Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft
File:                     rSMXDJgzsl2HE6A3DEhgcko8h-o.mft (raw, json)
Hash identifier:          qFlijZcKzKjXH3qu789vcKVz1C8EFg164We8ItYT7M8=
Subject key identifier:   32:A5:AF:69:65:B5:FB:18:C3:1C:9C:56:A8:A1:9F:03:BB:7E:2C:08
Authority key identifier: AD:23:17:0C:98:33:B2:5D:87:13:A0:37:0C:48:60:72:4A:3C:87:EA
Certificate issuer:       /CN=F362B8A8AR/serialNumber=AD23170C9833B25D8713A0370C4860724A3C87EA
Certificate serial:       0689
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rSMXDJgzsl2HE6A3DEhgcko8h-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft
Manifest number:          0688
Signing time:             Tue 16 Sep 2025 02:05:48 +0000
Manifest this update:     Tue 16 Sep 2025 02:05:47 +0000
Manifest next update:     Thu 18 Sep 2025 02:05:47 +0000
Files and hashes:         1: rSMXDJgzsl2HE6A3DEhgcko8h-o.crl (hash: 5Pr4l7N/pe/p35gF6ldML8oPdNcfFl3sNG42ZF71PjU=)
                          2: AE53A0009EA911EB9AC82A41F8AEA228.roa (hash: 1bd0I/6rZsKsWNhyL71qhITbxUZVlPI0gALS+mourjE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft
                          rsync://rpki.afrinic.net/repository/arin/rSMXDJgzsl2HE6A3DEhgcko8h-o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673 (0x689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B8A8AR, serialNumber=AD23170C9833B25D8713A0370C4860724A3C87EA
        Validity
            Not Before: Sep 16 02:05:47 2025 GMT
            Not After : Sep 18 02:05:47 2025 GMT
        Subject: CN=68c8c5fc-b45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:4b:00:12:0b:ec:87:ef:d2:cd:56:32:01:
                    34:a9:e3:9a:e7:7b:2e:77:2a:49:d2:ba:a2:79:ec:
                    93:72:fb:b9:f5:de:63:0f:2e:12:8a:33:79:8c:c7:
                    91:9f:23:93:71:2c:cf:ac:03:7f:80:66:8f:c4:22:
                    82:04:2a:1d:7f:f1:af:b8:ea:0c:c8:8a:47:aa:5b:
                    b9:1b:5a:b3:9f:64:bf:a3:1e:24:ac:76:a8:8b:6e:
                    92:7c:ec:d1:05:2a:22:99:b4:30:d2:da:dd:b7:5b:
                    64:85:f1:cc:ee:c1:4a:9e:4a:e5:a6:79:17:d7:12:
                    e5:82:fc:e9:7c:e2:ba:ae:b3:1d:a9:5c:43:5f:09:
                    da:fe:46:1b:68:85:87:83:7d:85:11:94:01:98:23:
                    8b:ad:1b:57:11:9d:13:ba:94:05:67:6b:4f:0e:78:
                    8e:40:21:35:a3:31:20:27:49:42:da:e9:0c:1e:74:
                    d9:ff:a6:a3:f4:96:f6:7a:6f:09:5a:bd:77:5c:34:
                    a9:11:6d:fa:f9:36:b5:0d:44:dc:ee:c1:e8:2a:c8:
                    4f:6a:6c:8e:f3:49:be:86:41:f9:ff:8c:e1:93:20:
                    05:a0:89:61:bf:3c:1e:20:ee:69:f7:22:02:76:4a:
                    84:63:bc:c6:4e:cf:66:be:27:33:3b:02:d1:49:b8:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A5:AF:69:65:B5:FB:18:C3:1C:9C:56:A8:A1:9F:03:BB:7E:2C:08
            X509v3 Authority Key Identifier:
                keyid:AD:23:17:0C:98:33:B2:5D:87:13:A0:37:0C:48:60:72:4A:3C:87:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rSMXDJgzsl2HE6A3DEhgcko8h-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c7:17:ca:5a:a6:4c:07:6e:42:98:0a:df:67:75:e0:67:1c:
         b3:59:66:fe:9f:a8:a9:32:49:7c:1e:84:3f:d3:4b:cb:cf:e7:
         91:a0:81:1e:f1:b7:84:63:d3:f2:6b:7e:49:d6:fa:95:ad:22:
         1c:a7:07:a7:b2:a2:88:fb:85:5f:81:b8:a9:92:43:db:a9:2a:
         82:3b:64:5b:43:e3:2c:5f:68:66:da:57:8a:3b:7b:af:a4:90:
         69:3b:e3:db:49:1d:65:cd:88:3b:72:6d:37:08:a3:3d:4a:5f:
         f9:c5:c3:4e:03:ce:e6:d5:15:fa:99:70:0c:59:6b:98:06:ad:
         04:10:16:0b:d7:5f:d7:ad:2e:1a:61:4e:9d:22:40:65:61:bb:
         1d:09:6b:ed:cb:46:3d:54:2b:4d:d6:2d:cf:a0:55:74:0b:26:
         96:cf:99:d6:4d:4b:1f:85:73:a6:fb:41:21:41:05:7a:1c:0e:
         4e:41:a4:b1:c2:c2:2f:82:3b:91:8a:11:b9:4c:f3:70:e6:f6:
         91:6d:01:58:ee:d3:de:2e:55:cd:10:0f:55:1c:da:c8:55:67:
         02:56:14:d3:4b:5f:81:11:76:21:35:99:3e:d7:77:5e:57:be:
         b1:ba:c2:3f:14:01:ea:33:1c:39:64:0a:fb:0c:cc:12:e2:18:
         64:75:ab:55
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBokwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkI4QThBUjExMC8GA1UEBRMoQUQyMzE3MEM5ODMzQjI1RDg3MTNBMDM3MEM0ODYw
NzI0QTNDODdFQTAeFw0yNTA5MTYwMjA1NDdaFw0yNTA5MTgwMjA1NDdaMBgxFjAU
BgNVBAMTDTY4YzhjNWZjLWI0NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwrksAEgvsh+/SzVYyATSp45rney53KknSuqJ57JNy+7n13mMPLhKKM3mM
x5GfI5NxLM+sA3+AZo/EIoIEKh1/8a+46gzIikeqW7kbWrOfZL+jHiSsdqiLbpJ8
7NEFKiKZtDDS2t23W2SF8czuwUqeSuWmeRfXEuWC/Ol84rqusx2pXENfCdr+Rhto
hYeDfYURlAGYI4utG1cRnRO6lAVna08OeI5AITWjMSAnSULa6QwedNn/pqP0lvZ6
bwlavXdcNKkRbfr5NrUNRNzuwegqyE9qbI7zSb6GQfn/jOGTIAWgiWG/PB4g7mn3
IgJ2SoRjvMZOz2a+JzM7AtFJuFMFAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUMqWv
aWW1+xjDHJxWqKGfA7t+LAgwHwYDVR0jBBgwFoAUrSMXDJgzsl2HE6A3DEhgcko8
h+owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCOEE4L0M0NDUzOEM4OUMyNTExRUJBOEQ0MjY1NEY4QUVBMjI4L3JTTVhE
Smd6c2wySEU2QTNERWhnY2tvOGgtby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3JTTVhESmd6c2wySEU2QTNERWhnY2tvOGgtby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkI4QTgvQzQ0NTM4Qzg5QzI1MTFFQkE4RDQyNjU0RjhBRUEy
MjgvclNNWERKZ3pzbDJIRTZBM0RFaGdja284aC1vLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTxxfKWqZMB25CmArfZ3XgZxyzWWb+n6ip
Mkl8HoQ/00vLz+eRoIEe8beEY9Pya35J1vqVrSIcpwensqKI+4VfgbipkkPbqSqC
O2RbQ+MsX2hm2leKO3uvpJBpO+PbSR1lzYg7cm03CKM9Sl/5xcNOA87m1RX6mXAM
WWuYBq0EEBYL11/XrS4aYU6dIkBlYbsdCWvty0Y9VCtN1i3PoFV0CyaWz5nWTUsf
hXOm+0EhQQV6HA5OQaSxwsIvgjuRihG5TPNw5vaRbQFY7tPeLlXNEA9VHNrIVWcC
VhTTS1+BEXYhNZk+13deV76xusI/FAHqMxw5ZAr7DMwS4hhkdatV
-----END CERTIFICATE-----
Generated at Tue Sep 16 17:43:44 2025 by rpki-client