Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
File:                     DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft (raw, json)
Hash identifier:          JCSsYrqaoWT6msMRIIe+JI1eiC5GcOIw/7PpK+ON8cY=
Subject key identifier:   4A:F0:CC:F9:2C:9C:B2:35:F6:74:E2:89:A4:DF:41:C9:57:58:80:F3
Authority key identifier: 0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44
Certificate issuer:       /CN=F364C81DAR/serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
Certificate serial:       0916
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
Manifest number:          090F
Signing time:             Thu 31 Jul 2025 01:33:19 +0000
Manifest this update:     Thu 31 Jul 2025 01:33:18 +0000
Manifest next update:     Sat 02 Aug 2025 01:33:18 +0000
Files and hashes:         1: DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl (hash: BWWUux1W0DKEdJ9Dtjsb1ialafh+I3OTcUdH7D48OU4=)
                          2: 74AA29FC3E9A11EFB1E37554762E951A.roa (hash: WV585CADX8C6BW4JHivJOJddO/5hxxRDI5ze3ORaNIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
                          rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2326 (0x916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C81DAR, serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
        Validity
            Not Before: Jul 31 01:33:18 2025 GMT
            Not After : Aug  2 01:33:18 2025 GMT
        Subject: CN=688ac7df-7423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:2c:8b:c1:38:3c:56:5f:d4:37:e2:ae:5f:
                    d9:ba:2b:96:45:da:07:24:92:1c:35:7a:e4:7d:b8:
                    42:e8:3f:e8:3f:b9:a8:8c:82:38:97:a1:2c:5d:b2:
                    fa:bb:e2:7b:67:29:48:44:91:1c:c2:86:00:d8:5d:
                    db:76:9f:76:67:2e:f7:6a:80:f2:97:71:83:2c:fe:
                    72:86:60:41:19:bf:c6:de:b8:6b:3a:06:cd:41:a8:
                    e5:05:d9:1c:bf:38:f7:86:16:cd:75:2f:ed:9b:fd:
                    78:5e:5c:b8:75:13:3c:09:2c:1c:01:37:a6:88:88:
                    60:89:81:75:2f:cd:69:70:60:05:d9:62:27:13:a1:
                    7d:91:34:e6:3c:99:ca:72:70:3e:1a:f8:cd:d3:7c:
                    e1:ca:e9:eb:35:90:dc:11:60:e9:d4:74:67:53:56:
                    3c:9c:2e:07:61:dc:5f:92:90:c0:28:f7:01:a7:15:
                    24:ec:68:eb:1f:45:af:a0:f1:b9:a5:52:9b:c0:d3:
                    0e:bb:74:6f:82:b1:e6:a4:aa:07:f1:58:10:75:34:
                    6f:5a:28:fe:6d:62:bf:81:ba:b2:7d:95:f2:f0:31:
                    7e:48:4e:e5:e5:9d:55:db:6d:69:c1:7c:01:1a:cb:
                    7b:1f:7a:de:48:87:0f:c8:5c:fa:5d:89:cb:e7:21:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F0:CC:F9:2C:9C:B2:35:F6:74:E2:89:A4:DF:41:C9:57:58:80:F3
            X509v3 Authority Key Identifier:
                keyid:0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:88:11:33:a8:a8:e3:60:e2:39:69:69:ff:2d:f5:cf:d7:78:
         b1:ab:1f:61:6b:f2:2c:d8:f8:e7:13:90:7d:b9:cf:ab:a5:6a:
         87:81:49:0e:2f:0c:01:57:07:f2:34:2f:54:b3:c4:e8:a9:c7:
         aa:eb:e2:d2:67:8d:6b:87:c4:3a:c4:61:63:6a:0d:39:a1:45:
         7f:a6:05:1d:12:50:96:de:ff:6c:07:a0:71:3e:49:70:bb:37:
         ea:90:69:a1:3a:2c:18:82:d2:31:77:e2:7c:64:2c:ac:a1:cd:
         c4:e5:1f:43:d6:0c:59:93:b5:8e:ab:6c:a2:09:eb:97:3a:25:
         d2:7e:67:43:42:14:6b:16:bb:37:79:08:4f:6b:4c:e6:51:20:
         ed:00:2d:0c:13:0c:84:fc:04:b8:08:bd:37:6b:fb:39:c6:86:
         24:d4:9f:7d:71:ac:04:66:41:b4:74:78:4b:f5:e9:f1:2b:6f:
         9d:d7:b8:a4:14:4f:00:21:a2:0c:0a:03:c3:b9:36:61:c1:01:
         c4:1c:fe:d3:ed:b8:a4:d5:6d:f4:c3:fd:4f:f3:90:69:be:4d:
         c4:de:84:29:a3:6e:86:35:9b:ad:30:44:f9:be:bc:f8:7d:01:
         98:7d:72:d2:51:ba:c2:f0:4a:9b:0b:e7:68:c4:58:87:48:b5:
         b3:2c:50:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:35:22 2025 by rpki-client