Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
File:                     xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft (raw, json)
Hash identifier:          xb6rcekNMuPLSIvOuw1/Wvm5+04XxeBN8QSrckPp7e8=
Subject key identifier:   A9:45:82:39:99:3B:E9:C2:45:AA:CE:B1:4E:22:16:C3:08:6C:F6:53
Authority key identifier: C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4
Certificate issuer:       /CN=F3695A2AAR/serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
Certificate serial:       0248
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
Manifest number:          0246
Signing time:             Sat 23 Aug 2025 04:18:01 +0000
Manifest this update:     Sat 23 Aug 2025 04:18:00 +0000
Manifest next update:     Mon 25 Aug 2025 04:18:00 +0000
Files and hashes:         1: xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl (hash: kZp//x6sEdDl9ITmFXQ3ZN2GwHJ9oTMkQWSNVtWsnCg=)
                          2: 6FFF2C08413411EFA7FB5A60762E951A.roa (hash: iN5LnQR83/zdvQSHnZNsxLnJVE/qt/FcoEST3TDCqcY=)
                          3: A98258D0404C11EFA55BD559762E951A.roa (hash: FlBCIPwQ4YkejGviFEaWQJchhPbjvvwNsjpap4nCAeQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                          rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAR, serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
        Validity
            Not Before: Aug 23 04:18:00 2025 GMT
            Not After : Aug 25 04:18:00 2025 GMT
        Subject: CN=68a940f9-afb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:40:84:c7:f8:0d:f9:54:15:d9:21:28:16:8f:
                    16:4d:48:c8:ae:f6:84:87:1e:75:19:b3:4b:83:e1:
                    2a:60:46:33:b3:23:94:98:5a:6a:c7:11:a0:af:57:
                    a3:6a:70:a6:c0:36:90:d3:2c:8b:e4:f3:40:94:b8:
                    39:91:15:fa:e7:ca:09:23:c5:da:2f:63:34:aa:e0:
                    da:f8:65:75:9d:d9:5c:84:4a:0e:79:40:9e:9d:d3:
                    45:b4:f8:b1:45:f0:33:7a:4c:f5:6c:e8:26:42:71:
                    a0:57:af:78:51:c6:1a:a8:1c:55:a1:22:56:96:3f:
                    c0:08:bd:6f:23:75:e9:50:8e:62:78:9a:f3:fa:0c:
                    27:b2:f4:68:05:93:0a:ca:8e:29:88:c1:33:6f:aa:
                    6e:98:36:d2:20:b5:ec:dc:d7:81:d4:6f:36:dc:cd:
                    71:14:ca:6a:b2:59:63:bf:9e:8e:80:7f:0d:2c:4b:
                    80:c2:0c:0d:7d:a8:13:a2:7a:c7:05:9e:68:74:20:
                    6d:ec:19:34:27:96:58:33:16:c8:58:d9:1c:0f:53:
                    46:57:d0:4c:8b:3f:04:e8:2b:76:f3:4b:d8:d9:98:
                    a9:72:e2:42:2d:c4:05:01:9c:fb:5b:bf:6e:67:4d:
                    9f:85:e8:ef:f5:47:c7:39:60:5e:0c:b3:7b:bc:b9:
                    79:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:45:82:39:99:3B:E9:C2:45:AA:CE:B1:4E:22:16:C3:08:6C:F6:53
            X509v3 Authority Key Identifier:
                keyid:C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1f:a8:e8:af:71:7a:61:6a:0e:d0:77:96:a8:c2:d7:8d:7c:
         b1:11:8d:98:f4:60:4d:36:81:e1:34:62:cf:c6:78:e8:61:f7:
         13:ec:31:b6:77:9f:5e:25:b5:c2:2f:94:e9:50:74:11:8f:1e:
         6a:06:7e:09:50:47:b2:f0:dc:65:77:b6:ff:22:88:7c:a5:ca:
         4c:5f:1c:42:3c:ce:e0:6b:b0:68:bc:b9:21:fe:23:a5:a4:68:
         f2:c5:0d:0d:2e:85:7c:75:9c:04:05:aa:27:3c:cc:5f:7b:5c:
         d7:dd:b5:d2:12:a8:b0:35:47:dc:7b:49:53:35:c0:08:6b:eb:
         c8:79:1a:d1:9d:f4:7c:f6:a2:d4:c5:f0:a4:49:3f:f0:21:a9:
         85:b9:cd:37:ee:74:a4:c1:8d:45:0c:e4:98:5e:c9:52:c0:4d:
         cb:ad:31:47:03:40:09:4e:5f:1c:6b:62:11:cf:c0:a1:cb:f6:
         ea:28:bb:09:0e:7b:ff:06:0b:de:9f:c6:4a:b4:a4:75:a3:0c:
         6a:bb:50:51:34:a3:53:ad:9c:c3:07:f5:4d:7d:1c:fa:56:b1:
         b7:56:31:f0:59:fe:3c:a3:16:19:bb:af:6c:bd:52:b8:15:8a:
         62:62:67:d4:c7:ba:2d:79:39:39:38:ea:90:ee:22:bf:ba:5d:
         2d:6b:63:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:16 2025 by rpki-client