Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
File:                     3wZml7CgNZiMDvM7Qr7tfnClVUs.mft (raw, json)
Hash identifier:          cbTxtk36iTfh3kUfU0T1w6b3zzXG8KzBISfmGk8LskY=
Subject key identifier:   30:80:C1:B6:B4:21:56:18:46:12:4F:CA:C0:2F:A5:7A:41:22:65:60
Authority key identifier: DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
Certificate issuer:       /CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Certificate serial:       0538
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
Manifest number:          0534
Signing time:             Thu 12 Jun 2025 02:43:51 +0000
Manifest this update:     Thu 12 Jun 2025 02:43:50 +0000
Manifest next update:     Sat 14 Jun 2025 02:43:50 +0000
Files and hashes:         1: 3wZml7CgNZiMDvM7Qr7tfnClVUs.crl (hash: a3ZJkZWrjNwbSngZGCVHfrJmz5oAOhDejWZYo/HW2bk=)
                          2: 8065B86A532E11EC801D331CD8A014CE.roa (hash: F5eLw3Oa+DcohLxtO7dVJeRypNojvOsC5f+wTgH4pR0=)
                          3: 21625A96533111ECB2F6BE24D8A014CE.roa (hash: D7uWKw4MsAwTkL/YB/+bUaU6FUc2W7evgUV4IerLvVk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                          rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 14 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAR, serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
        Validity
            Not Before: Jun 12 02:43:50 2025 GMT
            Not After : Jun 14 02:43:50 2025 GMT
        Subject: CN=684a3ee7-1806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:eb:c2:49:42:d0:6e:4d:8f:eb:43:9b:8d:
                    f7:52:7a:e3:da:cb:ce:7b:3c:b2:1e:ef:eb:e3:d5:
                    7b:15:93:ae:fa:86:af:70:34:fd:2d:c2:cc:62:c5:
                    88:0f:41:76:dd:8b:0e:0d:ad:e3:05:0c:7c:19:6e:
                    5e:e7:a1:2f:98:09:bc:a3:53:1a:08:37:e7:9f:8d:
                    92:09:51:ae:21:12:98:d4:d8:1d:33:a7:1e:05:c1:
                    05:49:23:c4:a5:04:cc:dc:32:eb:a6:ce:d7:ad:8c:
                    a5:d0:27:7a:53:e1:ec:c3:f7:40:d8:c2:eb:a0:de:
                    4d:fd:12:68:37:1d:1b:05:d4:36:4f:59:65:a0:55:
                    1a:c2:81:e1:85:c7:6c:42:6f:71:2d:e0:41:23:12:
                    3a:38:0d:52:8b:b3:1d:04:9e:7a:6d:12:02:40:d0:
                    2e:fd:6b:7d:5b:2a:24:d9:a9:35:01:cc:3f:aa:d8:
                    d5:1f:91:7f:e6:43:c1:7e:3b:87:6f:a2:66:d3:bc:
                    16:08:e1:54:76:06:1a:76:df:eb:1a:8e:f7:51:08:
                    22:e0:dd:ec:98:a3:04:d4:91:25:f7:0c:64:02:e4:
                    ff:e0:4e:2a:94:5d:1a:98:49:7b:f0:d8:7a:86:7c:
                    65:a3:36:ce:46:34:73:2a:c1:9f:47:bd:2f:3a:54:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:80:C1:B6:B4:21:56:18:46:12:4F:CA:C0:2F:A5:7A:41:22:65:60
            X509v3 Authority Key Identifier:
                keyid:DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:81:e3:4e:b2:e0:66:01:96:4f:eb:c4:b8:97:39:83:d5:f5:
         d5:22:87:4a:53:1e:9a:52:a7:04:94:97:57:dc:05:64:bc:68:
         79:34:6a:25:c2:59:7f:84:77:a1:5a:b4:59:44:77:ac:e4:2c:
         6c:71:86:ab:92:22:8a:6c:f4:74:72:2a:f3:38:1e:50:40:cf:
         3c:0b:28:c1:6a:e4:2b:3e:9e:de:2b:d8:9d:1c:22:86:ea:6c:
         34:13:de:c2:4d:1b:40:2e:e5:c5:28:9d:3d:43:a4:16:ae:e2:
         00:93:b7:c6:60:8c:f3:78:c0:47:fa:e6:f8:00:79:10:90:31:
         cd:8d:e8:07:d9:86:59:14:28:ff:be:99:00:74:d7:2e:95:55:
         96:6f:68:af:0c:9d:2a:6f:f0:fb:79:70:fe:82:77:c8:d3:9c:
         21:c8:2d:c2:07:5b:12:55:3b:ca:f8:6b:71:f7:e3:1f:ee:f8:
         d3:9f:4a:35:40:f1:0d:0a:df:3d:e0:e2:05:53:7f:8c:36:28:
         cc:5d:b2:b9:2c:0d:81:9b:e8:3a:68:b9:d1:6b:3a:31:d9:c6:
         97:a7:16:da:0b:0b:bd:49:a6:3f:0d:b7:3f:e5:09:d9:60:ad:
         70:9f:c4:0d:00:d9:11:df:f4:59:e9:0a:49:5f:4f:c9:b1:0b:
         01:75:cf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:40:13 2025 by rpki-client