Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
File:                     MzQdyhYYc65_OkSzbhzbObXAoJo.mft (raw, json)
Hash identifier:          TfSMb8jMhjaniQ6LSyl/K/oGNQ7tZYNFBa7SHbMyUKo=
Subject key identifier:   9B:53:55:99:33:1B:7E:77:C8:82:56:9D:A6:76:69:49:50:A0:EC:5D
Authority key identifier: 33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Certificate issuer:       /CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Certificate serial:       03CB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
Manifest number:          03CB
Signing time:             Sat 23 Aug 2025 03:26:42 +0000
Manifest this update:     Sat 23 Aug 2025 03:26:41 +0000
Manifest next update:     Mon 25 Aug 2025 03:26:41 +0000
Files and hashes:         1: MzQdyhYYc65_OkSzbhzbObXAoJo.crl (hash: e4t1bI6bx4qqfLLVB943S9VLmBX2IDBvG8w2gTt7tuY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                          rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662123AR, serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
        Validity
            Not Before: Aug 23 03:26:41 2025 GMT
            Not After : Aug 25 03:26:41 2025 GMT
        Subject: CN=68a934f2-bf0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:1d:25:90:e6:74:06:7f:2b:54:dc:9f:77:
                    2a:e1:9e:00:35:50:87:58:e5:9b:3d:80:54:1a:2d:
                    22:12:7a:32:94:a0:cf:d2:f5:b5:81:90:c7:c5:bd:
                    54:0e:c3:33:2b:26:b4:4b:f1:bf:50:38:97:66:c6:
                    8c:5c:e4:85:93:f5:cc:a1:eb:22:c6:60:17:fb:69:
                    72:0c:6b:a0:a1:aa:59:4a:70:df:a8:d4:65:6a:d8:
                    d9:b2:dc:a7:e1:88:fc:4d:0b:70:e3:f0:35:bb:98:
                    78:a9:ef:84:8c:53:4a:4a:ce:64:12:7f:f6:21:e7:
                    2a:6b:57:94:ea:a4:9d:80:d2:0e:d4:e1:f3:47:ac:
                    cf:53:6c:c4:00:5d:00:f2:fa:a5:d2:c4:cf:05:0c:
                    49:db:88:6f:0a:14:41:5b:9f:d1:67:ee:e7:cd:48:
                    0e:05:2f:a1:23:4d:bd:ff:e3:80:3d:8c:0b:bc:91:
                    6d:98:cc:18:a6:ba:cb:eb:40:0b:19:56:eb:36:56:
                    14:26:a6:6e:94:be:21:d4:ba:c0:f9:1a:e8:9f:81:
                    9a:0c:66:7a:64:7d:93:4a:17:06:03:fb:5d:1a:bf:
                    0d:d1:6d:6f:91:be:b5:ea:97:8c:55:2a:db:fe:88:
                    85:2e:e0:47:73:f3:61:a4:4a:51:9d:73:d3:9f:bb:
                    a4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:53:55:99:33:1B:7E:77:C8:82:56:9D:A6:76:69:49:50:A0:EC:5D
            X509v3 Authority Key Identifier:
                keyid:33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:45:d3:fb:49:c7:36:a5:a0:30:cc:80:95:ec:86:0a:de:da:
         cf:80:14:3b:ef:98:15:36:32:6a:d5:07:04:b8:d9:63:3e:d9:
         d6:3d:14:d3:b5:aa:1a:9c:2f:b2:b8:e1:db:8f:70:13:a0:79:
         9f:80:a3:93:32:f9:4c:4b:cd:fb:21:77:6f:d2:f5:6a:20:da:
         96:8c:66:42:b0:57:0a:11:05:64:f6:78:fb:40:9b:56:a3:48:
         07:4e:50:ee:4f:cd:76:b6:77:c2:ac:dc:c1:6e:64:88:ab:6e:
         af:0e:29:6c:5e:d0:f9:3d:e9:2c:3e:a9:f5:78:26:d9:b0:c6:
         63:f3:d1:4c:aa:1b:8f:08:32:c1:d7:47:54:2b:9b:6c:ba:92:
         4d:cb:88:01:7e:40:2e:f6:55:7c:8a:36:f0:d9:71:ea:fd:ce:
         07:b2:a2:b2:9e:ee:38:0d:5f:e5:65:27:06:5a:3b:37:19:4a:
         4d:ee:27:cd:7f:54:db:07:2a:be:78:7d:b3:f5:f9:43:46:de:
         a8:28:6c:ec:7b:27:b5:52:d7:2b:a0:1b:b3:2d:d2:2e:73:9a:
         50:b0:a8:08:26:1f:47:35:d7:36:18:dd:2e:e0:46:7e:e4:00:
         cc:f7:e4:e0:49:a8:60:e0:e5:69:2e:1d:d6:6b:e9:9c:5c:66:
         6a:50:58:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:37 2025 by rpki-client