Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
File:                     XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft (raw, json)
Hash identifier:          3TMqMyI9ge745WMCgBoaC639uN4b877cs7Ncg5ytJq8=
Subject key identifier:   75:D6:26:52:38:84:57:C6:8F:F5:53:56:DC:92:41:86:A3:EA:06:2A
Authority key identifier: 5D:56:25:6A:24:9D:56:47:5F:0F:E3:4A:42:84:A6:4C:52:2C:0F:B4
Certificate issuer:       /CN=F362BDD7AR/serialNumber=5D56256A249D56475F0FE34A4284A64C522C0FB4
Certificate serial:       0136
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
Manifest number:          0134
Signing time:             Thu 31 Jul 2025 05:05:51 +0000
Manifest this update:     Thu 31 Jul 2025 05:05:50 +0000
Manifest next update:     Sat 02 Aug 2025 05:05:50 +0000
Files and hashes:         1: XVYlaiSdVkdfD-NKQoSmTFIsD7Q.crl (hash: EweM+QTao8SfOM8YC1Qj35XT513ePR//qjyj/Hv9CAg=)
                          2: D60958CC856B11EFBE85FB5B762E951A.roa (hash: Pw5u5L+ZQ+31t8q31EOek7HdK9TGe6sXHf0Pw/O4YD4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
                          rsync://rpki.afrinic.net/repository/arin/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362BDD7AR, serialNumber=5D56256A249D56475F0FE34A4284A64C522C0FB4
        Validity
            Not Before: Jul 31 05:05:50 2025 GMT
            Not After : Aug  2 05:05:50 2025 GMT
        Subject: CN=688af9af-f2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f2:c6:89:63:82:02:51:27:f5:00:c7:50:00:
                    75:fe:59:d4:9f:52:aa:ef:50:2d:6b:f8:5b:04:c6:
                    dd:b5:3b:bf:d1:ea:9f:52:16:82:09:84:d1:d6:f6:
                    97:ce:70:4b:2a:08:e9:1c:45:62:08:d6:33:16:b7:
                    e5:3e:be:52:e1:62:8c:8a:c9:ed:74:8e:1c:ce:97:
                    bd:cb:71:c9:2b:9f:c9:af:f2:de:47:80:0d:bb:d0:
                    e4:67:de:c7:74:6d:45:a6:4c:16:5e:f6:27:d7:dd:
                    14:d5:fc:10:92:52:a7:88:b6:64:df:6b:65:02:23:
                    2a:9e:9f:84:73:c4:69:65:bf:0e:a8:c5:ff:d7:60:
                    00:b6:92:3f:d0:c7:95:62:ae:e4:cc:d1:1b:19:2c:
                    b3:58:39:55:d8:b0:95:d8:56:4e:49:d4:13:31:6f:
                    49:56:df:00:3c:26:8b:0a:6f:58:74:bc:89:18:7a:
                    13:32:1a:18:8f:ff:97:3f:66:ac:09:a6:95:4f:89:
                    e2:e7:3b:67:0c:ef:cc:c2:db:86:ec:e3:c6:1a:bf:
                    6b:e5:13:21:23:85:4e:39:e5:d8:b2:7e:5e:71:99:
                    06:95:fc:54:6b:9b:bd:78:76:2b:94:cc:9b:40:73:
                    98:c0:0e:1a:95:fd:88:2d:fc:0e:3f:6b:5a:8b:d0:
                    0b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D6:26:52:38:84:57:C6:8F:F5:53:56:DC:92:41:86:A3:EA:06:2A
            X509v3 Authority Key Identifier:
                keyid:5D:56:25:6A:24:9D:56:47:5F:0F:E3:4A:42:84:A6:4C:52:2C:0F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:41:fe:ce:cf:24:f4:38:9c:39:65:0b:b4:62:d0:47:4e:e3:
         90:3c:1b:57:c6:48:1b:8b:5e:27:33:64:f7:00:44:77:be:b0:
         d2:4a:57:3c:6c:10:24:f4:51:07:ab:81:e2:bc:22:82:ec:f1:
         7b:ab:fe:df:6e:da:c7:eb:87:ce:53:4d:05:b4:4c:71:d7:39:
         c8:31:0b:99:c2:59:86:4a:46:ca:ae:6d:ee:af:1d:3e:02:5e:
         60:91:94:2e:a9:47:97:dd:b1:b8:f9:ca:40:5f:82:04:f6:47:
         9e:8e:b4:8c:cf:9e:a5:fd:75:62:6f:1d:cb:5f:18:df:78:cd:
         55:75:0e:95:14:6c:99:79:a5:d3:97:88:f6:cd:c6:7a:8c:03:
         92:a7:f5:1e:23:ef:f1:a5:04:34:ad:b0:ed:be:36:3d:d9:ea:
         fc:56:f7:7a:0c:aa:43:38:5b:cc:97:a0:ae:cf:07:ea:b1:77:
         e5:fe:1d:04:be:7a:9b:78:76:4c:64:79:5f:29:b3:5d:7b:b9:
         0a:0c:f1:e8:a0:80:46:f2:c5:3b:34:a1:bc:f4:81:77:43:45:
         eb:a2:b4:b2:76:df:df:b5:48:0b:f9:fc:14:ac:ec:96:88:db:
         c2:06:2a:f9:e0:70:14:42:6b:05:d0:29:47:cd:df:8b:b9:05:
         2a:8d:8a:cd
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICATYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkJERDdBUjExMC8GA1UEBRMoNUQ1NjI1NkEyNDlENTY0NzVGMEZFMzRBNDI4NEE2
NEM1MjJDMEZCNDAeFw0yNTA3MzEwNTA1NTBaFw0yNTA4MDIwNTA1NTBaMBgxFjAU
BgNVBAMTDTY4OGFmOWFmLWYyYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDa8saJY4ICUSf1AMdQAHX+WdSfUqrvUC1r+FsExt21O7/R6p9SFoIJhNHW
9pfOcEsqCOkcRWII1jMWt+U+vlLhYoyKye10jhzOl73Lcckrn8mv8t5HgA270ORn
3sd0bUWmTBZe9ifX3RTV/BCSUqeItmTfa2UCIyqen4RzxGllvw6oxf/XYAC2kj/Q
x5ViruTM0RsZLLNYOVXYsJXYVk5J1BMxb0lW3wA8JosKb1h0vIkYehMyGhiP/5c/
ZqwJppVPieLnO2cM78zC24bs48Yav2vlEyEjhU455diyfl5xmQaV/FRrm714diuU
zJtAc5jADhqV/Ygt/A4/a1qL0AshAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUddYm
UjiEV8aP9VNW3JJBhqPqBiowHwYDVR0jBBgwFoAUXVYlaiSdVkdfD+NKQoSmTFIs
D7QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCREQ3LzA5MDY2OTdDODU2MjExRUZBNTdBMUY5RDc2MkU5NTFBL1hWWWxh
aVNkVmtkZkQtTktRb1NtVEZJc0Q3US5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1hWWWxhaVNkVmtkZkQtTktRb1NtVEZJc0Q3US5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkJERDcvMDkwNjY5N0M4NTYyMTFFRkE1N0ExRjlENzYyRTk1
MUEvWFZZbGFpU2RWa2RmRC1OS1FvU21URklzRDdRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACQf7OzyT0OJw5ZQu0YtBHTuOQPBtXxkgb
i14nM2T3AER3vrDSSlc8bBAk9FEHq4HivCKC7PF7q/7fbtrH64fOU00FtExx1znI
MQuZwlmGSkbKrm3urx0+Al5gkZQuqUeX3bG4+cpAX4IE9keejrSMz56l/XVibx3L
XxjfeM1VdQ6VFGyZeaXTl4j2zcZ6jAOSp/UeI+/xpQQ0rbDtvjY92er8Vvd6DKpD
OFvMl6CuzwfqsXfl/h0EvnqbeHZMZHlfKbNde7kKDPHooIBG8sU7NKG89IF3Q0Xr
orSydt/ftUgL+fwUrOyWiNvCBir54HAUQmsF0ClHzd+LuQUqjYrN
-----END CERTIFICATE-----
Generated at Thu Jul 31 13:12:00 2025 by rpki-client