Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
File:                     mANBymMoP9xkLng8RVg-pGRCMxs.mft (raw, json)
Hash identifier:          xzCIrYyJ1MX4Tmgo813usCTCjzFGENCLDTXSjY3bhwI=
Subject key identifier:   0A:95:62:84:4C:C5:54:72:A1:F1:EB:A8:09:A3:31:FC:7A:09:D1:EF
Authority key identifier: 98:03:41:CA:63:28:3F:DC:64:2E:78:3C:45:58:3E:A4:64:42:33:1B
Certificate issuer:       /CN=F36852F0AR/serialNumber=980341CA63283FDC642E783C45583EA46442331B
Certificate serial:       18
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
Manifest number:          16
Signing time:             Sat 13 Sep 2025 05:12:54 +0000
Manifest this update:     Sat 13 Sep 2025 05:12:53 +0000
Manifest next update:     Mon 15 Sep 2025 05:12:53 +0000
Files and hashes:         1: mANBymMoP9xkLng8RVg-pGRCMxs.crl (hash: bMewbRbBx72lxxenwkyxZXa3GlYx/Zov5xSCmQfz7IQ=)
                          2: 6D2177B4832511F0892AAFC7DAE4EC9C.roa (hash: aHAZN2QhTCRQrqiHV0Jl7+gEXu4WrL625sFACBWD1qA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
                          rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Sep 2025 05:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36852F0AR, serialNumber=980341CA63283FDC642E783C45583EA46442331B
        Validity
            Not Before: Sep 13 05:12:53 2025 GMT
            Not After : Sep 15 05:12:53 2025 GMT
        Subject: CN=68c4fd56-dc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fa:2d:fb:01:0b:bb:60:1a:73:cf:e0:6b:64:
                    ec:0c:23:d8:a9:cc:24:42:c4:40:01:97:64:d4:43:
                    c4:4d:b0:01:4d:e4:bb:aa:db:67:1c:c6:ae:27:96:
                    b4:d4:e3:94:bf:13:57:36:44:f1:2e:ca:23:50:c6:
                    29:9a:d2:bd:48:df:e5:6b:d3:95:7a:b0:17:e8:b1:
                    1c:24:8a:d4:b6:c8:eb:2b:f6:bc:6a:76:99:d0:c4:
                    28:36:bd:a5:46:0a:42:da:aa:d8:ce:59:a5:11:e6:
                    af:da:14:df:5f:b7:d7:4a:35:7a:50:8c:97:58:31:
                    24:35:13:b9:36:5f:29:51:c4:24:13:fd:9c:24:5e:
                    03:9a:4b:d1:78:65:d2:02:aa:b0:df:da:3a:ef:b4:
                    c0:bd:01:65:02:11:08:b6:ab:b7:45:b8:54:b1:7e:
                    50:0c:f1:fc:f3:0a:f1:23:ef:52:71:3d:91:82:50:
                    c1:88:5f:43:c7:ae:87:ae:7e:f6:a8:7a:7d:da:b6:
                    8b:e4:c9:b6:de:c9:fb:5a:6d:6f:73:df:49:1f:9f:
                    50:af:65:50:7a:09:da:0c:71:6d:2f:5e:00:5e:63:
                    8e:60:06:f8:07:96:c2:5f:b8:94:89:53:f5:67:8d:
                    f0:8d:8b:9c:df:79:99:2a:fe:90:81:46:a1:87:25:
                    e4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:95:62:84:4C:C5:54:72:A1:F1:EB:A8:09:A3:31:FC:7A:09:D1:EF
            X509v3 Authority Key Identifier:
                keyid:98:03:41:CA:63:28:3F:DC:64:2E:78:3C:45:58:3E:A4:64:42:33:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:a4:30:fc:19:6a:9f:61:35:cc:a1:1d:10:6d:50:a8:4d:23:
         22:d9:76:d4:e4:76:a8:65:3a:54:b5:e9:19:a7:b3:f2:0c:a1:
         52:d1:41:da:45:64:22:85:c5:d0:1e:fa:7a:40:25:c1:03:51:
         63:ea:b4:d2:4a:49:03:94:7a:17:da:80:a4:d4:55:d9:50:dc:
         a3:18:11:b9:91:73:fb:8d:aa:54:53:9c:d7:1c:52:28:bc:ed:
         3e:5b:d5:74:18:a4:72:5e:c9:40:35:38:17:f7:67:5c:e5:ff:
         0a:a1:ce:9f:98:c3:9f:cc:90:70:ba:3a:22:53:1a:65:01:b9:
         c4:5b:c6:69:f9:98:ec:28:9d:ec:ae:d7:a6:0e:79:48:af:48:
         45:c7:2f:c0:ad:0f:f6:f4:2e:13:3b:96:9f:85:1e:a3:87:6d:
         dc:33:a1:f4:ff:c8:aa:6e:a9:0c:1a:50:21:0c:d4:4d:ad:5f:
         4f:14:77:5f:3b:3a:5d:13:28:53:3a:23:62:25:e3:62:66:a3:
         d1:a5:67:f5:f8:0e:8e:55:b1:3d:13:25:9e:bc:7d:bd:c8:65:
         34:6f:5a:62:f8:44:79:a7:5c:a0:2b:b1:74:3c:aa:da:1e:22:
         df:5b:92:d3:d2:ad:64:63:fc:5b:f4:be:80:39:7b:68:fb:ed:
         b4:7e:59:2e
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBGDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY4
NTJGMEFSMTEwLwYDVQQFEyg5ODAzNDFDQTYzMjgzRkRDNjQyRTc4M0M0NTU4M0VB
NDY0NDIzMzFCMB4XDTI1MDkxMzA1MTI1M1oXDTI1MDkxNTA1MTI1M1owGDEWMBQG
A1UEAxMNNjhjNGZkNTYtZGM0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPL6LfsBC7tgGnPP4Gtk7Awj2KnMJELEQAGXZNRDxE2wAU3ku6rbZxzGrieW
tNTjlL8TVzZE8S7KI1DGKZrSvUjf5WvTlXqwF+ixHCSK1LbI6yv2vGp2mdDEKDa9
pUYKQtqq2M5ZpRHmr9oU31+310o1elCMl1gxJDUTuTZfKVHEJBP9nCReA5pL0Xhl
0gKqsN/aOu+0wL0BZQIRCLart0W4VLF+UAzx/PMK8SPvUnE9kYJQwYhfQ8euh65+
9qh6fdq2i+TJtt7J+1ptb3PfSR+fUK9lUHoJ2gxxbS9eAF5jjmAG+AeWwl+4lIlT
9WeN8I2LnN95mSr+kIFGoYcl5NECAwEAAaOCArUwggKxMB0GA1UdDgQWBBQKlWKE
TMVUcqHx66gJozH8egnR7zAfBgNVHSMEGDAWgBSYA0HKYyg/3GQueDxFWD6kZEIz
GzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODUyRjAvQzM1ODM0RUM4MjU4MTFGMDhBRjM0RThDREFFNEVDOUMvbUFOQnlt
TW9QOXhrTG5nOFJWZy1wR1JDTXhzLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
bUFOQnltTW9QOXhrTG5nOFJWZy1wR1JDTXhzLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY4NTJGMC9DMzU4MzRFQzgyNTgxMUYwOEFGMzRFOENEQUU0RUM5
Qy9tQU5CeW1Nb1A5eGtMbmc4UlZnLXBHUkNNeHMubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBALikMPwZap9hNcyhHRBtUKhNIyLZdtTkdqhl
OlS16Rmns/IMoVLRQdpFZCKFxdAe+npAJcEDUWPqtNJKSQOUehfagKTUVdlQ3KMY
EbmRc/uNqlRTnNccUii87T5b1XQYpHJeyUA1OBf3Z1zl/wqhzp+Yw5/MkHC6OiJT
GmUBucRbxmn5mOwoneyu16YOeUivSEXHL8CtD/b0LhM7lp+FHqOHbdwzofT/yKpu
qQwaUCEM1E2tX08Ud187Ol0TKFM6I2Il42Jmo9GlZ/X4Do5VsT0TJZ68fb3IZTRv
WmL4RHmnXKArsXQ8qtoeIt9bktPSrWRj/Fv0voA5e2j77bR+WS4=
-----END CERTIFICATE-----
Generated at Sun Sep 14 06:12:51 2025 by rpki-client