Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File:                     xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier:          cQRGXwMXzukdazaoBumXkxsaJ4ubLELRTyST+RoQCvk=
Subject key identifier:   9D:3C:AD:F7:54:81:66:76:82:56:04:65:8C:18:FC:D3:6C:B0:86:8A
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer:       /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial:       FA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number:          F1
Signing time:             Sat 23 Aug 2025 05:06:24 +0000
Manifest this update:     Sat 23 Aug 2025 05:06:24 +0000
Manifest next update:     Mon 25 Aug 2025 05:06:23 +0000
Files and hashes:         1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: wkXS/Ny4Cc0pf6HAjn3Ybl800Tre4sIF15TsKPoUhtE=)
                          2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                          rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
        Validity
            Not Before: Aug 23 05:06:24 2025 GMT
            Not After : Aug 25 05:06:23 2025 GMT
        Subject: CN=68a94c50-3941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:a0:67:1d:b7:17:8e:08:82:49:73:d2:ec:
                    f8:a8:18:a3:3f:aa:ab:9d:a5:3e:0d:9f:70:dd:60:
                    55:2a:af:49:09:8d:57:7a:c9:16:70:f9:9f:2c:7d:
                    e0:53:e2:fe:40:34:b8:26:62:85:82:e9:da:2e:28:
                    49:8c:74:62:c0:37:69:ac:16:78:aa:64:1f:6c:3d:
                    07:36:ad:6d:d9:db:d9:89:07:8a:fb:f4:20:cd:35:
                    dc:8b:8e:1b:a5:d3:10:87:6b:55:c6:00:6c:80:12:
                    98:de:57:5b:5c:e2:9d:f7:dc:ab:9e:fa:fe:6b:a6:
                    09:ec:16:d1:fc:cd:20:52:b1:38:90:27:ca:2f:12:
                    9f:47:ca:42:03:1a:e9:0e:b8:ff:a2:7f:8c:c5:50:
                    30:18:8f:0e:e8:c3:50:f4:d1:c3:16:c7:37:90:57:
                    25:d0:ac:02:63:48:78:b4:d1:4b:46:50:43:ba:5e:
                    5f:91:58:55:cc:2f:b8:43:8f:fb:2b:2c:e7:e8:cd:
                    33:1c:94:96:ae:b7:9b:2e:3a:9b:5a:91:d2:42:24:
                    08:29:01:ad:a6:eb:7b:98:88:ab:73:a6:48:a8:33:
                    f0:57:70:ee:ca:84:b6:b5:1a:e2:4a:9b:f7:cc:6c:
                    d3:20:12:cb:2e:b8:e5:23:4b:62:61:dd:1c:b9:92:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3C:AD:F7:54:81:66:76:82:56:04:65:8C:18:FC:D3:6C:B0:86:8A
            X509v3 Authority Key Identifier:
                keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:28:ab:9c:90:c7:4b:9f:51:ed:9c:0b:d3:d8:1d:9d:62:3e:
         bb:92:4f:eb:25:59:bc:24:59:9f:6d:df:a0:45:28:d9:f4:f3:
         61:18:ed:eb:8d:be:d9:24:39:93:8f:66:63:27:34:67:07:a0:
         8e:42:49:2f:2e:4b:3c:61:9d:35:f4:7b:e4:9f:b1:f0:81:18:
         d1:7e:72:76:45:f6:a5:9d:19:36:a1:02:bd:51:ea:e1:61:65:
         a0:a1:0d:69:c6:de:d4:a1:34:e3:2e:fc:95:7a:a8:71:e6:9d:
         d3:64:07:31:7b:e2:a1:5a:fd:60:17:d9:3a:0a:7e:d6:6c:21:
         ac:4f:a0:9c:4c:9c:76:fd:dc:fd:fb:49:9e:98:cf:dc:ae:a4:
         0f:46:bc:5b:b8:e3:e5:7e:16:ba:82:da:4d:58:7c:45:cc:95:
         50:c3:d9:bc:17:87:b9:1d:e1:db:f6:2d:81:42:57:b3:67:94:
         f7:76:25:03:42:ba:c9:d7:a8:87:c2:bb:30:54:20:05:44:2a:
         9e:82:e4:e3:b2:77:4d:d7:e7:b3:f0:0d:c3:60:7d:48:23:e6:
         84:6f:9a:e8:12:e4:36:b5:09:e2:e1:a4:96:3b:03:ac:e7:2a:
         78:a7:d1:c2:f2:57:08:4c:7c:e0:da:89:6f:43:7a:3f:f7:8e:
         7a:e8:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:21 2025 by rpki-client