Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
File:                     oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft (raw, json)
Hash identifier:          OqSANv8G9XcSj2nTebfNoRjP08CYXgHR3i6zufR+ib4=
Subject key identifier:   03:26:1D:AE:EE:E1:9A:89:0A:63:8D:A6:DF:20:AB:EA:B4:7D:A8:18
Authority key identifier: A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
Certificate issuer:       /CN=F36776F1AR/serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
Certificate serial:       0125
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
Manifest number:          011A
Signing time:             Sat 23 Aug 2025 05:03:33 +0000
Manifest this update:     Sat 23 Aug 2025 05:03:33 +0000
Manifest next update:     Mon 25 Aug 2025 05:03:33 +0000
Files and hashes:         1: oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl (hash: OvFfCr3+FQZ57F6qVn5b0cwuqD3PMRceXUifIGiwtlA=)
                          2: F891118CBE3711EF94207A53762E951A.roa (hash: /BSsoHmVYWT3uZmtUs29hLyCS4VFjhVXegvsldImsTY=)
                          3: F4E3CCE6C2FB11EFB2921875762E951A.roa (hash: em5+W6hV5wb4UsoaGm9yNPcphUOmzIzRc/FvZi8E2vQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
                          rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36776F1AR, serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
        Validity
            Not Before: Aug 23 05:03:33 2025 GMT
            Not After : Aug 25 05:03:33 2025 GMT
        Subject: CN=68a94ba5-7b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:28:5b:5a:22:c5:0f:e6:3e:91:f5:8a:37:f6:
                    7d:86:eb:2a:71:38:e7:6e:4b:8b:fb:9e:31:5a:0f:
                    9f:a8:56:87:09:5d:80:c8:da:27:07:d7:cf:09:e2:
                    24:29:9f:fb:cf:c9:ce:42:17:33:02:99:f1:2f:3e:
                    8d:a4:dc:ff:19:2d:47:d0:d5:2f:11:01:14:8a:2e:
                    6f:cc:33:d6:9d:01:8b:09:47:3f:46:8b:5c:d5:2b:
                    9d:84:04:51:d5:a7:8a:2b:4d:80:b0:88:29:d2:b0:
                    41:9b:f1:ec:33:8f:5e:cc:c0:b6:29:3b:ff:7b:77:
                    f9:8c:4e:8a:b2:8a:69:bd:eb:d2:ce:f9:ef:84:ed:
                    9b:f2:58:cf:b4:de:f3:e7:01:3f:37:83:3f:28:21:
                    2a:58:67:53:84:12:44:3c:d9:c7:a4:92:61:b0:b1:
                    ee:52:af:b4:a7:90:2c:28:50:08:77:4a:a1:7a:0d:
                    db:ca:a5:6c:79:a6:b3:8b:98:c1:5b:29:68:66:bd:
                    2e:41:b1:ae:2e:04:54:14:68:34:0a:36:67:f9:71:
                    a5:c7:38:9a:99:f6:96:05:6c:40:c4:ea:1c:db:53:
                    e4:5a:27:1a:6c:04:c4:78:0a:f2:22:27:c0:02:16:
                    91:ba:5d:57:26:dc:cf:f4:08:d6:c2:18:48:35:e0:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:26:1D:AE:EE:E1:9A:89:0A:63:8D:A6:DF:20:AB:EA:B4:7D:A8:18
            X509v3 Authority Key Identifier:
                keyid:A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:0b:5f:41:19:f3:6c:2d:b4:5e:6e:3c:72:e4:6d:35:5d:9f:
         e1:ac:20:0a:51:64:a8:1c:1e:91:e6:91:e7:f0:e4:a2:7c:fb:
         42:af:b2:90:4d:f1:1c:1d:19:e0:ea:cd:f8:12:d6:db:37:23:
         02:62:04:be:41:38:a5:46:3a:c1:32:2c:2a:9b:53:ac:46:f1:
         ef:5b:ee:fa:df:14:60:37:4a:62:17:29:c0:c9:28:d7:b7:90:
         c9:25:a1:3c:4c:c0:c8:7c:c4:d0:f9:c0:f2:48:95:73:ee:42:
         d5:ab:61:31:fe:d1:84:b4:54:9c:38:57:57:03:fe:db:2a:5c:
         eb:2c:d4:46:71:94:fe:c0:f6:8d:3f:a8:e0:8b:af:a0:73:54:
         e6:74:10:60:7b:fc:db:97:1e:5c:9c:af:92:6e:68:55:c2:97:
         01:a9:1a:3d:ba:cf:5e:cb:47:bd:02:4e:7a:3e:7c:27:65:cb:
         ee:c2:84:6d:fa:aa:2b:e4:ed:8a:1f:10:33:f3:e6:11:6d:39:
         3c:91:e0:77:6d:ce:2b:3a:53:a3:bf:c0:0c:8b:38:97:71:f1:
         a3:d8:dd:10:22:b6:b7:ec:cc:09:da:81:56:1e:6c:13:e6:e9:
         91:24:7c:78:47:70:66:17:3b:e1:c7:75:ed:d3:08:fc:80:38:
         99:3b:9d:ad
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICASUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzc2RjFBUjExMC8GA1UEBRMoQTBGNzg5N0Y2NzU4N0NBNjQ1QjM1MTQxMDEwQTVB
QTFBMzA1N0Y2QzAeFw0yNTA4MjMwNTAzMzNaFw0yNTA4MjUwNTAzMzNaMBgxFjAU
BgNVBAMTDTY4YTk0YmE1LTdiMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaKFtaIsUP5j6R9Yo39n2G6ypxOOduS4v7njFaD5+oVocJXYDI2icH188J
4iQpn/vPyc5CFzMCmfEvPo2k3P8ZLUfQ1S8RARSKLm/MM9adAYsJRz9Gi1zVK52E
BFHVp4orTYCwiCnSsEGb8ewzj17MwLYpO/97d/mMToqyimm969LO+e+E7ZvyWM+0
3vPnAT83gz8oISpYZ1OEEkQ82cekkmGwse5Sr7SnkCwoUAh3SqF6DdvKpWx5prOL
mMFbKWhmvS5Bsa4uBFQUaDQKNmf5caXHOJqZ9pYFbEDE6hzbU+RaJxpsBMR4CvIi
J8ACFpG6XVcm3M/0CNbCGEg14PANAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUAyYd
ru7hmokKY42m3yCr6rR9qBgwHwYDVR0jBBgwFoAUoPeJf2dYfKZFs1FBAQpaoaMF
f2wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc3NkYxLzU5MkRGNkEyQjg5NTExRUY5Mzc1MkQ2Qjc2MkU5NTFBL29QZUpm
MmRZZktaRnMxRkJBUXBhb2FNRmYydy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L29QZUpmMmRZZktaRnMxRkJBUXBhb2FNRmYydy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Nzc2RjEvNTkyREY2QTJCODk1MTFFRjkzNzUyRDZCNzYyRTk1
MUEvb1BlSmYyZFlmS1pGczFGQkFRcGFvYU1GZjJ3Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrC19BGfNsLbRebjxy5G01XZ/hrCAKUWSo
HB6R5pHn8OSifPtCr7KQTfEcHRng6s34EtbbNyMCYgS+QTilRjrBMiwqm1OsRvHv
W+763xRgN0piFynAySjXt5DJJaE8TMDIfMTQ+cDySJVz7kLVq2Ex/tGEtFScOFdX
A/7bKlzrLNRGcZT+wPaNP6jgi6+gc1TmdBBge/zblx5cnK+SbmhVwpcBqRo9us9e
y0e9Ak56PnwnZcvuwoRt+qor5O2KHxAz8+YRbTk8keB3bc4rOlOjv8AMiziXcfGj
2N0QIra37MwJ2oFWHmwT5umRJHx4R3BmFzvhx3Xt0wj8gDiZO52t
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:24:48 2025 by rpki-client