Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
File:                     3wZml7CgNZiMDvM7Qr7tfnClVUs.mft (raw, json)
Hash identifier:          L6lxisBypT1SsYXO3R9npTutY0mUagc3m/11/iRmxdc=
Subject key identifier:   B6:15:81:79:CA:52:CE:18:A8:15:66:45:AF:48:77:BE:60:01:14:C1
Authority key identifier: DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
Certificate issuer:       /CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Certificate serial:       0599
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
Manifest number:          0595
Signing time:             Tue 16 Sep 2025 02:33:21 +0000
Manifest this update:     Tue 16 Sep 2025 02:33:20 +0000
Manifest next update:     Thu 18 Sep 2025 02:33:20 +0000
Files and hashes:         1: 3wZml7CgNZiMDvM7Qr7tfnClVUs.crl (hash: l38koOQ0tQETy17/k48ybEjwp9tFLn4taSyhKnaOhyg=)
                          2: 8065B86A532E11EC801D331CD8A014CE.roa (hash: F5eLw3Oa+DcohLxtO7dVJeRypNojvOsC5f+wTgH4pR0=)
                          3: 21625A96533111ECB2F6BE24D8A014CE.roa (hash: D7uWKw4MsAwTkL/YB/+bUaU6FUc2W7evgUV4IerLvVk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                          rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1433 (0x599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAR, serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
        Validity
            Not Before: Sep 16 02:33:20 2025 GMT
            Not After : Sep 18 02:33:20 2025 GMT
        Subject: CN=68c8cc71-0df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:13:c1:08:8c:5d:30:fe:3e:e7:81:0b:d8:47:
                    08:62:9a:5a:0b:8f:02:d5:aa:50:ee:43:0e:93:a8:
                    b8:38:eb:17:dc:7b:51:7f:e7:a6:fa:16:2a:27:4a:
                    a6:4f:c5:b9:c2:60:87:e9:3a:43:92:ee:d7:88:2f:
                    b6:fb:02:76:6f:12:56:2f:d6:41:f5:c5:2a:7e:3d:
                    37:50:58:4a:8d:4a:52:a5:0c:8a:b5:ac:c3:90:3b:
                    1b:20:87:97:66:e6:af:78:7e:5f:ad:2e:1b:2b:6c:
                    79:7e:01:78:c4:b6:42:bc:b6:92:8c:8c:ba:a6:3c:
                    b4:ae:34:02:ea:8f:84:f8:88:08:95:e4:47:7d:2f:
                    06:6d:5a:66:ae:20:ac:f8:e8:dd:a7:4f:c0:48:78:
                    e5:6a:8b:4b:b7:0e:cb:2b:d0:4e:59:3c:b3:3b:e7:
                    dc:0f:9d:44:2b:35:1a:c0:87:eb:37:94:14:65:78:
                    36:33:28:2c:08:05:3f:ab:42:22:d9:06:ce:4a:92:
                    d8:d1:25:0c:71:2d:e7:2a:c7:eb:90:28:7b:7d:b1:
                    77:45:5e:9e:14:c7:ed:e6:c0:d7:f4:e0:da:f4:1b:
                    23:ee:59:75:b6:2d:62:97:d9:66:86:a3:38:4b:20:
                    68:15:1b:5f:a6:07:ad:e4:f4:10:75:9d:93:a5:92:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:15:81:79:CA:52:CE:18:A8:15:66:45:AF:48:77:BE:60:01:14:C1
            X509v3 Authority Key Identifier:
                keyid:DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a7:03:cb:1a:65:fd:b0:bc:18:be:48:12:ee:04:08:a3:98:
         fa:68:fd:72:59:6f:57:4e:4a:b2:17:5b:53:b4:c0:32:77:2c:
         34:1b:44:09:fe:72:8d:81:60:80:ed:bd:f9:9c:4a:9f:b5:56:
         01:ec:7c:b8:7c:3b:a3:62:fc:71:b7:8e:05:ea:72:9a:91:dc:
         12:69:b7:2c:36:61:b1:37:f8:b2:6d:27:19:fa:ed:b5:85:09:
         76:0c:69:06:fa:83:d4:2c:a0:a9:89:57:fb:a6:07:6f:fd:d3:
         78:cd:ce:6c:81:be:d4:69:20:36:9a:e5:ab:92:e7:65:3c:74:
         32:e1:5d:a7:c1:4a:eb:f9:4e:a7:8a:b4:e2:f7:90:14:40:fd:
         d9:81:99:ac:ca:3a:ca:c6:99:59:79:8f:4b:ac:a0:8b:67:66:
         67:02:82:f6:82:79:80:6c:ba:d7:99:83:42:17:d8:32:68:66:
         8e:77:b0:13:1e:14:4b:a0:37:af:bb:96:09:b7:4e:c1:3c:55:
         23:e6:26:9b:b3:e1:c8:03:c6:6a:a7:af:2a:d7:4a:ee:21:2b:
         f7:7d:9f:85:e3:66:b5:c8:93:d4:64:a4:cd:09:e8:81:3b:48:
         26:71:f1:2a:65:f8:08:6f:10:f5:1a:53:85:87:e0:a8:3c:e8:
         7f:4d:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:50:13 2025 by rpki-client