Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File:                     FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier:          VioURHH689BncDt+SdqovtyoMleCCgFM2qwT0HIZJ/Y=
Subject key identifier:   FE:2B:63:EA:68:81:B3:A2:C2:4D:5B:A2:18:B3:2F:4D:A7:2D:C3:7C
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer:       /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial:       03B3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number:          03B0
Signing time:             Wed 23 Jul 2025 03:30:51 +0000
Manifest this update:     Wed 23 Jul 2025 03:30:51 +0000
Manifest next update:     Fri 25 Jul 2025 03:30:51 +0000
Files and hashes:         1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: ShzgfJE1FNDgtkbps7APjRgRNZruwuBeQcXDD6YMOdM=)
                          2: CF8B10CE1DB711EFA609B0217DDC24C2.roa (hash: cUUrYIHHPxFgWnYQbOftBzdS94Gj26Vr5vz5884oWrA=)
                          3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                          rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Jul 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947 (0x3b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
        Validity
            Not Before: Jul 23 03:30:51 2025 GMT
            Not After : Jul 25 03:30:51 2025 GMT
        Subject: CN=6880576b-0ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:5e:76:b8:b1:22:1a:44:de:c6:ea:ba:93:
                    89:aa:76:52:8b:17:9f:eb:ac:1e:bd:3f:bc:65:47:
                    0c:6c:64:d6:19:15:3c:22:91:5d:eb:ef:73:e5:21:
                    61:c8:ac:2f:10:25:47:28:b2:2e:14:6c:6f:a2:be:
                    aa:a1:b3:fc:bc:71:65:5f:b7:10:85:ce:3a:3f:0f:
                    e6:76:b3:06:db:35:cf:e5:65:00:33:59:51:35:3d:
                    ce:fd:5f:4f:8a:d7:90:53:3f:ce:95:99:d8:27:53:
                    b7:24:73:c6:df:8c:74:38:0c:11:70:a0:2f:53:3c:
                    9a:0e:f8:e4:59:0a:4e:85:41:e9:f5:55:8c:60:4a:
                    db:d8:19:01:c8:bd:70:1a:d3:2f:84:bd:d4:16:e2:
                    d1:3d:4e:ab:0b:25:b2:74:bc:95:38:f5:a4:c2:86:
                    85:8f:98:09:59:16:34:e2:66:51:a8:56:23:90:d6:
                    2f:18:a9:cc:da:55:1d:c3:6e:50:0b:25:e1:f6:36:
                    ea:e2:eb:79:a7:49:42:71:d2:d5:9f:32:e9:14:34:
                    60:82:7d:2d:70:e5:1b:aa:34:f9:be:76:70:7e:c2:
                    c9:97:9b:1a:c1:40:b3:26:06:cb:72:30:3e:39:81:
                    d5:e8:3c:89:0d:09:b9:40:20:0c:cf:28:d9:50:b5:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2B:63:EA:68:81:B3:A2:C2:4D:5B:A2:18:B3:2F:4D:A7:2D:C3:7C
            X509v3 Authority Key Identifier:
                keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:75:e9:33:ec:73:7b:48:47:d4:25:33:8d:4c:b6:d4:d9:46:
         3f:9f:cc:67:41:0c:69:c8:e6:3d:01:f2:93:0f:d0:67:4f:a1:
         4b:1a:ad:15:e1:e6:3c:80:86:4c:90:25:fb:e1:d4:1c:7e:98:
         e0:e6:9d:db:90:4d:aa:e4:39:d4:9a:17:42:dd:47:0c:7c:72:
         76:a9:73:c6:de:8e:cb:f8:32:88:91:46:3d:20:00:0e:b9:c5:
         44:0b:98:07:71:75:d9:aa:d1:8d:ee:fb:79:02:33:08:bf:10:
         2d:e8:a7:ee:73:fc:85:c9:fc:1c:11:62:76:05:f7:be:fd:e5:
         c7:8d:e0:4b:41:66:0c:95:09:7e:69:79:41:d4:cf:3b:ae:7e:
         a1:12:38:96:71:f9:5f:4e:2a:74:b0:8a:39:59:e0:a2:f0:85:
         fd:e4:42:98:a1:8c:7d:0f:70:70:cf:15:10:4a:45:e3:1b:b6:
         c3:68:27:cc:3d:2f:26:08:fb:f3:fb:08:d0:1e:6f:09:a0:55:
         c3:31:8e:6f:0e:8e:de:5d:b7:34:b2:d2:20:f6:07:bf:8c:c9:
         93:43:d1:6c:e0:47:10:3e:9a:ee:cd:74:78:8e:54:55:2f:a2:
         37:e9:37:a6:be:68:a4:a6:d8:04:2f:a0:9d:df:c4:1b:cf:85:
         ce:13:af:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:25:43 2025 by rpki-client