Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
File:                     kjOEThK8fu30Ns4cyZ6uITZHJkc.mft (raw, json)
Hash identifier:          SBAYfYEMl1frFxGbs9yUxXpu95MVb4Hdbh2lVxTkZIU=
Subject key identifier:   C1:FB:87:62:68:8F:16:9E:EE:57:60:97:C0:57:D2:52:6C:4B:EB:78
Authority key identifier: 92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47
Certificate issuer:       /CN=F36F8DABAR/serialNumber=9233844E12BC7EEDF436CE1CC99EAE2136472647
Certificate serial:       0B4A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
Manifest number:          0B44
Signing time:             Fri 04 Jul 2025 01:11:09 +0000
Manifest this update:     Fri 04 Jul 2025 01:11:08 +0000
Manifest next update:     Sun 06 Jul 2025 01:11:08 +0000
Files and hashes:         1: kjOEThK8fu30Ns4cyZ6uITZHJkc.crl (hash: jJ7Z3qTYmtVt/wyqpNQTFM2dZ5w86jIXVSR1dLqQUgQ=)
                          2: DC9DA0E4D58F11EEB154057C775412E6.roa (hash: gp7fukfD5fPb1a+zTWjX6E2Nn206G89h7J8+rzHmk5o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
                          rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2890 (0xb4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8DABAR, serialNumber=9233844E12BC7EEDF436CE1CC99EAE2136472647
        Validity
            Not Before: Jul  4 01:11:08 2025 GMT
            Not After : Jul  6 01:11:08 2025 GMT
        Subject: CN=68672a2d-f6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ef:7c:be:9c:a2:bf:6b:5d:80:5b:d9:a5:4a:
                    5d:1c:c5:df:59:ae:df:53:32:5a:df:44:83:fa:c1:
                    cf:b1:20:cc:af:16:20:4d:22:0f:fe:5e:a4:ee:b5:
                    c3:12:92:f2:1d:65:a2:8a:ef:3c:20:79:2b:7f:3a:
                    1c:f6:9a:38:68:ce:34:21:2d:5e:b4:07:20:9c:33:
                    99:a6:9b:23:ad:eb:ec:fc:99:7d:25:87:92:37:12:
                    32:e8:a0:81:29:62:24:75:b4:f1:ac:1d:6b:35:a1:
                    28:ed:7c:18:72:2a:2b:7d:c6:ea:e0:64:fb:a5:f1:
                    b4:3f:00:25:5e:80:41:3f:f1:62:87:6d:b9:b2:7f:
                    9d:52:09:cb:94:22:d4:4e:6f:75:73:45:84:2a:50:
                    8f:51:49:56:67:b4:3c:04:d3:b2:f7:e8:e8:10:4b:
                    74:b1:de:3e:8c:d6:be:b6:f6:d3:84:af:17:87:b3:
                    b4:d5:75:47:e5:4f:a6:e9:7b:6a:ee:83:33:80:c5:
                    64:2b:95:b1:01:72:42:7b:26:1e:27:ba:63:4c:c2:
                    61:d3:d7:7b:de:85:37:e8:54:d9:de:25:67:5e:1b:
                    1f:fd:4d:26:48:50:e0:31:34:42:21:9f:73:f9:41:
                    16:14:d0:d1:ce:b4:7b:76:57:df:4a:92:b8:87:63:
                    02:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FB:87:62:68:8F:16:9E:EE:57:60:97:C0:57:D2:52:6C:4B:EB:78
            X509v3 Authority Key Identifier:
                keyid:92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8c:82:3a:96:96:a3:0d:47:80:a3:78:14:c4:85:54:5e:a6:
         44:71:f1:12:9e:6b:8b:95:a3:ee:d8:5c:89:29:b3:6c:37:9d:
         be:ee:61:aa:29:b5:91:f8:86:84:fd:99:cb:fc:5b:49:27:ba:
         5c:24:08:75:c6:b7:0f:23:33:e4:1a:00:d1:11:89:01:9f:bc:
         e5:d3:f7:09:9c:96:f6:d9:8b:00:f3:02:d4:c6:47:d0:cc:73:
         f9:aa:84:8c:3c:5f:98:2a:b7:67:5e:94:72:bc:31:a4:60:dd:
         39:4f:3a:22:ce:cf:fd:b5:7b:b9:51:ea:18:6d:14:1d:73:2b:
         d1:17:a8:77:36:b0:58:22:bf:3c:8c:9d:8d:28:4d:dc:96:2b:
         47:6c:df:b7:36:38:1e:94:89:ba:30:f2:48:77:9b:2a:f9:5a:
         46:a5:d3:69:18:12:98:4b:00:3e:d9:1b:b8:3b:25:bb:13:ef:
         f9:75:14:0e:a3:e1:2e:6c:e5:ab:ef:44:4e:34:95:32:59:3c:
         c2:fe:f6:8b:ce:0e:92:d6:f4:ba:af:48:bf:ca:76:7b:01:3a:
         d3:fb:67:64:c0:27:b9:d5:87:f5:a7:bf:eb:39:6a:ce:e5:36:
         de:11:c3:07:a5:32:12:0f:5b:fd:9c:33:bd:fe:ed:10:c3:73:
         62:37:4a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:34:19 2025 by rpki-client