Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
File:                     fitobmq6qC0Tpu6fS-fmmmuN_3k.mft (raw, json)
Hash identifier:          3LPj+G4YUK1D/6+fve7dXEmufJ9a/wGr0JX6ZHevsDk=
Subject key identifier:   20:DA:40:12:8A:17:C4:28:ED:2A:0C:08:C9:64:F3:40:E4:22:D6:A1
Authority key identifier: 7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79
Certificate issuer:       /CN=F366AE59AR/serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
Certificate serial:       0206
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
Manifest number:          0205
Signing time:             Sat 23 Aug 2025 04:25:31 +0000
Manifest this update:     Sat 23 Aug 2025 04:25:30 +0000
Manifest next update:     Mon 25 Aug 2025 04:25:30 +0000
Files and hashes:         1: fitobmq6qC0Tpu6fS-fmmmuN_3k.crl (hash: 8pwD6cUAvr5uu+ZxeLMZjHSvPOr6xY79wAVvk1dr0Zg=)
                          2: D55071E2F57711EE9C79B75F775412E6.roa (hash: JwIZwppDkh7nSLuQ5FmIaDKSeTXhtwFxqvQi4jhkWJQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                          rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AR, serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
        Validity
            Not Before: Aug 23 04:25:30 2025 GMT
            Not After : Aug 25 04:25:30 2025 GMT
        Subject: CN=68a942bb-90a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:6b:c5:b2:0a:98:56:92:86:4d:5f:ac:d0:
                    9d:50:29:f4:e8:ad:02:eb:be:58:5c:a5:2c:f9:aa:
                    7d:59:ea:52:79:7a:f3:61:5f:ea:1a:c5:8e:8e:cb:
                    6d:c2:67:eb:7a:08:35:39:07:dc:ae:c6:9f:11:f1:
                    fa:53:67:de:9b:e9:70:0f:5f:13:f6:a8:57:4c:86:
                    f6:c9:b6:8c:f8:9f:59:d0:e5:fa:72:be:5a:38:fc:
                    0d:c0:11:ef:e8:7d:41:1e:b7:93:49:f9:07:15:b4:
                    fd:a3:a9:ca:0b:94:30:1d:7a:ff:be:4e:49:b6:b8:
                    75:da:0a:51:be:cf:61:98:4f:21:3c:89:92:c5:12:
                    ec:98:4f:24:9e:b9:68:94:3d:79:91:d8:bc:f5:82:
                    f4:bc:55:3d:43:2a:47:0a:e7:63:0a:b3:47:d6:89:
                    a0:27:e2:29:93:8a:f0:21:76:0b:8d:d1:aa:70:50:
                    c7:84:da:6c:8a:4c:71:bb:a2:62:14:8b:31:55:c1:
                    7f:cf:b7:5e:f1:97:a5:2d:b8:f2:bc:7c:67:96:70:
                    c6:67:88:13:2f:5a:0e:f2:42:f4:fe:c2:be:78:0c:
                    2b:25:a0:ee:f7:5e:2b:a6:bd:8c:9a:cf:bb:15:c9:
                    5e:a5:ed:0c:78:d6:85:63:9b:e7:b2:aa:ef:0d:28:
                    5c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DA:40:12:8A:17:C4:28:ED:2A:0C:08:C9:64:F3:40:E4:22:D6:A1
            X509v3 Authority Key Identifier:
                keyid:7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:63:ad:51:5b:3c:e6:b3:ce:75:2f:44:c7:09:a8:83:38:6f:
         08:a2:70:84:08:03:c5:95:63:b4:58:da:25:d8:02:f4:da:7d:
         ee:1c:66:10:6f:69:ed:70:7d:ce:59:ed:68:71:bd:dc:37:93:
         f5:4e:ed:fd:54:b0:c2:53:bf:4e:76:18:59:6e:59:0f:f0:aa:
         75:a0:c8:db:a4:d0:64:12:70:7d:6b:3c:61:97:7f:e3:cf:c8:
         d8:e8:40:80:ca:a0:48:d2:a2:c7:3b:05:cb:44:a6:a4:e0:99:
         79:aa:10:a4:5d:ff:ae:0f:24:6e:72:a0:4b:ee:6c:44:a9:26:
         dd:c9:4d:36:be:51:83:e8:1f:8a:22:56:9b:66:f4:f0:2d:91:
         02:c4:7d:a7:e5:4d:d2:d1:aa:6d:c2:89:60:50:b9:74:ba:11:
         83:2e:ef:47:65:5b:a2:9c:91:dd:04:27:a0:84:ca:82:b4:e2:
         4d:d0:1e:55:4d:b0:07:d7:39:8f:3f:e8:93:1e:6a:01:b8:26:
         50:a6:5a:bb:05:ad:bd:23:58:8e:91:76:fd:73:34:6f:89:49:
         39:9f:d0:82:0b:10:fb:dc:28:ec:50:d6:f5:40:e6:b6:f6:40:
         cc:82:b5:c5:39:2b:44:4f:18:24:c5:ce:75:c6:69:80:5c:f2:
         74:3e:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:37 2025 by rpki-client