Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
File:                     3IJjhe1IHHwjMIBE24nEU5kq3E8.mft (raw, json)
Hash identifier:          6QRjtPAOGHjvKrzoEwlOiHYN/wZiT8SGGB48DjipKy0=
Subject key identifier:   5C:DF:8D:39:00:38:91:61:C0:86:9D:D7:2D:05:53:B4:61:F4:3A:20
Authority key identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
Certificate issuer:       /CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Certificate serial:       049A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
Manifest number:          0498
Signing time:             Fri 04 Jul 2025 02:57:35 +0000
Manifest this update:     Fri 04 Jul 2025 02:57:34 +0000
Manifest next update:     Sun 06 Jul 2025 02:57:34 +0000
Files and hashes:         1: 3IJjhe1IHHwjMIBE24nEU5kq3E8.crl (hash: TPXFh4gkyCTFkOrINZSCJGjnYO+1wEmeTgQKMUSeTAU=)
                          2: DAB5B58871A111EF9A6AEC6F762E951A.roa (hash: YivpnequhZt8XqJ2qMGWn/m6KFZdSXQEvVcrsKtKSmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
                          rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178 (0x49a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E0EFAR, serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
        Validity
            Not Before: Jul  4 02:57:34 2025 GMT
            Not After : Jul  6 02:57:34 2025 GMT
        Subject: CN=6867431f-e2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:b4:f6:45:a0:c3:c5:72:03:63:c1:ae:0e:
                    50:60:94:07:fd:9a:9f:26:9d:ee:13:42:c9:5b:e1:
                    c2:90:42:dc:c5:de:6c:fb:5b:d4:bf:94:bc:3a:0f:
                    ea:d2:b4:97:9a:d8:9e:6a:f6:56:99:b9:91:24:88:
                    12:b2:96:39:3f:5e:bd:fd:7e:a6:dd:ba:12:5b:d4:
                    e0:2b:a7:5a:69:75:ad:bd:11:24:0c:21:4e:e7:0e:
                    80:49:44:57:98:c1:0f:39:b3:46:83:07:2b:df:bc:
                    50:f6:b0:f3:bc:9e:ea:53:a7:6c:97:be:33:56:19:
                    35:46:6d:4e:fb:ee:de:57:52:c1:b2:68:db:21:ab:
                    e7:b7:5b:86:8e:4f:99:6e:13:28:00:84:53:66:5e:
                    77:4b:90:71:14:87:a5:e1:a3:ce:04:3a:3b:d0:9e:
                    55:a8:28:0c:b8:c5:bc:30:79:a9:18:b8:69:bf:9f:
                    59:b5:b9:db:c6:43:e7:3f:2c:93:ca:95:05:7f:63:
                    67:69:99:73:81:ed:03:b6:be:f4:2c:70:24:79:ee:
                    43:39:3c:c9:b2:42:7d:88:6c:97:fe:fa:ce:17:c9:
                    43:7f:43:3d:c1:5b:ee:63:59:e1:c9:c6:b8:a6:88:
                    6f:09:47:5a:ed:a9:50:23:b7:7d:25:df:36:40:9c:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DF:8D:39:00:38:91:61:C0:86:9D:D7:2D:05:53:B4:61:F4:3A:20
            X509v3 Authority Key Identifier:
                keyid:DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:df:f2:9b:61:14:b4:af:99:26:b8:35:aa:e7:b1:45:21:e2:
         1f:3e:40:48:9d:4b:dc:88:fa:cd:31:8b:4f:cc:80:ce:c4:51:
         39:cb:dc:e1:4d:8c:10:92:51:04:5f:b5:52:e7:e2:ac:79:ab:
         d0:d9:b4:6b:c3:da:db:c2:72:10:98:a3:39:2d:2a:7f:95:f7:
         a0:d6:1b:23:73:b3:a3:2d:19:20:8c:a5:cf:de:7a:ce:85:42:
         20:28:f0:1f:7d:a2:f6:09:de:d0:e7:ee:d5:8f:8f:10:88:64:
         82:f3:93:bb:47:f5:72:fa:f0:6f:cc:cb:a2:9e:17:78:1a:84:
         55:dc:b7:e4:e8:84:f7:60:04:77:17:6f:33:97:2a:b0:d6:e3:
         4a:aa:6c:3b:fe:27:67:4a:b4:e3:1e:35:4f:74:8b:0b:c2:71:
         63:6d:b2:00:2d:dc:dc:c6:f4:c0:5b:f5:87:d4:0f:af:92:b4:
         74:53:1b:c7:a2:32:22:cc:68:6c:90:af:fb:b1:61:9a:d5:e0:
         99:35:9c:2e:fc:bc:64:38:e8:da:0e:33:6c:af:1e:38:32:3f:
         fb:d9:b1:f3:c5:75:a5:21:68:fe:87:81:d3:6c:40:29:49:35:
         42:3f:4a:39:f6:35:7d:6c:f3:a4:c1:f4:e7:c5:90:85:cc:e9:
         59:1d:7b:ee
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBJowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUUwRUZBUjExMC8GA1UEBRMoREM4MjYzODVFRDQ4MUM3QzIzMzA4MDQ0REI4OUM0
NTM5OTJBREM0RjAeFw0yNTA3MDQwMjU3MzRaFw0yNTA3MDYwMjU3MzRaMBgxFjAU
BgNVBAMTDTY4Njc0MzFmLWUyYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOjrT2RaDDxXIDY8GuDlBglAf9mp8mne4TQslb4cKQQtzF3mz7W9S/lLw6
D+rStJea2J5q9laZuZEkiBKyljk/Xr39fqbduhJb1OArp1ppda29ESQMIU7nDoBJ
RFeYwQ85s0aDByvfvFD2sPO8nupTp2yXvjNWGTVGbU777t5XUsGyaNshq+e3W4aO
T5luEygAhFNmXndLkHEUh6Xho84EOjvQnlWoKAy4xbwweakYuGm/n1m1udvGQ+c/
LJPKlQV/Y2dpmXOB7QO2vvQscCR57kM5PMmyQn2IbJf++s4XyUN/Qz3BW+5jWeHJ
xrimiG8JR1rtqVAjt30l3zZAnMtVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUXN+N
OQA4kWHAhp3XLQVTtGH0OiAwHwYDVR0jBBgwFoAU3IJjhe1IHHwjMIBE24nEU5kq
3E8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVFMEVGLzRBRkY5NEQ2REFBRTExRUM5OEI4RjBEM0YxMjIyNDY4LzNJSmpo
ZTFJSEh3ak1JQkUyNG5FVTVrcTNFOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNJSmpoZTFJSEh3ak1JQkUyNG5FVTVrcTNFOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NUUwRUYvNEFGRjk0RDZEQUFFMTFFQzk4QjhGMEQzRjEyMjI0
NjgvM0lKamhlMUlISHdqTUlCRTI0bkVVNWtxM0U4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJ3/KbYRS0r5kmuDWq57FFIeIfPkBInUvc
iPrNMYtPzIDOxFE5y9zhTYwQklEEX7VS5+KseavQ2bRrw9rbwnIQmKM5LSp/lfeg
1hsjc7OjLRkgjKXP3nrOhUIgKPAffaL2Cd7Q5+7Vj48QiGSC85O7R/Vy+vBvzMui
nhd4GoRV3Lfk6IT3YAR3F28zlyqw1uNKqmw7/idnSrTjHjVPdIsLwnFjbbIALdzc
xvTAW/WH1A+vkrR0UxvHojIizGhskK/7sWGa1eCZNZwu/LxkOOjaDjNsrx44Mj/7
2bHzxXWlIWj+h4HTbEApSTVCP0o59jV9bPOkwfTnxZCFzOlZHXvu
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:48:48 2025 by rpki-client