Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
File:                     3IJjhe1IHHwjMIBE24nEU5kq3E8.mft (raw, json)
Hash identifier:          azgyX2RSp8OIg+aXxqgvGhUz+sQAllbV07zhnP4e9dY=
Subject key identifier:   A7:6E:2F:E2:5A:BA:AD:0C:4A:30:38:91:1E:48:A6:54:52:C1:86:2C
Authority key identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
Certificate issuer:       /CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Certificate serial:       04CC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
Manifest number:          04CA
Signing time:             Sat 23 Aug 2025 02:54:25 +0000
Manifest this update:     Sat 23 Aug 2025 02:54:24 +0000
Manifest next update:     Mon 25 Aug 2025 02:54:24 +0000
Files and hashes:         1: 3IJjhe1IHHwjMIBE24nEU5kq3E8.crl (hash: lsR9ji/EK+MgSChGq8kaKldMogRFQs/RoLmDbLA2Ifs=)
                          2: DAB5B58871A111EF9A6AEC6F762E951A.roa (hash: YivpnequhZt8XqJ2qMGWn/m6KFZdSXQEvVcrsKtKSmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
                          rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1228 (0x4cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E0EFAR, serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
        Validity
            Not Before: Aug 23 02:54:24 2025 GMT
            Not After : Aug 25 02:54:24 2025 GMT
        Subject: CN=68a92d61-f94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:08:4f:4c:96:a9:aa:fe:fd:cc:87:ac:68:
                    8f:b6:d2:8f:6d:f8:ca:82:76:e3:66:43:85:82:ed:
                    88:0f:15:ae:03:cd:d2:c5:24:ed:53:76:f7:22:ae:
                    6c:7e:7a:e2:10:c9:dd:87:dc:bd:63:04:0b:c8:72:
                    91:06:fb:cc:4e:98:43:77:8f:2a:40:3b:d3:8c:87:
                    31:f4:39:93:bd:25:c8:e2:97:81:2c:bc:15:b4:63:
                    30:59:81:c1:9c:14:6a:5d:73:8f:e0:27:f0:83:de:
                    33:4c:d4:8f:ef:0e:52:b9:4e:b9:c1:ec:61:e3:e3:
                    89:b0:16:b8:16:97:1d:d3:c1:49:99:48:9f:d5:d2:
                    40:cc:26:d3:f8:be:2c:bd:65:62:dd:db:de:63:67:
                    c3:3a:d9:74:88:3d:2c:09:41:3f:2d:bb:bd:a3:88:
                    7f:6b:ad:69:43:51:ce:70:df:b7:20:e6:c8:bf:01:
                    07:d5:15:29:56:f2:94:b8:2f:8f:3a:d6:d6:bc:f0:
                    c7:11:08:06:27:d5:f1:d1:3a:df:9f:f2:a7:8d:a8:
                    36:92:31:67:53:86:ae:26:02:bc:11:53:b1:ea:89:
                    32:37:bb:df:54:6e:b2:38:ef:65:c1:11:22:59:2d:
                    93:a0:34:13:66:b4:51:93:2d:e4:cd:e1:27:17:5f:
                    c8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6E:2F:E2:5A:BA:AD:0C:4A:30:38:91:1E:48:A6:54:52:C1:86:2C
            X509v3 Authority Key Identifier:
                keyid:DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1b:5d:eb:01:86:48:0a:ae:84:60:36:fd:e9:83:8c:8e:fb:
         60:59:dd:b1:8f:f8:f9:87:b6:68:6f:46:5d:6f:74:9f:c8:40:
         f8:e5:f4:c4:0b:43:c1:61:2e:1b:d4:1c:10:23:db:27:0a:a6:
         2b:0f:2b:cd:f9:29:33:fe:a5:96:27:5a:22:74:f0:4e:bc:0c:
         75:17:d9:e1:39:01:db:fd:c9:cf:5b:38:3f:21:50:08:9a:25:
         49:54:5b:9c:18:5f:49:b3:ec:e2:f6:53:3f:02:91:a5:e0:2e:
         e7:a6:2e:b4:09:e2:56:34:c4:f8:62:67:2a:e9:87:a7:47:19:
         c5:79:17:1e:51:4e:03:99:81:88:af:56:c2:9f:e7:17:27:0c:
         35:d9:d7:93:f7:a3:9c:2c:d5:83:9b:e0:30:23:0a:10:f7:63:
         39:38:7b:c6:79:ec:32:e1:ff:d3:3a:0b:3f:5c:18:fe:73:ed:
         27:9f:59:44:60:d4:7c:c1:63:45:fc:f9:24:65:7c:c2:8e:9b:
         05:0b:66:c7:0f:c1:26:40:ac:7d:ce:f1:f8:bb:fe:ae:35:49:
         6c:e6:9d:c9:54:94:39:05:5d:24:ba:4e:9a:ff:81:a9:4c:a5:
         40:f7:93:5c:ff:85:65:c2:b8:3e:17:a7:b8:ed:06:d2:9f:68:
         d5:89:18:8b
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUUwRUZBUjExMC8GA1UEBRMoREM4MjYzODVFRDQ4MUM3QzIzMzA4MDQ0REI4OUM0
NTM5OTJBREM0RjAeFw0yNTA4MjMwMjU0MjRaFw0yNTA4MjUwMjU0MjRaMBgxFjAU
BgNVBAMTDTY4YTkyZDYxLWY5NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1PghPTJapqv79zIesaI+20o9t+MqCduNmQ4WC7YgPFa4DzdLFJO1Tdvci
rmx+euIQyd2H3L1jBAvIcpEG+8xOmEN3jypAO9OMhzH0OZO9Jcjil4EsvBW0YzBZ
gcGcFGpdc4/gJ/CD3jNM1I/vDlK5TrnB7GHj44mwFrgWlx3TwUmZSJ/V0kDMJtP4
viy9ZWLd295jZ8M62XSIPSwJQT8tu72jiH9rrWlDUc5w37cg5si/AQfVFSlW8pS4
L4861ta88McRCAYn1fHROt+f8qeNqDaSMWdThq4mArwRU7HqiTI3u99UbrI472XB
ESJZLZOgNBNmtFGTLeTN4ScXX8iBAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUp24v
4lq6rQxKMDiRHkimVFLBhiwwHwYDVR0jBBgwFoAU3IJjhe1IHHwjMIBE24nEU5kq
3E8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVFMEVGLzRBRkY5NEQ2REFBRTExRUM5OEI4RjBEM0YxMjIyNDY4LzNJSmpo
ZTFJSEh3ak1JQkUyNG5FVTVrcTNFOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNJSmpoZTFJSEh3ak1JQkUyNG5FVTVrcTNFOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NUUwRUYvNEFGRjk0RDZEQUFFMTFFQzk4QjhGMEQzRjEyMjI0
NjgvM0lKamhlMUlISHdqTUlCRTI0bkVVNWtxM0U4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMG13rAYZICq6EYDb96YOMjvtgWd2xj/j5
h7Zob0Zdb3SfyED45fTEC0PBYS4b1BwQI9snCqYrDyvN+Skz/qWWJ1oidPBOvAx1
F9nhOQHb/cnPWzg/IVAImiVJVFucGF9Js+zi9lM/ApGl4C7npi60CeJWNMT4Ymcq
6YenRxnFeRceUU4DmYGIr1bCn+cXJww12deT96OcLNWDm+AwIwoQ92M5OHvGeewy
4f/TOgs/XBj+c+0nn1lEYNR8wWNF/PkkZXzCjpsFC2bHD8EmQKx9zvH4u/6uNUls
5p3JVJQ5BV0kuk6a/4GpTKVA95Nc/4Vlwrg+F6e47QbSn2jViRiL
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:16 2025 by rpki-client