Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File:                     FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier:          me3oerRXt/sTT3LkpgGbGQYmxXLuGsR//7gFK8tL7ZQ=
Subject key identifier:   B2:30:02:D8:6C:73:62:0E:AF:52:CB:0E:14:B1:4D:E5:60:08:F5:58
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer:       /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial:       03E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number:          03E0
Signing time:             Tue 09 Sep 2025 03:14:49 +0000
Manifest this update:     Tue 09 Sep 2025 03:14:49 +0000
Manifest next update:     Thu 11 Sep 2025 03:14:49 +0000
Files and hashes:         1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: FHvHpG7SDPs90eJo73O65tZfxJJ6YKfX7nPZ1hIS+OY=)
                          2: CF8B10CE1DB711EFA609B0217DDC24C2.roa (hash: cUUrYIHHPxFgWnYQbOftBzdS94Gj26Vr5vz5884oWrA=)
                          3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                          rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
        Validity
            Not Before: Sep  9 03:14:49 2025 GMT
            Not After : Sep 11 03:14:49 2025 GMT
        Subject: CN=68bf9ba9-1ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b5:f5:64:d2:e5:f5:2d:b5:98:1b:c6:47:84:
                    8b:cb:e4:16:4d:e8:05:4d:fb:57:0e:83:4d:69:56:
                    81:d1:4e:83:e0:e9:a8:f9:e5:fb:da:0b:7d:51:c7:
                    33:7d:ea:4f:d8:f9:70:35:82:9c:30:f4:93:73:72:
                    cb:1a:7b:fa:81:fe:06:16:1f:d3:e9:06:c2:16:6c:
                    be:6c:b4:53:a4:fd:ae:24:1c:ff:71:df:1d:65:7c:
                    a6:6a:22:a6:e8:a6:45:54:4d:c3:14:ab:7b:16:71:
                    0c:af:75:8f:3e:f0:69:41:50:0a:44:d7:76:61:59:
                    c3:47:b0:39:44:75:74:19:78:ba:fe:56:bd:cb:c7:
                    7c:13:9c:fc:28:85:f8:a9:cb:12:0f:01:40:fd:2f:
                    07:58:cb:75:6e:89:ea:ea:42:ae:c0:a4:b5:60:48:
                    c5:fa:40:25:24:45:14:af:67:22:6a:6d:ed:33:86:
                    7a:8b:aa:ba:be:df:43:29:32:ee:5f:be:73:8d:88:
                    ef:6c:bc:ff:7a:96:0a:de:de:15:cf:f3:66:4b:7d:
                    38:99:fd:4f:68:9c:25:36:3d:71:39:ea:45:26:87:
                    96:ed:4e:97:2d:4d:a6:3b:21:d9:57:53:25:59:cb:
                    da:e6:5b:d5:cd:36:37:1a:f5:07:bf:63:fe:64:99:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:30:02:D8:6C:73:62:0E:AF:52:CB:0E:14:B1:4D:E5:60:08:F5:58
            X509v3 Authority Key Identifier:
                keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:92:d9:2b:14:8b:ba:b1:2d:ad:96:d0:2f:4b:25:53:d7:ed:
         4c:e9:1f:13:d2:bf:e4:99:a7:aa:62:46:05:23:d4:4b:36:fb:
         e2:00:c4:8f:79:8f:87:7a:b7:2d:f9:5a:8e:16:84:73:03:30:
         da:c1:07:21:f4:f0:06:31:5b:79:78:e1:a6:3e:51:6b:4e:d2:
         13:e6:39:74:62:50:09:58:90:1e:d8:a9:fe:76:e3:eb:12:0d:
         77:dd:b4:66:05:34:60:15:6c:4f:bb:44:36:9e:39:bc:ad:f8:
         31:aa:2d:1f:29:ed:00:c6:3f:8b:9d:9e:12:d2:e9:53:08:0e:
         45:e6:b5:cf:30:10:d9:30:00:2b:29:f9:0a:e2:81:ed:4d:6d:
         ee:c7:c4:b8:96:02:67:14:87:d6:11:44:cb:a7:4b:26:70:3b:
         c9:00:77:fb:4c:cc:e1:33:30:ee:40:0e:dc:57:42:ba:05:aa:
         1c:95:51:b8:9a:64:1b:1b:f2:81:1a:7d:79:fa:8e:cf:7f:ca:
         19:36:a9:ae:b6:84:42:d9:db:95:1c:da:03:73:94:bc:6c:95:
         11:5e:31:89:f5:12:da:0f:7c:f2:58:5a:cb:bc:4c:a9:5f:46:
         9e:1c:55:36:b0:8f:fe:9c:47:14:42:8a:cd:9b:53:53:ad:6c:
         20:78:75:70
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTRBNDRBUjExMC8GA1UEBRMoMTZDNzRFNzM5NURDMjFERDg0NEEyMkEwMTEyODE2
MTIxQTc1RjQ5MjAeFw0yNTA5MDkwMzE0NDlaFw0yNTA5MTEwMzE0NDlaMBgxFjAU
BgNVBAMTDTY4YmY5YmE5LTFjY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDntfVk0uX1LbWYG8ZHhIvL5BZN6AVN+1cOg01pVoHRToPg6aj55fvaC31R
xzN96k/Y+XA1gpww9JNzcssae/qB/gYWH9PpBsIWbL5stFOk/a4kHP9x3x1lfKZq
IqbopkVUTcMUq3sWcQyvdY8+8GlBUApE13ZhWcNHsDlEdXQZeLr+Vr3Lx3wTnPwo
hfipyxIPAUD9LwdYy3VuierqQq7ApLVgSMX6QCUkRRSvZyJqbe0zhnqLqrq+30Mp
Mu5fvnONiO9svP96lgre3hXP82ZLfTiZ/U9onCU2PXE56kUmh5btTpctTaY7IdlX
UyVZy9rmW9XNNjca9Qe/Y/5kmWrVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUsjAC
2GxzYg6vUssOFLFN5WAI9VgwHwYDVR0jBBgwFoAUFsdOc5XcId2ESiKgESgWEhp1
9JIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0QTQ0LzJEQTc1NjgwOUNBNTExRURCNDBGRjM5OUYxMjIyNDY4L0ZzZE9j
NVhjSWQyRVNpS2dFU2dXRWhwMTlKSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0ZzZE9jNVhjSWQyRVNpS2dFU2dXRWhwMTlKSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTRBNDQvMkRBNzU2ODA5Q0E1MTFFREI0MEZGMzk5RjEyMjI0
NjgvRnNkT2M1WGNJZDJFU2lLZ0VTZ1dFaHAxOUpJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC2ktkrFIu6sS2tltAvSyVT1+1M6R8T0r/k
maeqYkYFI9RLNvviAMSPeY+Herct+VqOFoRzAzDawQch9PAGMVt5eOGmPlFrTtIT
5jl0YlAJWJAe2Kn+duPrEg133bRmBTRgFWxPu0Q2njm8rfgxqi0fKe0Axj+LnZ4S
0ulTCA5F5rXPMBDZMAArKfkK4oHtTW3ux8S4lgJnFIfWEUTLp0smcDvJAHf7TMzh
MzDuQA7cV0K6BaoclVG4mmQbG/KBGn15+o7Pf8oZNqmutoRC2duVHNoDc5S8bJUR
XjGJ9RLaD3zyWFrLvEypX0aeHFU2sI/+nEcUQorNm1NTrWwgeHVw
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:13:27 2025 by rpki-client