Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
File:                     jho3RHX7X1BwyGbGDdVeiurPcXM.mft (raw, json)
Hash identifier:          1Pq2SbzXyh3Rq+SIcB4ZX8obZqlK6JEVzgNuEQ7dxsA=
Subject key identifier:   ED:B7:DF:C7:62:5A:B1:58:A3:50:72:2C:36:2E:DC:B5:59:3A:53:36
Authority key identifier: 8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73
Certificate issuer:       /CN=F36A31C5AR/serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
Certificate serial:       0151
Authority info access:    rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
Manifest number:          0150
Signing time:             Mon 20 Oct 2025 04:48:10 +0000
Manifest this update:     Mon 20 Oct 2025 04:48:09 +0000
Manifest next update:     Wed 22 Oct 2025 04:48:09 +0000
Files and hashes:         1: jho3RHX7X1BwyGbGDdVeiurPcXM.crl (hash: 6mbYrQ0hFPIvkFOYLTozqOFNptepps2dkIEmGNaMG0s=)
                          2: 77A53CFAAD8011EF8D542C9E762E951A.roa (hash: w9cTIDCHrbI8wxVcQWpv1wqBRl6yaH60seRon5+S8UE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                          rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A31C5AR, serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
        Validity
            Not Before: Oct 20 04:48:09 2025 GMT
            Not After : Oct 22 04:48:09 2025 GMT
        Subject: CN=68f5bf0a-e3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:eb:2b:28:73:70:b9:11:82:34:7c:33:a0:
                    a4:97:09:39:04:37:5e:a9:16:13:48:ac:91:88:94:
                    6a:30:a5:0d:5a:ba:e7:a5:c0:f7:ba:ee:9a:96:c9:
                    77:65:be:b6:49:68:ea:03:12:85:ef:ae:7a:ed:60:
                    5e:cf:c0:a7:31:bb:4c:ba:00:ba:d6:09:bc:9e:1f:
                    70:c5:de:0b:79:73:49:76:f6:d7:82:b3:74:e7:76:
                    16:45:b6:3a:f7:3f:41:77:3f:95:3a:16:5e:4b:54:
                    df:75:f0:0a:2f:4f:af:31:86:f0:01:16:a5:22:80:
                    6d:c0:6c:71:fb:8a:3a:45:fa:07:d3:4d:0a:32:aa:
                    89:8d:8c:2a:6f:5d:dd:3d:92:30:28:96:f5:42:59:
                    70:4f:03:a4:c1:1a:2e:33:af:ef:59:f1:41:63:ea:
                    54:08:7d:92:bb:16:d1:45:dc:fb:dd:c4:cb:5e:30:
                    9a:c3:3e:7d:a4:aa:75:e9:e9:86:7c:34:80:5c:67:
                    b2:41:87:f8:47:91:00:15:37:5b:21:d0:2a:11:70:
                    2c:43:67:8e:25:4f:09:2f:db:97:13:a7:6f:3b:60:
                    70:d2:a6:f2:47:cf:9d:76:84:78:c6:14:ba:fb:9e:
                    1c:ad:97:1a:43:7a:5c:b3:d3:a5:fc:c3:f3:85:f9:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B7:DF:C7:62:5A:B1:58:A3:50:72:2C:36:2E:DC:B5:59:3A:53:36
            X509v3 Authority Key Identifier:
                keyid:8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:fb:ce:c3:96:9f:9f:d0:f3:6a:e1:f1:f0:f0:46:6c:fe:4d:
         63:8c:9b:2e:ab:b7:14:f1:47:6e:d0:75:12:34:17:65:10:9c:
         3a:34:e9:76:a3:27:4d:55:9c:ab:82:5d:79:46:c1:40:92:44:
         5a:c3:b9:53:9e:e3:b7:a7:1b:a1:8a:76:37:ac:ea:5f:f2:14:
         06:1e:c6:f0:b7:6c:3f:83:69:10:c8:74:9a:14:54:29:33:8a:
         3c:3f:d8:f8:8e:c9:90:c7:57:f0:62:5b:af:d1:e6:d6:34:63:
         81:dd:63:e0:1c:78:ea:34:d9:38:e9:48:e5:b5:e9:6c:30:85:
         ad:d8:c8:00:0d:67:04:5f:dd:0c:ab:d6:6b:25:c5:22:85:43:
         98:a1:4c:0f:dc:ec:38:ce:bc:7a:ed:e1:b2:a1:7b:44:88:37:
         ef:ad:45:a4:1c:6f:fb:8f:1b:20:fa:52:ac:bb:59:35:1c:51:
         25:e2:f2:e2:f2:b5:33:db:6f:34:6f:65:21:19:09:8b:f6:c7:
         bb:90:3f:6b:f9:8b:35:39:4f:4a:d8:43:9b:63:29:c2:3a:81:
         60:f7:c9:d8:e4:b8:97:b7:3e:fa:2c:b3:bc:84:f5:78:58:c9:
         d9:db:1b:00:3d:74:5c:d6:a6:43:9d:83:8d:0c:36:87:5f:a9:
         4e:36:69:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:57 2025 by rpki-client