Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
File:                     35Ti668FVkXR68M9dxpKkrH1obo.mft (raw, json)
Hash identifier:          GcmSp8KLXQM8Hqla/riPhM2+mfOjLpqLwHk445KmFDQ=
Subject key identifier:   D0:F5:A5:B2:01:BA:28:02:1D:06:6E:AE:47:29:33:5D:48:B1:8A:C5
Authority key identifier: DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA
Certificate issuer:       /CN=F36B4943AR/serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
Certificate serial:       0426
Authority info access:    rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
Manifest number:          0425
Signing time:             Fri 04 Jul 2025 03:14:07 +0000
Manifest this update:     Fri 04 Jul 2025 03:14:06 +0000
Manifest next update:     Sun 06 Jul 2025 03:14:06 +0000
Files and hashes:         1: 35Ti668FVkXR68M9dxpKkrH1obo.crl (hash: 2n7vxVoOKl8F7DJJo4qLkYCSZ/K5oOYVaqM7TYWBLpQ=)
                          2: 22DB7C2C343B11ED93BC198DF1222468.roa (hash: MYN14FUjceVL/wAPb2hSaQa3Lgxp0KPz1gwNzEYrDaM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
                          rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062 (0x426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4943AR, serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
        Validity
            Not Before: Jul  4 03:14:06 2025 GMT
            Not After : Jul  6 03:14:06 2025 GMT
        Subject: CN=686746ff-b48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5a:30:0f:ab:b6:8c:bf:ab:6b:e1:05:f7:2c:
                    0c:9b:98:4c:12:03:82:61:3c:a8:ee:50:f9:b9:8a:
                    4a:ee:4a:75:82:59:e8:eb:b3:5f:75:ff:d6:5f:37:
                    88:b6:af:65:46:62:bb:39:8e:57:14:a9:e4:12:bc:
                    bf:a0:bb:ef:11:22:2f:10:11:73:cb:89:e3:d8:19:
                    fb:cc:89:4f:d1:0d:ae:16:f2:85:e9:dc:b3:69:49:
                    dd:dd:e5:48:06:9c:a8:01:92:eb:16:97:1a:46:ad:
                    67:cb:47:2f:14:7c:1c:23:ce:61:dd:67:2a:52:1b:
                    38:de:f5:7e:ec:e9:d1:53:b5:67:9e:95:5c:17:ce:
                    99:fe:67:a2:34:d1:00:84:03:f8:0e:f4:db:6f:d1:
                    e6:7c:1b:ce:2e:9b:ee:2c:9e:20:36:11:3c:82:b6:
                    76:2d:37:41:ae:55:98:46:32:60:73:1b:18:b9:7c:
                    5b:18:4a:62:27:ce:ac:fc:90:71:3e:94:dc:08:0a:
                    1c:84:d8:d2:e8:59:e7:5a:1a:81:c0:c2:fa:ce:e0:
                    e7:94:9b:6b:71:84:b6:6d:b5:13:36:94:0d:63:74:
                    5e:47:53:c7:9e:0e:9a:30:2a:91:ee:ef:9e:08:11:
                    5b:4f:99:53:9b:a9:de:44:a9:ac:b4:88:76:cf:59:
                    36:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F5:A5:B2:01:BA:28:02:1D:06:6E:AE:47:29:33:5D:48:B1:8A:C5
            X509v3 Authority Key Identifier:
                keyid:DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:77:8f:25:ff:dc:7e:af:a5:a1:cb:ad:a9:54:9d:34:e1:b1:
         5a:43:f2:a6:21:e7:a1:c5:5b:6d:e9:89:8c:d9:f6:da:f8:ab:
         3f:02:ce:65:26:3d:6b:91:b6:d3:f8:9c:f2:ec:55:3a:06:1d:
         2b:35:98:5e:c5:e4:21:0e:14:40:b6:68:3c:d1:49:26:9f:04:
         7f:9a:fd:b1:92:d6:68:b0:96:c2:f0:6b:1d:ce:33:aa:73:4b:
         5a:b2:3c:8e:ea:d1:85:4c:ca:87:54:0c:7f:ec:d1:62:71:a7:
         72:19:01:9a:59:98:b5:12:28:c5:cf:36:1d:08:65:41:e5:15:
         2b:d9:67:b8:a6:f4:f8:5f:41:23:cc:bd:17:d2:64:07:f6:ae:
         d7:21:b7:fb:05:ce:57:f2:b0:45:29:6d:13:c3:f7:75:b2:fb:
         05:4c:fc:93:ec:79:31:9a:a4:6e:f2:6d:4c:6f:51:f1:a4:7c:
         94:6f:c4:0c:83:ed:41:46:18:1b:8e:b6:2d:bd:35:e2:59:e4:
         f1:a6:ad:90:b5:b3:a0:ad:74:c5:74:32:43:99:06:18:17:09:
         db:d1:f4:18:8a:c2:35:72:c3:5f:80:86:4a:9b:9b:ec:6f:b8:
         4c:5f:e8:e7:c0:b8:db:b7:31:1f:84:f6:77:02:ce:17:a9:35:
         f5:a3:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:54:05 2025 by rpki-client