A:C8:39:E2:16:38:90:A4:48:2E
Certificate issuer:       /CN=F36592B4AR/serialNumber=474BB4B3D87265BEE05B2AC839E2163890A4482E
Certificate serial:       0338
Authority info access:    rsync://rpki.afrinic.net/repository/arin/R0u0s9hyZb7gWyrIOeIWOJCkSC4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft
Manifest number:          0337
Signing time:             Sat 23 Aug 2025 03:46:50 +0000
Manifest this update:     Sat 23 Aug 2025 03:46:49 +0000
Manifest next update:     Mon 25 Aug 2025 03:46:49 +0000
Files and hashes:         1: R0u0s9hyZb7gWyrIOeIWOJCkSC4.crl (hash: F0xGZ7+s3ItIH3xcJ2k1+xgsZTVT9Kr3yLRuAMZmDeA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft
                          rsync://rpki.afrinic.net/repository/arin/R0u0s9hyZb7gWyrIOeIWOJCkSC4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36592B4AR, serialNumber=474BB4B3D87265BEE05B2AC839E2163890A4482E
        Validity
            Not Before: Aug 23 03:46:49 2025 GMT
            Not After : Aug 25 03:46:49 2025 GMT
        Subject: CN=68a939a9-432e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:88:9f:97:d0:df:f1:63:8b:79:67:5d:e5:
                    cf:80:30:c9:85:2a:7b:c7:91:4a:57:8f:84:ad:a7:
                    55:0c:17:01:1b:b3:b2:16:fa:af:a1:93:e3:9a:b2:
                    d6:f4:e4:f3:89:83:3f:f9:5a:52:3b:84:96:91:33:
                    96:b4:29:61:a9:05:a0:80:11:0b:b9:14:01:17:00:
                    ea:60:62:8a:66:3b:d1:b4:6d:ad:b5:92:3d:96:d6:
                    9c:1c:9a:bb:61:bd:f0:19:a3:3e:a5:24:d4:d3:bd:
                    a8:ae:73:c1:ef:bc:d0:91:17:0f:02:a3:c1:23:42:
                    4e:fd:51:12:62:1e:8a:ff:aa:82:79:a4:52:31:a6:
                    10:0a:55:5e:00:9a:ec:f3:cc:2a:42:e8:f0:bf:be:
                    0d:59:6e:79:e6:05:e3:77:15:a1:c0:9e:bd:09:3b:
                    82:fa:80:cc:07:80:a1:ce:1b:96:91:26:4e:3a:06:
                    2a:70:77:41:e1:e8:dd:ef:5f:ff:fc:58:89:50:bd:
                    aa:bd:37:2e:ac:1a:5b:db:cf:6d:e8:c9:32:ae:bb:
                    96:16:59:d3:27:c1:ec:66:e7:42:88:7d:3e:06:ad:
                    73:37:75:f2:7d:55:2c:37:e2:da:10:6e:d4:a9:19:
                    e9:b8:95:13:4b:8c:02:db:b5:67:80:a4:a5:57:b4:
                    37:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BA:D3:00:C9:0A:FE:6C:33:8E:B2:68:59:60:85:1B:1E:31:B4:D5
            X509v3 Authority Key Identifier:
                keyid:47:4B:B4:B3:D8:72:65:BE:E0:5B:2A:C8:39:E2:16:38:90:A4:48:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/R0u0s9hyZb7gWyrIOeIWOJCkSC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0f:8d:a3:de:8b:d0:33:23:b3:39:9d:10:53:1d:ac:99:44:
         2d:e1:87:de:12:de:ae:c5:ed:45:30:52:e7:75:70:00:52:46:
         df:c5:1b:61:ab:23:4b:16:41:64:d6:07:46:f0:47:2a:52:42:
         64:03:9b:d5:99:94:e0:05:7b:fd:bf:5c:43:f6:f6:9f:31:d7:
         f9:49:fc:6b:e3:d8:bc:35:0b:71:74:84:74:ad:6d:7d:92:5a:
         03:1e:82:a6:95:d4:46:09:6d:98:d1:07:57:7e:68:08:89:c3:
         35:63:cd:d9:ae:19:22:43:bd:2b:e4:70:fa:70:2b:44:86:75:
         b6:b6:0e:fa:4f:e3:b9:dd:52:f8:46:01:0e:ab:1d:9c:dc:ad:
         6e:1e:84:a8:38:7c:8f:a3:eb:04:5b:bf:4f:96:8b:d6:2b:5b:
         c5:a1:c9:7b:e5:7b:fe:97:3c:93:66:97:f6:42:f6:42:56:47:
         a1:fa:33:59:92:63:f1:2e:a4:d9:74:0a:be:a0:f1:c4:dd:d4:
         41:70:09:89:b9:0e:9e:21:ed:47:3f:74:d8:44:4e:de:a9:ee:
         cf:16:32:fd:c4:c3:92:14:c6:8d:68:26:44:75:8f:f8:6e:a2:
         2d:ad:c1:14:bd:14:e0:14:c0:ca:3e:a4:0f:a0:e7:42:6d:9a:
         3d:e4:7f:80
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTkyQjRBUjExMC8GA1UEBRMoNDc0QkI0QjNEODcyNjVCRUUwNUIyQUM4MzlFMjE2
Mzg5MEE0NDgyRTAeFw0yNTA4MjMwMzQ2NDlaFw0yNTA4MjUwMzQ2NDlaMBgxFjAU
BgNVBAMTDTY4YTkzOWE5LTQzMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsIYifl9Df8WOLeWdd5c+AMMmFKnvHkUpXj4Stp1UMFwEbs7IW+q+hk+Oa
stb05POJgz/5WlI7hJaRM5a0KWGpBaCAEQu5FAEXAOpgYopmO9G0ba21kj2W1pwc
mrthvfAZoz6lJNTTvaiuc8HvvNCRFw8Co8EjQk79URJiHor/qoJ5pFIxphAKVV4A
muzzzCpC6PC/vg1ZbnnmBeN3FaHAnr0JO4L6gMwHgKHOG5aRJk46Bipwd0Hh6N3v
X//8WIlQvaq9Ny6sGlvbz23oyTKuu5YWWdMnwexm50KIfT4GrXM3dfJ9VSw34toQ
btSpGem4lRNLjALbtWeApKVXtDfrAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUH7rT
AMkK/mwzjrJoWWCFGx4xtNUwHwYDVR0jBBgwFoAUR0u0s9hyZb7gWyrIOeIWOJCk
SC4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5MkI0L0E5ODQ3MjI0MEMyQjExRUU5OTE2OTA2QjRBRDlFNkZDL1IwdTBz
OWh5WmI3Z1d5cklPZUlXT0pDa1NDNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1IwdTBzOWh5WmI3Z1d5cklPZUlXT0pDa1NDNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTkyQjQvQTk4NDcyMjQwQzJCMTFFRTk5MTY5MDZCNEFEOUU2
RkMvUjB1MHM5aHlaYjdnV3lySU9lSVdPSkNrU0M0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/D42j3ovQMyOzOZ0QUx2smUQt4YfeEt6u
xe1FMFLndXAAUkbfxRthqyNLFkFk1gdG8EcqUkJkA5vVmZTgBXv9v1xD9vafMdf5
Sfxr49i8NQtxdIR0rW19kloDHoKmldRGCW2Y0QdXfmgIicM1Y83ZrhkiQ70r5HD6
cCtEhnW2tg76T+O53VL4RgEOqx2c3K1uHoSoOHyPo+sEW79PlovWK1vFocl75Xv+
lzyTZpf2QvZCVkeh+jNZkmPxLqTZdAq+oPHE3dRBcAmJuQ6eIe1HP3TYRE7eqe7P
FjL9xMOSFMaNaCZEdY/4bqItrcEUvRTgFMDKPqQPoOdCbZo95H+A
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:24 2025 by rpki-client