Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
File:                     6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft (raw, json)
Hash identifier:          PHifvSgP2We2/pU/z2Ude+j+g0kN/xesOQBPEVfs9qo=
Subject key identifier:   E7:B9:09:89:E2:98:51:ED:17:44:14:B8:C7:0D:B0:2B:56:A3:52:45
Authority key identifier: E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C
Certificate issuer:       /CN=F36150C1AR/serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
Certificate serial:       0CDF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
Manifest number:          0CDF
Signing time:             Sun 27 Jul 2025 01:07:42 +0000
Manifest this update:     Sun 27 Jul 2025 01:07:41 +0000
Manifest next update:     Tue 29 Jul 2025 01:07:41 +0000
Files and hashes:         1: 6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl (hash: gcQV1BXKVfPlwRZ9l9HLdVx86ROF+CcRnuu4SJYN+hg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                          rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3295 (0xcdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36150C1AR, serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
        Validity
            Not Before: Jul 27 01:07:41 2025 GMT
            Not After : Jul 29 01:07:41 2025 GMT
        Subject: CN=68857bde-e5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c2:94:87:83:80:03:16:c8:bb:88:5c:3b:08:
                    46:50:0c:17:1c:d0:25:9c:f7:05:9d:09:be:b4:b1:
                    88:8a:67:7c:c2:f1:ca:50:cc:84:62:ef:cd:01:16:
                    25:d0:7f:fb:03:6e:02:9f:1b:58:95:af:d9:70:02:
                    96:6e:43:eb:d7:bc:17:ce:4c:87:2e:b2:75:6f:9d:
                    1b:14:d5:6a:4e:4a:f4:32:28:e2:51:29:3b:95:34:
                    64:6c:4a:bf:b4:3c:fa:96:7b:0a:3e:4e:bf:86:0f:
                    86:68:e4:da:1c:91:75:49:ea:44:26:00:f0:d2:2b:
                    b0:ed:64:ae:be:8f:db:ef:af:d7:86:67:da:61:f5:
                    d3:81:ff:7a:20:1f:90:ef:a3:a6:43:79:6a:31:80:
                    9d:f9:d6:68:10:59:64:30:01:44:ee:c4:91:d4:f7:
                    c4:cc:bd:3a:76:dc:5f:4c:a3:c6:3e:b3:2b:1b:be:
                    c3:18:68:c0:c9:5c:e9:47:c8:53:b9:ae:9e:98:e6:
                    51:b0:f2:5f:60:5f:0a:34:c4:68:2e:6f:8f:25:f6:
                    77:a7:b2:fc:26:58:fe:b3:e6:63:46:ec:5d:1c:14:
                    fb:f7:0b:ce:ad:34:e5:20:5c:60:0b:ea:e9:de:c1:
                    c7:1a:be:62:03:58:c1:f8:d5:d2:29:87:91:e8:73:
                    eb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B9:09:89:E2:98:51:ED:17:44:14:B8:C7:0D:B0:2B:56:A3:52:45
            X509v3 Authority Key Identifier:
                keyid:E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:5e:15:c8:77:38:4e:f4:d3:89:5c:b2:96:23:ed:07:2b:74:
         b7:cd:46:07:f3:71:3a:80:ce:ad:12:48:6f:04:12:16:99:a1:
         fd:38:e0:2b:a6:fc:dd:40:13:09:6d:77:2e:05:20:8c:6b:0c:
         ee:f6:de:41:c1:1a:04:54:99:d9:44:ca:6a:a6:c5:ef:ad:c1:
         1e:5c:6f:06:5f:2c:da:29:73:ed:35:d1:3f:4f:77:17:fe:28:
         f5:93:99:50:8c:6c:49:0e:29:b8:a0:4c:50:30:f3:93:57:21:
         98:ab:25:f4:9b:b4:fb:f3:03:98:af:d2:c8:11:a1:39:6d:d6:
         34:d5:2d:7e:e5:f3:15:82:2f:27:d9:44:b4:2e:57:0e:94:b4:
         cc:62:ce:da:cd:f6:eb:18:1e:46:8b:1d:8c:da:f5:79:cd:36:
         ef:49:5e:a3:d4:8f:18:27:36:72:35:3b:36:df:57:e6:6e:8b:
         51:6b:d1:1c:ab:a9:0b:a0:1c:96:e8:32:f2:17:40:b3:fc:2e:
         61:86:c5:f0:d8:81:fc:d3:cd:ca:c6:fe:15:6e:8f:3c:63:1e:
         46:77:42:ff:83:1f:87:15:e9:55:4f:ca:87:d8:ee:bf:ed:05:
         df:e5:63:99:14:60:6c:c7:f4:47:aa:23:ff:82:8e:1f:1d:0a:
         c9:60:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:37:56 2025 by rpki-client