Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
File:                     5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft (raw, json)
Hash identifier:          FsxVlA3v9lZpMaBIocGb2e23725dADhREsa1q8KxooM=
Subject key identifier:   75:F1:8B:05:FF:23:68:B5:0A:38:77:E2:69:E8:0E:CB:CC:62:5C:11
Authority key identifier: E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
Certificate issuer:       /CN=F36AA888AR/serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Certificate serial:       08EB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
Manifest number:          08EA
Signing time:             Fri 04 Jul 2025 01:31:12 +0000
Manifest this update:     Fri 04 Jul 2025 01:31:11 +0000
Manifest next update:     Sun 06 Jul 2025 01:31:11 +0000
Files and hashes:         1: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl (hash: UTd924t38LTKU8xlyOZrkW95CmcNK/U7sRKXfIIokcY=)
                          2: 58B26BA4886211E99B31DD63F8AEA228.roa (hash: nvT/Y3DEz1TX+5D/zLT7HQfvvtuHBy4pd0aYSFdPAvg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                          rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283 (0x8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA888AR, serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
        Validity
            Not Before: Jul  4 01:31:11 2025 GMT
            Not After : Jul  6 01:31:11 2025 GMT
        Subject: CN=68672ee0-cdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:4c:62:a9:4f:46:bc:e3:8a:b8:af:8d:2c:
                    f2:c0:12:bd:e7:3b:f7:f0:45:6a:ed:97:3b:5e:f7:
                    42:8b:4c:a8:54:b7:0e:be:c0:84:7e:9d:f0:07:43:
                    51:a3:b8:7f:d8:94:b6:bd:e9:b6:20:4a:1d:f4:91:
                    f0:bf:c5:06:2e:06:64:da:95:a3:b3:f7:a9:fb:2d:
                    56:fd:52:92:48:bb:2a:dd:e9:ea:b3:2c:4a:2f:76:
                    16:9f:d9:c6:0d:8e:5a:d3:e1:a8:a0:93:c7:80:a8:
                    c0:a3:72:0e:23:91:fb:c6:0a:a5:1f:92:a0:92:46:
                    e6:26:47:34:93:34:c8:58:1c:e6:66:e1:5f:b1:fc:
                    ae:06:87:e9:e7:64:84:fd:6f:a4:36:ba:6f:b5:61:
                    71:02:b0:43:9e:b3:32:18:e0:e7:3a:cc:e6:63:51:
                    aa:76:e8:1e:6d:7a:2c:0d:88:13:c5:4b:eb:ed:77:
                    22:7b:1b:c1:cb:46:c5:36:22:d4:69:49:05:ee:80:
                    d1:4f:f3:37:75:d2:82:5d:42:15:62:45:3b:a7:eb:
                    10:23:2a:1a:54:1b:db:5e:37:4e:ec:68:57:60:3d:
                    29:ec:31:0a:09:00:99:26:f7:9b:23:36:04:82:82:
                    12:08:70:a4:1e:ed:85:24:0a:5a:ca:2f:97:e4:93:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F1:8B:05:FF:23:68:B5:0A:38:77:E2:69:E8:0E:CB:CC:62:5C:11
            X509v3 Authority Key Identifier:
                keyid:E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:50:33:ec:59:d5:94:00:4e:6d:e7:a8:69:71:11:72:49:ce:
         98:b6:d3:48:68:04:16:9e:2c:35:8a:32:57:4c:c4:53:ac:02:
         80:65:1e:9c:0d:8c:6a:3d:ea:63:d5:a3:1d:cd:a6:62:13:b7:
         d9:0f:12:b5:a9:8b:e5:96:ab:24:db:83:f9:ce:b3:a7:2d:59:
         30:d9:0b:6c:88:07:b2:8a:d9:62:5a:94:93:c1:e9:08:be:1d:
         eb:1c:f1:e1:3a:42:c1:e7:74:f8:70:9e:3b:56:47:52:b4:0d:
         90:77:60:8d:1e:b0:e2:18:5a:74:b9:c5:97:29:36:05:f8:68:
         1f:ed:12:34:5c:c9:eb:ae:26:3c:a5:3c:33:07:7c:b8:ab:a5:
         90:68:54:7a:7b:54:4f:fd:7b:a4:dc:c8:5d:dc:d4:09:66:d6:
         40:00:b2:2f:d0:70:a4:87:85:d2:b0:99:92:3f:ab:12:12:b4:
         f2:0c:60:9d:6a:be:fb:16:80:a8:78:36:e4:40:22:c7:18:61:
         2b:9e:d0:d6:b6:51:9c:c4:29:24:ff:cd:9f:d6:29:c6:6d:bc:
         03:c5:c5:d2:4b:d4:58:77:93:fe:14:25:50:0b:8b:7d:a9:89:
         df:07:f2:9e:e1:19:0e:f1:2c:08:32:ca:97:18:16:54:4d:08:
         6c:2c:3b:b4
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCOswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUE4ODhBUjExMC8GA1UEBRMoRTQ4RERBMTJGN0RCNDAzNTk0MTc4Q0E0QjhFRDQ2
RTY2MkFGOEVDQzAeFw0yNTA3MDQwMTMxMTFaFw0yNTA3MDYwMTMxMTFaMBgxFjAU
BgNVBAMTDTY4NjcyZWUwLWNkZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvIkxiqU9GvOOKuK+NLPLAEr3nO/fwRWrtlzte90KLTKhUtw6+wIR+nfAH
Q1GjuH/YlLa96bYgSh30kfC/xQYuBmTalaOz96n7LVb9UpJIuyrd6eqzLEovdhaf
2cYNjlrT4aigk8eAqMCjcg4jkfvGCqUfkqCSRuYmRzSTNMhYHOZm4V+x/K4Gh+nn
ZIT9b6Q2um+1YXECsEOeszIY4Oc6zOZjUap26B5teiwNiBPFS+vtdyJ7G8HLRsU2
ItRpSQXugNFP8zd10oJdQhViRTun6xAjKhpUG9teN07saFdgPSnsMQoJAJkm95sj
NgSCghIIcKQe7YUkClrKL5fkk4OLAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUdfGL
Bf8jaLUKOHfiaegOy8xiXBEwHwYDVR0jBBgwFoAU5I3aEvfbQDWUF4ykuO1G5mKv
jswwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFBODg4LzRCNzJCMzc4ODg2MTExRTlBMDBFMDg2M0Y4QUVBMjI4LzVJM2FF
dmZiUURXVUY0eWt1TzFHNW1Ldmpzdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzVJM2FFdmZiUURXVUY0eWt1TzFHNW1Ldmpzdy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QUE4ODgvNEI3MkIzNzg4ODYxMTFFOUEwMEUwODYzRjhBRUEy
MjgvNUkzYUV2ZmJRRFdVRjR5a3VPMUc1bUt2anN3Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRUDPsWdWUAE5t56hpcRFySc6YttNIaAQW
niw1ijJXTMRTrAKAZR6cDYxqPepj1aMdzaZiE7fZDxK1qYvllqsk24P5zrOnLVkw
2QtsiAeyitliWpSTwekIvh3rHPHhOkLB53T4cJ47VkdStA2Qd2CNHrDiGFp0ucWX
KTYF+Ggf7RI0XMnrriY8pTwzB3y4q6WQaFR6e1RP/Xuk3Mhd3NQJZtZAALIv0HCk
h4XSsJmSP6sSErTyDGCdar77FoCoeDbkQCLHGGErntDWtlGcxCkk/82f1inGbbwD
xcXSS9RYd5P+FCVQC4t9qYnfB/Ke4RkO8SwIMsqXGBZUTQhsLDu0
-----END CERTIFICATE-----
Generated at Fri Jul 4 07:55:43 2025 by rpki-client