Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
File:                     D-g4ATBnRIcNHQamDPfzuj5UJlI.mft (raw, json)
Hash identifier:          fcmB+keBG4m2nvc5hZWcPmvEw9pegpEx38y/NoYOxhc=
Subject key identifier:   C5:CB:93:17:04:FB:59:A9:F0:A0:0F:2E:73:22:B2:F9:0F:93:F2:94
Authority key identifier: 0F:E8:38:01:30:67:44:87:0D:1D:06:A6:0C:F7:F3:BA:3E:54:26:52
Certificate issuer:       /CN=F362E39EAR/serialNumber=0FE83801306744870D1D06A60CF7F3BA3E542652
Certificate serial:       0CEC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
Manifest number:          0CE9
Signing time:             Sat 26 Jul 2025 01:06:22 +0000
Manifest this update:     Sat 26 Jul 2025 01:06:21 +0000
Manifest next update:     Mon 28 Jul 2025 01:06:21 +0000
Files and hashes:         1: D-g4ATBnRIcNHQamDPfzuj5UJlI.crl (hash: v+W0T3ZVkj8+XxxVObXLuFJG3qD8M5T1f1FGUBSDYfg=)
                          2: 85751D2246C411F0B35CB878DAE4EC9C.roa (hash: 8RnruMpMOyIroRB7WdabR+dI97SGVIprP/OPugvR+SU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
                          rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3308 (0xcec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAR, serialNumber=0FE83801306744870D1D06A60CF7F3BA3E542652
        Validity
            Not Before: Jul 26 01:06:21 2025 GMT
            Not After : Jul 28 01:06:21 2025 GMT
        Subject: CN=68842a0d-1c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:fd:db:4e:24:4c:3a:1c:d3:df:ff:67:e6:
                    92:1d:b0:72:c1:ee:07:3e:cc:dc:9a:81:e4:8f:b8:
                    02:e9:f2:b2:35:b6:fb:dc:3c:49:57:3b:81:0f:c7:
                    88:d4:85:5f:0b:38:6f:f0:d1:4b:15:7e:c8:2b:b2:
                    1f:63:f5:d7:f0:23:6f:49:67:1e:f8:5d:b8:f4:0f:
                    da:99:34:03:5b:be:ef:d0:e0:73:08:5c:48:85:51:
                    9d:1b:2a:20:ac:aa:6c:2b:a5:ae:3b:fa:e2:74:5b:
                    65:d9:36:81:97:b6:8f:d9:4e:a2:b4:02:d2:32:83:
                    53:f9:94:2a:f8:06:74:3e:5d:cd:b6:41:b6:42:a1:
                    03:10:56:03:ea:ab:4e:98:88:49:20:3e:ad:64:7c:
                    18:80:ec:49:b4:31:6e:46:48:36:2f:e3:af:25:19:
                    60:2e:25:57:96:af:3f:e8:51:fc:fe:0d:3d:4b:6d:
                    97:80:fd:a8:93:c1:fd:fc:dd:d9:55:d8:72:a2:c9:
                    14:11:1e:fe:6e:6c:95:0e:56:54:c1:24:03:13:2c:
                    c7:60:87:ce:67:b8:0b:14:01:59:8e:4d:76:af:9a:
                    47:f4:ce:64:48:17:3f:96:a6:73:d7:5e:83:8a:c1:
                    e7:37:5d:9e:7d:d0:bd:82:25:e9:c6:6d:ae:1c:d7:
                    7e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CB:93:17:04:FB:59:A9:F0:A0:0F:2E:73:22:B2:F9:0F:93:F2:94
            X509v3 Authority Key Identifier:
                keyid:0F:E8:38:01:30:67:44:87:0D:1D:06:A6:0C:F7:F3:BA:3E:54:26:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:62:97:58:54:14:97:ed:bd:6d:02:fc:21:3b:7f:18:f2:f7:
         e2:75:ae:3b:70:7d:6f:54:e9:3c:cc:56:5d:40:14:e5:73:71:
         f2:dc:d4:b4:29:35:74:dc:d3:bb:6e:df:0b:d6:ac:53:0b:97:
         bf:4b:c1:b2:aa:37:ef:7e:f3:dd:6e:9b:d5:60:ae:7c:c6:f6:
         e4:57:98:09:69:53:96:e2:8b:7c:b1:74:66:bb:57:2f:83:04:
         bf:8e:d9:f1:93:4a:09:43:c4:5d:1d:57:80:a9:da:9e:e2:67:
         1b:6c:2c:22:d1:89:fa:97:18:1f:f3:b9:71:3f:13:87:1b:80:
         e9:32:27:42:b6:3b:56:94:14:3d:09:de:70:4b:a8:88:4b:7f:
         ba:65:eb:14:8c:ac:00:bc:d5:a7:51:61:20:bf:10:75:4a:06:
         d9:ee:7c:27:a7:89:9f:41:d3:3b:3c:01:c4:34:09:7e:72:f7:
         af:1f:83:01:b8:35:76:d6:96:65:69:01:27:8f:e1:ef:9c:88:
         9a:56:e3:25:56:dd:6e:91:ec:a4:bc:28:4b:81:e6:55:fd:c0:
         20:20:59:2c:e8:4a:78:55:4f:bf:7a:9d:96:b4:23:64:b8:5e:
         1a:e5:f7:76:e8:16:f4:99:23:c5:d9:b9:9f:10:44:44:6d:e6:
         c1:6d:eb:ac
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkUzOUVBUjExMC8GA1UEBRMoMEZFODM4MDEzMDY3NDQ4NzBEMUQwNkE2MENGN0Yz
QkEzRTU0MjY1MjAeFw0yNTA3MjYwMTA2MjFaFw0yNTA3MjgwMTA2MjFaMBgxFjAU
BgNVBAMTDTY4ODQyYTBkLTFjNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCz1v3bTiRMOhzT3/9n5pIdsHLB7gc+zNyageSPuALp8rI1tvvcPElXO4EP
x4jUhV8LOG/w0UsVfsgrsh9j9dfwI29JZx74Xbj0D9qZNANbvu/Q4HMIXEiFUZ0b
KiCsqmwrpa47+uJ0W2XZNoGXto/ZTqK0AtIyg1P5lCr4BnQ+Xc22QbZCoQMQVgPq
q06YiEkgPq1kfBiA7Em0MW5GSDYv468lGWAuJVeWrz/oUfz+DT1LbZeA/aiTwf38
3dlV2HKiyRQRHv5ubJUOVlTBJAMTLMdgh85nuAsUAVmOTXavmkf0zmRIFz+WpnPX
XoOKwec3XZ590L2CJenGba4c134pAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUxcuT
FwT7WanwoA8ucyKy+Q+T8pQwHwYDVR0jBBgwFoAUD+g4ATBnRIcNHQamDPfzuj5U
JlIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFMzlFLzM5OUZERkVDODBBQjExRTZCQ0M5QzY2M0Y4QUVBMjI4L0QtZzRB
VEJuUkljTkhRYW1EUGZ6dWo1VUpsSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0QtZzRBVEJuUkljTkhRYW1EUGZ6dWo1VUpsSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkUzOUUvMzk5RkRGRUM4MEFCMTFFNkJDQzlDNjYzRjhBRUEy
MjgvRC1nNEFUQm5SSWNOSFFhbURQZnp1ajVVSmxJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpYpdYVBSX7b1tAvwhO38Y8vfida47cH1v
VOk8zFZdQBTlc3Hy3NS0KTV03NO7bt8L1qxTC5e/S8GyqjfvfvPdbpvVYK58xvbk
V5gJaVOW4ot8sXRmu1cvgwS/jtnxk0oJQ8RdHVeAqdqe4mcbbCwi0Yn6lxgf87lx
PxOHG4DpMidCtjtWlBQ9Cd5wS6iIS3+6ZesUjKwAvNWnUWEgvxB1SgbZ7nwnp4mf
QdM7PAHENAl+cvevH4MBuDV21pZlaQEnj+HvnIiaVuMlVt1ukeykvChLgeZV/cAg
IFks6Ep4VU+/ep2WtCNkuF4a5fd26Bb0mSPF2bmfEEREbebBbeus
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:06:11 2025 by rpki-client