Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
File:                     9zORrduc3mc6pJF07KjUMLSfGcM.mft (raw, json)
Hash identifier:          14PpdDnwfcmnA+WXhVRca8x5IYIVXHqMkjxcGuSVMEA=
Subject key identifier:   99:A9:53:6C:DA:14:76:D9:18:D2:BB:37:F8:2A:A8:76:0F:1A:CB:5C
Authority key identifier: F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3
Certificate issuer:       /CN=F36914A7AR/serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
Certificate serial:       0882
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
Manifest number:          0881
Signing time:             Sat 23 Aug 2025 01:41:50 +0000
Manifest this update:     Sat 23 Aug 2025 01:41:49 +0000
Manifest next update:     Mon 25 Aug 2025 01:41:49 +0000
Files and hashes:         1: 9zORrduc3mc6pJF07KjUMLSfGcM.crl (hash: 3L4uJ2BHetn0fhf2nlVMj8vA3WhB3Z/pE8QNw3UNcc0=)
                          2: FBB32E86FC8111E9BB7F292CF8AEA228.roa (hash: HuM3BwkpOIpwBJ+xYmwrtHtu6kY28m4Q/SLVfLjrjjs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                          rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2178 (0x882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AR, serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
        Validity
            Not Before: Aug 23 01:41:49 2025 GMT
            Not After : Aug 25 01:41:49 2025 GMT
        Subject: CN=68a91c5e-1683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a1:44:bd:b6:7a:fb:e7:e6:90:8a:d2:cb:c5:
                    68:cd:18:82:e0:0d:2c:b9:e8:f2:f7:a5:34:94:be:
                    f2:22:e2:38:46:a0:2d:d5:ff:65:48:93:b3:09:07:
                    10:c6:87:7a:94:d7:7d:85:4c:2c:d5:29:e2:9f:c8:
                    46:66:c0:80:32:7a:c8:b4:d2:04:a5:bf:59:ae:f8:
                    0c:7f:37:8e:b7:e4:55:fe:1d:f6:19:9a:e3:2d:c1:
                    90:68:0f:39:ca:fb:24:dd:69:8f:10:59:ae:c5:39:
                    c1:35:42:a7:a1:4e:7a:b0:36:ce:57:ae:a3:26:b2:
                    2f:0d:8c:da:00:81:4b:f8:a4:d1:82:98:05:ad:d4:
                    05:3c:ce:19:7b:43:2d:98:4f:22:4a:21:95:a4:cf:
                    83:35:f6:9d:c2:8e:71:64:c2:d8:49:d6:da:f3:13:
                    89:5a:c4:af:8a:73:9e:53:9e:3d:d3:67:46:85:a4:
                    af:83:f2:35:0e:8b:d5:db:bf:05:89:1c:fb:f6:7c:
                    c8:42:c5:d5:42:b5:a3:08:d8:15:96:b6:85:31:7b:
                    90:f0:f5:9a:0a:8f:a3:7b:d2:82:05:19:88:b7:8a:
                    51:97:d4:e8:ce:9f:10:5c:f0:2e:85:8b:cd:64:20:
                    40:63:00:cf:bc:9f:d6:a7:c6:75:a8:48:12:12:cc:
                    93:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A9:53:6C:DA:14:76:D9:18:D2:BB:37:F8:2A:A8:76:0F:1A:CB:5C
            X509v3 Authority Key Identifier:
                keyid:F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:12:59:29:4a:b4:d8:7d:74:a6:0f:25:6d:7a:5f:2a:ce:ee:
         75:9c:b5:bb:52:25:a9:86:63:04:0f:d8:8c:31:41:91:f5:cd:
         b9:bf:3b:23:51:f8:f6:a9:b0:87:16:8d:5f:87:97:80:a4:85:
         a5:85:44:ed:f2:63:3b:e2:66:61:3f:d4:f3:96:37:47:71:db:
         9e:da:b7:75:e8:b4:dd:a4:b3:1c:87:b0:15:ce:ba:3a:d8:da:
         7f:12:a7:4a:10:70:76:c0:da:e1:72:3b:da:ac:ec:f7:6c:0e:
         67:80:3c:6a:e1:43:89:60:7b:2f:33:a8:45:2b:d1:f3:8b:1b:
         de:af:56:27:64:1c:74:ed:34:ad:95:9b:2b:01:3e:0b:fa:42:
         51:3f:d4:93:30:7e:4b:10:77:ab:a3:99:0e:1b:7a:c1:e7:86:
         51:8e:df:54:04:b7:38:cf:29:cd:9e:57:3b:45:87:14:50:a9:
         f8:c3:ef:6c:5b:5b:20:4e:4b:bf:a2:a5:78:61:0e:72:7e:50:
         0b:85:fb:1f:a1:09:6f:be:a6:69:11:35:9f:a8:06:de:20:21:
         b9:11:b0:3b:71:34:fc:d3:6c:1f:ae:1d:39:13:4b:18:29:15:
         6f:f6:90:eb:e7:6c:e0:b5:48:bc:88:b9:df:e1:c3:6a:2b:8f:
         1b:81:d4:ae
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTE0QTdBUjExMC8GA1UEBRMoRjczMzkxQUREQjlDREU2NzNBQTQ5MTc0RUNBOEQ0
MzBCNDlGMTlDMzAeFw0yNTA4MjMwMTQxNDlaFw0yNTA4MjUwMTQxNDlaMBgxFjAU
BgNVBAMTDTY4YTkxYzVlLTE2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUoUS9tnr75+aQitLLxWjNGILgDSy56PL3pTSUvvIi4jhGoC3V/2VIk7MJ
BxDGh3qU132FTCzVKeKfyEZmwIAyesi00gSlv1mu+Ax/N4635FX+HfYZmuMtwZBo
DznK+yTdaY8QWa7FOcE1QqehTnqwNs5XrqMmsi8NjNoAgUv4pNGCmAWt1AU8zhl7
Qy2YTyJKIZWkz4M19p3CjnFkwthJ1trzE4laxK+Kc55Tnj3TZ0aFpK+D8jUOi9Xb
vwWJHPv2fMhCxdVCtaMI2BWWtoUxe5Dw9ZoKj6N70oIFGYi3ilGX1OjOnxBc8C6F
i81kIEBjAM+8n9anxnWoSBISzJMvAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUmalT
bNoUdtkY0rs3+Cqodg8ay1wwHwYDVR0jBBgwFoAU9zORrduc3mc6pJF07KjUMLSf
GcMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkxNEE3L0Q4MkM0M0ZBRkJGRDExRTk5RTA0RTg0N0Y4QUVBMjI4Lzl6T1Jy
ZHVjM21jNnBKRjA3S2pVTUxTZkdjTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Lzl6T1JyZHVjM21jNnBKRjA3S2pVTUxTZkdjTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTE0QTcvRDgyQzQzRkFGQkZEMTFFOTlFMDRFODQ3RjhBRUEy
MjgvOXpPUnJkdWMzbWM2cEpGMDdLalVNTFNmR2NNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVElkpSrTYfXSmDyVtel8qzu51nLW7UiWp
hmMED9iMMUGR9c25vzsjUfj2qbCHFo1fh5eApIWlhUTt8mM74mZhP9TzljdHcdue
2rd16LTdpLMch7AVzro62Np/EqdKEHB2wNrhcjvarOz3bA5ngDxq4UOJYHsvM6hF
K9Hzixver1YnZBx07TStlZsrAT4L+kJRP9STMH5LEHero5kOG3rB54ZRjt9UBLc4
zynNnlc7RYcUUKn4w+9sW1sgTku/oqV4YQ5yflALhfsfoQlvvqZpETWfqAbeICG5
EbA7cTT802wfrh05E0sYKRVv9pDr52zgtUi8iLnf4cNqK48bgdSu
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:57:14 2025 by rpki-client