Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
File:                     tKCUA2WAIUx9QccbjIZXpO4vQHI.mft (raw, json)
Hash identifier:          2k95e2LAqYsz7qhm1cEe5yPsdIbYWKL5mv66p9PZQxU=
Subject key identifier:   22:FA:45:46:7C:E9:DE:EF:37:54:E6:8D:F7:F3:85:8E:E7:52:8A:86
Authority key identifier: B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
Certificate issuer:       /CN=F367678FAR/serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
Certificate serial:       0142
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
Manifest number:          0142
Signing time:             Sun 06 Jul 2025 04:52:41 +0000
Manifest this update:     Sun 06 Jul 2025 04:52:40 +0000
Manifest next update:     Tue 08 Jul 2025 04:52:40 +0000
Files and hashes:         1: tKCUA2WAIUx9QccbjIZXpO4vQHI.crl (hash: /ut16dJPCR9SB5gzMWYhRjDPTVryVyP8tW4c1CfQ0qk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
                          rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAR, serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
        Validity
            Not Before: Jul  6 04:52:40 2025 GMT
            Not After : Jul  8 04:52:40 2025 GMT
        Subject: CN=686a0119-837b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:b5:9e:fa:f3:9e:01:83:25:e3:a3:11:b4:
                    f9:0a:ff:29:3d:fc:57:78:c1:7b:6a:d8:7f:8b:14:
                    4e:f5:b7:d8:19:ae:b9:8b:8c:08:a8:ed:f1:36:20:
                    1e:ac:be:17:ba:0c:ab:41:49:30:6c:61:ad:8c:34:
                    2b:ad:60:df:88:89:47:b6:2e:aa:ae:8c:d8:21:4a:
                    0c:96:60:8d:0d:83:10:7f:87:57:25:3a:c1:9d:17:
                    2d:03:d8:98:c6:c9:88:3a:79:a3:31:98:7a:7e:8c:
                    9c:43:bb:c5:2e:98:f5:9c:6c:b1:04:4e:3a:96:3a:
                    cd:be:45:61:27:e6:3f:78:81:69:f0:a3:8b:e0:a9:
                    dd:b0:e3:b2:4b:b7:e6:e5:00:3d:40:96:00:c2:4a:
                    ea:39:81:61:8c:f7:31:ad:60:5c:99:31:5b:bc:ec:
                    69:64:5e:b0:2c:ff:fb:fc:5b:53:df:77:ab:1a:15:
                    95:96:b0:06:ed:ee:dc:28:d9:0d:67:fd:6f:77:23:
                    d3:f5:b4:43:1f:69:6b:32:17:6b:e4:84:71:f4:43:
                    6b:76:17:84:b2:e2:4e:19:f4:79:39:9d:77:83:7f:
                    46:f2:36:0c:b1:1f:92:ed:9f:86:62:08:c2:12:89:
                    3c:23:1e:cf:57:d1:4c:61:96:53:f3:02:7d:62:c6:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FA:45:46:7C:E9:DE:EF:37:54:E6:8D:F7:F3:85:8E:E7:52:8A:86
            X509v3 Authority Key Identifier:
                keyid:B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ca:63:8f:78:ee:cc:f6:c7:e3:5a:b0:3c:ba:f1:48:43:fd:
         74:c5:80:0e:49:f1:48:6d:13:b0:99:8f:4e:35:3a:1f:27:85:
         bc:aa:a9:e7:57:d1:2c:ca:3b:c6:55:53:3a:2c:67:4f:f6:c5:
         ec:cc:56:3c:29:cf:16:75:91:ff:6e:ed:67:58:e3:4f:6a:ae:
         af:0d:df:8c:af:5a:30:34:4f:ac:c7:ff:f0:b4:12:fa:07:ad:
         9e:0f:bd:93:27:ef:76:5b:0f:22:d8:fe:76:9e:92:db:e0:b2:
         03:38:0c:14:75:ae:bf:c6:02:bc:8a:05:d3:05:ec:ad:b1:40:
         00:39:77:aa:da:a7:f6:89:fd:a3:72:17:d4:32:43:0c:aa:86:
         ab:8a:4c:bd:d9:ec:2d:d9:26:45:d2:59:b2:4e:d4:c2:f2:89:
         3b:87:61:bc:88:4a:99:c0:af:d7:16:56:4f:dc:92:df:d5:a7:
         ad:02:79:f0:7d:9b:79:47:f0:15:f2:81:3c:7b:b8:ae:76:05:
         0a:4a:22:ea:da:37:3c:1b:40:78:f5:4c:20:ad:01:c5:13:72:
         97:a3:0c:80:58:72:4f:30:3e:30:bf:3c:b7:02:e2:2b:1d:4e:
         7c:f9:bc:a4:62:17:aa:1c:6d:07:16:d5:a2:7a:30:e5:d6:21:
         b5:e9:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 14:12:20 2025 by rpki-client