Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
File:                     3wZml7CgNZiMDvM7Qr7tfnClVUs.mft (raw, json)
Hash identifier:          Lh8IeMoQMfibqNmUttnWFt+ZUWYWG1GYNA4SEHOo1dU=
Subject key identifier:   94:14:0E:B0:D9:5C:C6:B0:DE:F2:42:5E:B6:23:A8:67:6E:5E:09:6B
Authority key identifier: DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
Certificate issuer:       /CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Certificate serial:       056A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
Manifest number:          0566
Signing time:             Thu 31 Jul 2025 02:46:27 +0000
Manifest this update:     Thu 31 Jul 2025 02:46:27 +0000
Manifest next update:     Sat 02 Aug 2025 02:46:27 +0000
Files and hashes:         1: 3wZml7CgNZiMDvM7Qr7tfnClVUs.crl (hash: K4LIWYNhsnRPXLJXodlXhFc/ONVkYjAngzT1ETNCrAk=)
                          2: 8065B86A532E11EC801D331CD8A014CE.roa (hash: F5eLw3Oa+DcohLxtO7dVJeRypNojvOsC5f+wTgH4pR0=)
                          3: 21625A96533111ECB2F6BE24D8A014CE.roa (hash: D7uWKw4MsAwTkL/YB/+bUaU6FUc2W7evgUV4IerLvVk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                          rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAR, serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
        Validity
            Not Before: Jul 31 02:46:27 2025 GMT
            Not After : Aug  2 02:46:27 2025 GMT
        Subject: CN=688ad903-5861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:73:c3:16:c7:1f:e5:3f:8e:42:05:d7:8a:
                    a1:51:fd:12:75:7f:da:c9:0e:9c:36:56:3d:79:4a:
                    c1:8c:4d:3a:c1:9a:02:9c:cb:80:ad:78:ef:6f:2a:
                    d2:55:25:f4:6a:fd:f3:4c:04:d9:45:3f:7b:93:3d:
                    c3:3d:d4:c4:62:48:2c:f0:03:83:06:e8:14:12:4d:
                    d5:12:b1:e1:65:df:19:93:1f:e4:fd:25:4b:1c:9c:
                    7c:55:9c:ff:90:45:e2:90:f3:08:09:43:ea:cd:7f:
                    7b:03:41:3f:5e:28:1c:60:0e:15:44:49:84:24:f7:
                    68:2e:8a:e4:72:d5:7e:a1:0c:1e:7c:82:72:cf:5a:
                    00:29:fc:b0:c4:91:2e:24:4c:7e:59:16:2d:1d:1e:
                    47:9c:30:7a:04:f5:fc:8c:e3:47:79:21:6b:03:0a:
                    93:9d:9f:1b:03:ca:f7:fa:aa:b4:ba:d6:6c:29:55:
                    bd:37:94:b1:14:5a:7f:76:59:36:52:33:2f:97:73:
                    9b:3b:a3:d6:cc:bd:8b:fa:57:21:26:be:20:64:7d:
                    05:c9:be:5c:27:69:a7:4f:03:14:1a:c1:3b:4f:b2:
                    a0:8b:81:a0:c8:c4:66:98:41:fa:34:46:7a:2c:0e:
                    06:1c:92:95:98:05:ce:30:9c:bc:b1:d8:33:28:48:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:14:0E:B0:D9:5C:C6:B0:DE:F2:42:5E:B6:23:A8:67:6E:5E:09:6B
            X509v3 Authority Key Identifier:
                keyid:DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e2:0f:6a:c1:fe:a2:87:c0:1d:aa:8f:e5:df:44:5f:be:f2:
         7c:f7:00:fd:4e:5a:ac:38:00:11:03:2d:e2:f5:84:d4:49:95:
         65:fc:21:c2:09:01:d5:b9:42:58:03:0b:0e:12:c1:76:9e:eb:
         20:9f:ea:28:f4:c0:b4:5f:bd:98:d9:7e:2a:75:eb:02:a4:24:
         ee:d2:fc:85:61:7d:d5:57:27:21:ff:88:fd:72:e9:51:a2:1f:
         72:ed:2d:a2:20:e9:ae:f5:6f:e1:15:96:83:b6:bd:7b:40:ed:
         00:b5:8c:2f:b5:09:1c:64:cc:82:be:5d:86:23:a8:06:96:7c:
         16:bd:ce:e3:0e:1d:2d:0f:66:21:22:50:ba:9c:7b:d5:cf:c8:
         3a:33:5a:4f:c2:aa:0e:56:d9:31:af:c8:ea:8f:5e:cb:5d:9e:
         f6:66:42:0a:84:b1:eb:d3:dc:c8:05:db:e3:74:6c:71:56:6a:
         19:42:cf:3f:86:d5:11:69:69:34:b1:7b:43:c0:d4:9c:43:b9:
         c2:63:ac:37:5e:ab:c5:4a:8e:72:70:fd:4c:1e:f9:5c:7a:0f:
         fa:89:88:66:b6:a8:b3:20:4e:7a:f7:4e:fe:0e:cb:97:ae:bd:
         71:b3:f8:c2:d1:0d:a6:03:c4:e2:46:99:33:51:58:2b:d6:42:
         07:ef:f7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:43:01 2025 by rpki-client