Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
File:                     otd9qqMurfowwn_FTDYvrBwxtaM.mft (raw, json)
Hash identifier:          289IffHIlQWdCrVTiA6tojzSlAaD/dvXMP1Gl16gNX0=
Subject key identifier:   89:5E:D2:7D:3B:EB:0F:B9:9C:40:51:EA:84:0D:AF:A9:AD:A0:17:1E
Authority key identifier: A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3
Certificate issuer:       /CN=F36A15D5AR/serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
Certificate serial:       08D1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
Manifest number:          08CF
Signing time:             Sat 23 Aug 2025 01:36:16 +0000
Manifest this update:     Sat 23 Aug 2025 01:36:15 +0000
Manifest next update:     Mon 25 Aug 2025 01:36:15 +0000
Files and hashes:         1: otd9qqMurfowwn_FTDYvrBwxtaM.crl (hash: h4VKi+V6mtou+YgUQsvz9n37ANEh4EydtiHe2mkNl/A=)
                          2: 9965A5A606AE11EA96066744F8AEA228.roa (hash: wIbFP7nt0VapeRtyrT6a4GxS47/3LZ5/NRY7qSwEjUk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
                          rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257 (0x8d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A15D5AR, serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
        Validity
            Not Before: Aug 23 01:36:15 2025 GMT
            Not After : Aug 25 01:36:15 2025 GMT
        Subject: CN=68a91b10-34ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:61:0b:23:20:68:ff:f2:4f:02:91:d1:5c:
                    24:ca:b9:df:4d:04:23:5f:9c:3d:70:bc:45:e1:8c:
                    df:f0:09:c8:b8:47:ae:e6:7d:75:a3:9c:4c:a4:9e:
                    d4:a2:05:9c:71:9c:c7:0e:a6:d6:5e:4f:ab:68:fd:
                    2f:d9:eb:be:45:f0:59:9b:6f:ae:3a:e2:fc:97:83:
                    77:fa:6d:12:c6:63:ec:0f:08:78:03:d9:3c:81:4f:
                    ae:f3:ac:bd:91:cb:f4:95:99:e6:7a:14:02:73:03:
                    97:86:a9:a0:17:a6:8a:df:28:08:89:a4:30:ef:ed:
                    55:78:32:d8:ef:2c:79:e9:9a:76:da:88:ca:db:ec:
                    c2:43:0e:6a:ec:24:d3:53:2c:57:47:59:4b:eb:fa:
                    e7:fd:1a:7d:29:93:b1:7d:9d:ad:54:aa:7d:7f:81:
                    8e:8e:c6:4f:9b:2d:32:2a:dd:85:96:12:0b:ee:2e:
                    f2:57:f2:e6:f7:da:03:a4:df:5b:ff:16:0b:5a:62:
                    0a:83:f6:65:83:76:7e:bf:bb:07:f7:1e:a2:b6:98:
                    7b:90:36:00:4b:e4:9a:34:f9:e5:61:8c:aa:a0:e1:
                    4a:32:66:b4:47:6b:54:87:24:41:cc:a8:6a:27:43:
                    9a:76:95:74:0a:8a:ae:a1:f4:2c:ce:41:25:73:f5:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5E:D2:7D:3B:EB:0F:B9:9C:40:51:EA:84:0D:AF:A9:AD:A0:17:1E
            X509v3 Authority Key Identifier:
                keyid:A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:af:e0:b9:af:02:4f:b1:05:2b:0e:8e:27:08:a0:d6:60:5b:
         44:a0:09:b6:38:b4:8a:55:fb:05:9b:fc:7f:a1:c7:a9:4a:4b:
         b3:0b:5d:9b:e9:ad:fc:a4:ff:a4:d1:47:2c:50:59:6c:ea:7e:
         ed:bf:11:ec:2f:2a:91:35:ee:38:c0:5f:e7:3c:06:ae:39:15:
         d8:db:ec:f5:4d:b0:90:bf:c8:07:10:0c:0c:a8:bd:6f:45:46:
         e3:30:ec:72:02:6d:89:89:dd:bf:5f:23:f1:29:0c:8d:84:8d:
         e5:c6:5f:d3:7a:6c:b0:09:53:ba:56:02:e3:5a:86:fd:9c:1a:
         19:02:9d:17:c0:99:03:2b:18:33:29:8f:70:2d:f8:81:53:2c:
         1f:2d:1b:e8:dc:cf:53:6b:58:96:91:fb:5c:11:b8:6e:bd:19:
         60:64:84:7e:65:eb:5b:90:f2:95:45:13:be:11:54:0a:38:77:
         b7:28:9f:a7:01:aa:1b:83:df:65:f5:08:95:5b:15:e9:9e:24:
         63:48:14:99:13:cc:be:d3:77:a1:e7:9c:7e:1a:f6:9d:99:85:
         9a:78:bf:68:3a:fc:29:4d:2d:aa:83:95:52:54:04:3a:01:1e:
         48:ac:4e:db:f2:d4:3a:52:49:15:94:c6:c2:3a:b5:74:54:87:
         aa:d1:66:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:05 2025 by rpki-client