Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File:                     xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier:          2g4Oa1PbiuZla+b72Uba4lFsYrbwE5pGrg1sG+GtRGA=
Subject key identifier:   4E:BA:37:3F:2C:76:E2:F5:7B:CD:87:F7:D6:7F:61:D6:84:E3:14:1C
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer:       /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial:       CA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number:          C1
Signing time:             Sun 06 Jul 2025 05:12:45 +0000
Manifest this update:     Sun 06 Jul 2025 05:12:45 +0000
Manifest next update:     Tue 08 Jul 2025 05:12:45 +0000
Files and hashes:         1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: kCQJL/em7wYgM+Eh6ajZG5Dhg/DuXjhAVwOYLoypHe4=)
                          2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                          rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
        Validity
            Not Before: Jul  6 05:12:45 2025 GMT
            Not After : Jul  8 05:12:45 2025 GMT
        Subject: CN=686a05cd-2a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2f:03:03:ae:98:cc:65:f8:15:ee:6d:6f:b6:
                    1e:50:48:3a:6a:58:0d:9d:f0:cd:49:06:c0:2e:90:
                    7f:0e:a1:5b:35:8a:e0:2c:9f:a3:29:05:c6:d7:e6:
                    db:92:2c:fe:33:e4:cd:b8:78:f2:93:63:64:6d:8d:
                    37:9a:9f:bb:5e:3e:9b:4f:8b:96:b1:29:cd:b9:26:
                    b0:24:56:92:fe:03:87:12:9b:b7:1d:0e:a0:05:48:
                    1c:c0:4a:a1:00:bc:8e:89:13:93:4b:36:57:7c:aa:
                    f9:02:e3:7c:25:8d:e9:c2:3d:2d:ca:01:84:b4:35:
                    c7:c9:64:5c:e1:74:33:4c:be:ad:bb:47:52:8e:81:
                    30:51:49:2c:7c:1e:82:ca:e8:d7:80:80:e5:95:b6:
                    1b:2b:b4:59:64:3e:4c:c0:bb:fc:d9:2d:07:6f:63:
                    3b:a1:0a:1e:08:d9:cf:b3:87:eb:65:d6:5f:7f:97:
                    dc:fd:6f:05:31:11:a9:cf:75:11:41:c7:9f:ed:76:
                    fd:92:27:0a:98:64:78:4d:b5:82:73:60:a2:45:b2:
                    ff:be:0f:b1:f3:62:1c:de:a1:74:ee:0a:7a:b8:3d:
                    ff:ba:1e:9f:00:3d:7e:51:48:44:98:b1:dd:fd:a8:
                    db:7a:40:5a:15:a7:97:08:5a:5e:df:8f:13:d2:d1:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BA:37:3F:2C:76:E2:F5:7B:CD:87:F7:D6:7F:61:D6:84:E3:14:1C
            X509v3 Authority Key Identifier:
                keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5c:bd:c6:fe:c8:c4:c9:e4:8c:a4:f1:31:45:98:f1:82:6d:
         49:07:1f:12:68:42:e2:22:8d:f1:41:80:e7:ef:a7:f9:af:98:
         cb:a7:55:23:bb:33:53:d9:14:68:0c:22:d4:ad:eb:3d:96:23:
         e5:e3:d9:1d:3a:bb:92:84:93:86:c1:a9:0e:b9:e4:ea:95:f1:
         53:16:bf:3c:b4:76:64:2c:10:bb:fb:a2:5d:fa:14:4e:e3:19:
         09:ea:05:cf:18:84:85:30:6b:76:3b:03:5e:62:0a:8b:87:b8:
         d0:ef:3a:3d:bb:b9:61:b1:7d:7f:00:69:ae:e3:03:b7:79:08:
         2e:85:ba:bb:d3:1b:e4:b6:1d:c4:91:e8:a6:79:52:87:84:a7:
         b3:43:41:94:f0:97:1b:49:97:c8:a8:1f:ca:be:8f:89:1b:08:
         bc:a0:b0:0e:02:b2:17:4b:9a:13:34:a1:57:6a:09:7b:db:bf:
         c8:ad:57:c5:61:05:a7:a0:95:4c:8a:66:76:e0:6d:00:f3:c5:
         77:bb:01:8a:77:a6:02:fd:35:d7:ca:69:75:4b:d1:a2:c1:18:
         de:fa:38:75:fd:56:8d:10:c7:ef:c7:3b:e5:9c:74:ea:b2:c5:
         c5:61:95:6c:cd:93:1c:a9:6d:5d:cb:43:26:6a:c5:1b:fe:f1:
         14:5d:f5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 14:18:57 2025 by rpki-client