Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
File:                     KCVggNQ6BNgSOO9T0xFu1kewbhw.mft (raw, json)
Hash identifier:          ZbdZYFi1a0E3Uy+0YbuEILYD6Fa3wLX0hL2kr7P/e7I=
Subject key identifier:   BA:D3:C7:68:7A:96:F0:CE:54:E0:B6:4A:58:7A:28:35:DF:86:5D:73
Authority key identifier: 28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C
Certificate issuer:       /CN=F3662DABAR/serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
Certificate serial:       03AF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
Manifest number:          03AE
Signing time:             Fri 04 Jul 2025 03:23:44 +0000
Manifest this update:     Fri 04 Jul 2025 03:23:44 +0000
Manifest next update:     Sun 06 Jul 2025 03:23:44 +0000
Files and hashes:         1: KCVggNQ6BNgSOO9T0xFu1kewbhw.crl (hash: y8UkKHGHdd12vo+hF0d1N+z1dn4POxa5Y7SdS/MUTLc=)
                          2: DB993B728F4F11ED982ED088F1222468.roa (hash: zmof4qkrG67Fqj/AA24Lhy1I6eBvEWQSDaesv5Uqj2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
                          rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAR, serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
        Validity
            Not Before: Jul  4 03:23:44 2025 GMT
            Not After : Jul  6 03:23:44 2025 GMT
        Subject: CN=68674940-f4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:51:3c:d8:b9:d9:6e:36:6c:6a:91:16:cd:
                    34:77:38:2d:66:e5:63:26:80:6e:45:7d:37:44:9c:
                    aa:24:d8:ee:2b:c0:f4:86:86:1a:b7:be:2e:a4:c6:
                    fe:c1:5a:2f:c3:00:4c:44:48:35:32:e0:cc:5d:ab:
                    5c:48:ba:b8:11:ae:00:53:fc:ab:fb:fb:35:ac:b9:
                    74:70:c6:f1:64:10:c8:a6:4a:c6:14:90:28:32:b7:
                    59:e0:e2:50:8e:46:31:35:77:9e:f4:df:49:79:9f:
                    27:3b:f8:c8:c9:93:1c:df:e4:3b:90:3d:4f:e7:7f:
                    7c:06:80:6f:7d:ad:94:cc:b5:58:e1:9f:63:c3:a3:
                    4a:fa:b7:a8:e9:4a:7b:e3:b9:42:e7:7a:2d:07:56:
                    77:e9:3a:01:54:de:ca:f6:87:40:17:03:f6:c9:d8:
                    2a:81:ce:8e:02:c1:58:ff:0d:6a:21:83:7f:30:34:
                    6f:82:39:82:60:7b:d6:b1:da:30:98:1b:47:1d:d7:
                    01:c7:dc:d4:35:37:b3:34:97:24:bf:d3:a5:0b:70:
                    3b:dd:22:1d:a3:5f:5a:90:ce:f6:48:55:af:08:63:
                    81:f1:e6:a2:eb:42:9d:68:a3:42:a0:90:73:1c:2c:
                    7d:10:a4:69:98:f0:c2:00:5e:48:ca:de:8e:79:0c:
                    45:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D3:C7:68:7A:96:F0:CE:54:E0:B6:4A:58:7A:28:35:DF:86:5D:73
            X509v3 Authority Key Identifier:
                keyid:28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:44:bf:55:74:c4:c6:93:bf:46:bc:4f:0e:88:60:21:58:4e:
         92:a6:a1:be:bc:fd:42:98:02:0c:d4:aa:a7:cb:09:e8:d7:7b:
         67:cb:a2:b2:18:af:6c:29:df:00:67:70:cf:f7:78:77:98:42:
         9a:54:8d:2d:8e:0e:92:2e:08:d0:f3:2a:bc:45:e7:f7:bd:e2:
         73:d6:81:d0:f1:fb:41:1b:f2:d4:6d:fe:59:de:da:fc:68:b0:
         e1:25:28:55:eb:e8:5d:bc:a9:f7:7c:59:68:c0:cd:db:29:1e:
         5b:cd:b6:43:a7:7c:cc:c6:e9:0b:ed:84:16:59:c6:48:45:2c:
         3e:28:8a:06:c9:5d:a4:70:b1:ab:96:2c:cd:21:7c:db:5f:c1:
         66:b5:c4:01:ef:66:6d:cd:6c:6c:c4:ab:0e:fb:86:a1:83:c9:
         9d:23:b7:a5:a1:02:32:d6:10:1b:50:31:65:9a:41:01:f4:43:
         a7:40:ce:f0:85:6c:95:9b:b6:4a:9f:3b:31:63:62:34:10:e0:
         5c:e7:c7:b5:4d:3f:74:10:20:d8:94:13:6e:c8:4c:a3:49:c3:
         86:ed:e5:53:9f:89:d0:e0:9e:44:c3:36:ee:9f:f9:e0:dc:54:
         84:92:a2:1a:9a:b9:1d:73:b2:bf:a8:8c:42:11:86:10:d4:35:
         30:7d:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:23:36 2025 by rpki-client