Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
File:                     XozUASYISPXWb0DSj9l3F6nw8mo.mft (raw, json)
Hash identifier:          8f17vPgeKFpLIJP1E8lMyFIWqfm/McPpNsYnaSF4Ap8=
Subject key identifier:   D2:0F:E2:5D:EE:A6:7A:42:74:77:2E:AF:F8:CF:30:78:36:5A:08:86
Authority key identifier: 5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A
Certificate issuer:       /CN=F36D8D30AR/serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
Certificate serial:       03BF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
Manifest number:          03BE
Signing time:             Sat 23 Aug 2025 03:28:03 +0000
Manifest this update:     Sat 23 Aug 2025 03:28:02 +0000
Manifest next update:     Mon 25 Aug 2025 03:28:02 +0000
Files and hashes:         1: XozUASYISPXWb0DSj9l3F6nw8mo.crl (hash: C981IG53ww1bKw/o5w4P48XhuXmAL21kQgphyneyw0c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                          rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8D30AR, serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
        Validity
            Not Before: Aug 23 03:28:02 2025 GMT
            Not After : Aug 25 03:28:02 2025 GMT
        Subject: CN=68a93543-41c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:4c:13:4a:25:c6:d5:cd:16:fe:54:4b:77:
                    8a:18:6f:d9:eb:13:8f:fb:45:bd:30:33:3c:f3:52:
                    2b:92:d7:4a:f3:cf:80:d0:e3:d3:75:f1:eb:a3:80:
                    c7:8b:57:60:9f:a3:32:8b:d2:8a:03:4d:4f:30:08:
                    8f:f9:bb:99:41:3d:d9:fb:e0:d1:b8:60:3f:e6:58:
                    1a:61:d6:bb:04:06:5a:05:bd:c2:4f:bf:a6:ba:0e:
                    43:04:59:59:8c:2f:b9:cc:28:e2:ec:d9:73:bc:7f:
                    a3:82:df:ed:3b:a2:b1:6d:bc:4c:2b:73:b7:7d:ef:
                    ba:ae:b7:35:38:da:f6:98:24:6d:99:d0:65:77:ab:
                    d6:4f:8f:7b:88:59:07:6f:e5:10:e1:46:cb:01:c5:
                    81:d2:fb:d9:7d:78:75:f1:a0:3b:1c:4d:4f:0f:2f:
                    ce:c4:8e:05:33:1f:6d:94:2d:cf:de:3a:b4:8a:b0:
                    d0:e3:53:af:d5:0f:a1:67:b1:68:7e:80:70:98:f3:
                    98:3a:03:65:08:2f:9c:c2:98:77:d3:64:68:c0:9c:
                    92:24:fd:77:75:dd:8b:8f:41:f8:b6:76:8f:bd:02:
                    2d:ed:0a:8b:6c:20:ac:a7:27:40:13:bd:32:93:c3:
                    e7:fa:84:65:bd:7c:aa:b7:56:3b:7b:51:4e:15:f8:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0F:E2:5D:EE:A6:7A:42:74:77:2E:AF:F8:CF:30:78:36:5A:08:86
            X509v3 Authority Key Identifier:
                keyid:5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:94:56:a8:15:68:f3:bd:de:d4:92:f4:68:de:21:e1:67:de:
         7b:0d:27:11:bd:ad:62:0d:81:92:86:7b:8f:cd:a3:d8:d4:1c:
         50:19:08:3b:79:06:df:cc:a0:0c:6c:77:a8:c7:18:c6:0d:11:
         78:87:d9:47:41:5a:78:41:bc:bf:26:50:38:1a:a7:ce:d6:58:
         e3:ff:3c:a7:f5:ba:74:80:85:69:5c:11:ee:e1:ad:57:9a:37:
         de:d4:a1:89:44:cc:af:f5:10:d7:b8:04:3e:f8:77:cf:43:cd:
         65:02:b2:38:0a:71:83:4d:af:27:20:47:19:63:56:46:e7:54:
         ce:61:a9:4c:77:48:2a:28:30:34:03:81:35:ee:ce:77:1a:8f:
         a1:93:c3:80:55:33:00:fe:95:a3:2b:e1:50:72:ae:da:77:09:
         28:23:42:40:31:b8:b9:b3:91:c6:c1:32:02:a2:22:0e:74:9e:
         fc:c7:c7:ea:66:3e:40:40:5d:0d:c3:b3:55:c2:64:76:24:96:
         1f:cf:d9:69:03:47:6b:d1:67:6d:cb:20:c2:0e:42:7a:2b:65:
         53:e0:93:ad:48:ca:f8:d6:85:79:2f:e5:88:63:73:e2:15:31:
         ca:d2:df:5e:66:ef:a3:f9:27:87:98:59:e4:1f:b5:8c:42:3b:
         88:6d:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:04:15 2025 by rpki-client