Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
File:                     xSvyehTUxJuqAvCZWQ287LDgS5c.mft (raw, json)
Hash identifier:          LEjRxqusIa8veQMRNo8Bw4ZhwnW3do4tNJI3SjTuf74=
Subject key identifier:   84:4E:14:DD:3B:67:11:CD:2B:D9:BD:DA:9E:D9:D8:88:84:1E:73:EF
Authority key identifier: C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
Certificate issuer:       /CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Certificate serial:       03AF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
Manifest number:          03AE
Signing time:             Sat 05 Jul 2025 03:24:57 +0000
Manifest this update:     Sat 05 Jul 2025 03:24:56 +0000
Manifest next update:     Mon 07 Jul 2025 03:24:56 +0000
Files and hashes:         1: xSvyehTUxJuqAvCZWQ287LDgS5c.crl (hash: TJezBA8q423W27U5V+bidU7T+oTaz5wgPfu7121RoBM=)
                          2: DC60099290ED11EDA023F07CF1222468.roa (hash: 9KneDc8AxCXKlLKwihUlSkgU/m9aNJKS4oxTHOBZ0ns=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                          rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8936AR, serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
        Validity
            Not Before: Jul  5 03:24:56 2025 GMT
            Not After : Jul  7 03:24:56 2025 GMT
        Subject: CN=68689b09-3aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d5:2f:39:20:ae:4d:a7:26:19:3c:25:64:94:
                    2a:eb:46:e6:d9:2b:85:9c:2e:00:a7:f3:c6:15:09:
                    3e:63:eb:18:b7:c6:12:8e:ac:ab:05:04:e7:fa:c8:
                    8b:58:b8:d5:7c:84:8a:ec:9c:d4:16:da:6b:77:74:
                    0a:48:d9:91:2f:41:91:55:22:60:97:3f:a4:ca:07:
                    3f:39:5b:e9:57:97:96:54:f1:89:bc:ce:da:9f:77:
                    28:0d:2a:5e:50:20:21:7a:6c:2c:82:de:c2:29:19:
                    7d:35:96:f1:74:14:bd:99:41:a7:f6:29:26:6b:bb:
                    32:72:2d:54:f2:9b:b8:a7:f0:3f:75:85:e1:3c:74:
                    7d:28:47:47:a8:4f:74:3a:4f:c5:4f:9e:cc:14:2e:
                    34:3a:83:a4:a6:b5:aa:d3:95:ae:dc:dd:dc:d9:e4:
                    43:68:e3:bd:31:ee:1a:91:72:8b:01:5e:4e:39:83:
                    dd:e9:6e:71:19:5a:e6:ca:d7:12:3c:4d:96:7f:9c:
                    0c:a9:00:c9:41:51:e2:39:cd:8e:b3:9f:6f:15:a1:
                    be:f5:c7:c6:a1:c6:48:1c:16:83:45:3a:65:dd:5d:
                    a1:dc:c0:e9:6d:b5:f1:44:71:ab:b9:02:aa:87:6f:
                    7c:e7:bd:d6:e1:68:ce:04:9b:7b:dc:72:da:d6:42:
                    ef:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4E:14:DD:3B:67:11:CD:2B:D9:BD:DA:9E:D9:D8:88:84:1E:73:EF
            X509v3 Authority Key Identifier:
                keyid:C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ba:a0:3f:00:1c:49:c0:04:40:b7:1b:33:73:29:4a:de:f4:
         05:b5:ad:2f:0a:f1:05:00:91:be:2a:07:18:d8:ca:76:e8:d5:
         d5:d6:ac:af:bb:a9:fc:2a:19:b6:9d:fb:1e:3d:80:24:52:41:
         fe:b3:6d:49:0d:68:df:72:1f:ce:f5:17:93:eb:65:07:0b:aa:
         b9:f2:ed:76:3e:4e:85:97:71:0d:d0:db:22:f6:ed:dd:10:94:
         41:1d:24:6f:11:79:f4:91:32:24:5f:17:81:6c:81:9e:bf:f7:
         fc:8d:89:ef:24:b6:3c:9f:e6:6d:0d:07:b7:a5:d0:7b:ac:40:
         50:66:7f:da:ae:00:23:db:51:66:14:c3:55:c7:2f:6c:e7:79:
         ec:5d:6f:20:f7:7e:cc:0a:d7:63:7f:bc:4f:87:2e:dc:e9:dd:
         7c:4c:62:89:31:bd:ab:6e:d5:01:75:52:9e:d8:7b:32:4d:fd:
         34:4a:f4:95:07:bb:c7:49:12:cc:9e:b4:05:0d:e7:73:0e:c6:
         4a:05:54:e4:d9:15:7b:e3:25:3b:99:c3:41:82:0e:57:bd:22:
         7d:86:02:e6:69:aa:3b:bd:4d:b7:06:f4:95:98:bc:e7:67:52:
         3c:4e:76:94:5e:7b:32:ff:93:f3:7a:89:f2:d8:32:66:1f:38:
         dd:83:14:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 07:56:25 2025 by rpki-client