Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
File:                     xPPi6r3p45Aa27wxyfJTXN47HG8.mft (raw, json)
Hash identifier:          gGiPDzupd8Ceu4IVMg0/vzoNzkEY2Ibxkf3dYmych2w=
Subject key identifier:   45:4C:FE:AB:F7:4A:70:0A:7E:52:87:E9:FF:0F:1A:67:E5:D7:83:FC
Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Certificate issuer:       /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Certificate serial:       0D4C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
Manifest number:          0D4C
Signing time:             Sun 06 Jul 2025 01:02:46 +0000
Manifest this update:     Sun 06 Jul 2025 01:02:46 +0000
Manifest next update:     Tue 08 Jul 2025 01:02:46 +0000
Files and hashes:         1: xPPi6r3p45Aa27wxyfJTXN47HG8.crl (hash: o/aOFut7j7Cq1n77AtpiEQ677yJkCaCm8yFBIRSF04A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                          rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3404 (0xd4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAR, serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
        Validity
            Not Before: Jul  6 01:02:46 2025 GMT
            Not After : Jul  8 01:02:46 2025 GMT
        Subject: CN=6869cb36-1b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:40:51:48:80:95:d5:1b:6b:c3:e8:88:05:
                    b1:ec:a6:0d:72:c6:8d:ae:fa:40:6f:9e:9b:e1:c4:
                    a0:74:bf:f9:13:87:6c:9a:a0:fa:4f:5b:18:79:88:
                    4d:4f:fd:3d:dc:7c:5a:96:a3:c8:09:f1:92:b2:4a:
                    0b:e7:22:0d:4d:a0:87:02:79:b5:09:b1:5d:a3:b8:
                    23:c1:51:ef:c9:4b:10:ff:e3:d3:86:5a:09:1b:54:
                    3b:af:ac:65:7e:7e:2d:7b:45:77:53:4d:2b:56:bc:
                    32:f0:1f:a5:02:d2:f0:00:95:f8:90:c8:db:ec:ee:
                    4b:ec:19:f4:ed:c3:55:47:cc:62:76:27:ff:5a:a1:
                    7f:2f:e9:3e:b4:16:1a:8e:fe:46:5b:f9:e2:3e:8d:
                    54:2e:c7:c5:fd:05:e7:31:86:d6:38:f1:a1:3e:cd:
                    56:8d:98:08:b1:d7:f3:af:75:02:85:95:92:3c:ed:
                    26:96:c9:6d:23:a0:66:75:68:3d:3f:1b:45:3d:15:
                    98:ca:9d:28:13:53:d1:33:40:03:39:d0:18:b0:24:
                    55:30:25:77:20:e2:b9:17:1e:51:fc:85:c1:ae:95:
                    c9:74:23:14:bc:43:02:f7:60:61:30:8d:3a:65:1d:
                    7d:bf:4c:f0:0c:3b:9a:7f:09:41:61:02:f8:d3:b9:
                    9f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4C:FE:AB:F7:4A:70:0A:7E:52:87:E9:FF:0F:1A:67:E5:D7:83:FC
            X509v3 Authority Key Identifier:
                keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c0:5c:01:1d:c7:74:79:f9:a0:a8:b1:ff:7e:7c:56:5f:ba:
         36:30:57:99:57:b9:84:02:17:30:36:51:3e:c8:c2:7a:8f:e7:
         7d:6a:6b:99:ce:b4:0b:ab:f6:76:54:2d:19:14:a4:a9:48:6d:
         95:b9:77:e2:00:a9:7d:d6:b4:8f:26:21:35:63:f3:a6:18:24:
         0c:4a:95:b7:6e:c5:24:57:64:2c:29:b8:d5:92:44:ba:5c:ca:
         93:30:69:7a:1a:35:0a:a7:ef:c3:26:99:e1:a6:6c:84:86:91:
         58:76:a2:b9:0c:82:ed:92:d0:0d:0e:d9:e7:df:0d:0f:77:c2:
         7f:72:48:11:74:34:ce:05:7e:33:6b:64:10:ba:71:27:93:66:
         d1:a6:e6:b0:4c:95:43:9a:fc:bd:e5:27:d0:c0:3b:69:99:3f:
         2c:f8:6f:0a:35:b3:94:75:eb:b8:ff:f6:ea:fc:3e:93:c7:1a:
         d4:b6:5d:31:94:c6:08:48:eb:a3:c2:cf:c3:96:23:48:cd:d7:
         3e:90:87:3d:4e:75:da:b6:e5:cf:ec:6c:a0:0b:6a:65:96:96:
         24:30:03:e7:e9:81:ad:d2:d8:93:43:04:a5:f3:0e:5d:02:a1:
         6c:d6:4f:77:81:d0:2c:f3:b1:94:96:a8:e2:ce:a2:72:22:58:
         48:dd:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 13:51:41 2025 by rpki-client