Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
File:                     DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft (raw, json)
Hash identifier:          djeBkbuw6A6iUIeWInJ6VKKkA06aqQdaeVIR2XmRgd8=
Subject key identifier:   20:C3:90:A0:CA:78:F3:C9:72:80:C4:CB:FF:37:BE:72:2C:35:A6:2A
Authority key identifier: 0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80
Certificate issuer:       /CN=F365E03DAR/serialNumber=0D0A98CA34260482B1B1780EA3210DF485AC0880
Certificate serial:       044E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
Manifest number:          044C
Signing time:             Sun 27 Jul 2025 03:10:01 +0000
Manifest this update:     Sun 27 Jul 2025 03:10:01 +0000
Manifest next update:     Tue 29 Jul 2025 03:10:01 +0000
Files and hashes:         1: DQqYyjQmBIKxsXgOoyEN9IWsCIA.crl (hash: nVm+qqu+z891Jw72PTrjqgR6jld3mh5z7uM588/mdYc=)
                          2: 5F7AB17428B611EDB115B48AF1222468.roa (hash: OF/fSOSuvHu8HSaG6Hw4O63ywB6BMdELYNXTmsSswzk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
                          rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1102 (0x44e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAR, serialNumber=0D0A98CA34260482B1B1780EA3210DF485AC0880
        Validity
            Not Before: Jul 27 03:10:01 2025 GMT
            Not After : Jul 29 03:10:01 2025 GMT
        Subject: CN=68859889-1438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:7a:94:58:fa:b5:ea:f5:6b:29:16:3a:25:
                    72:6f:e5:bb:5a:26:db:35:26:d0:e1:d0:d8:6d:cd:
                    e6:0c:e8:1b:f0:28:7f:30:93:62:48:0d:a7:ea:db:
                    70:3a:6a:60:b5:99:3e:26:38:33:d5:39:2d:c6:b6:
                    0a:75:89:62:08:44:33:ae:1b:1c:47:a8:0f:fe:3f:
                    83:d0:12:07:4b:f9:3a:0e:44:79:22:f1:26:f1:98:
                    97:06:c3:0a:1c:67:d3:39:f5:34:20:06:bd:c3:21:
                    26:a1:ac:5d:ea:9c:8e:87:76:83:7e:58:58:ae:46:
                    07:4f:1a:5b:09:5b:af:0c:ec:1e:76:49:72:b5:9f:
                    bf:62:3a:67:9c:a9:af:f3:36:f8:cf:2f:5d:a9:cd:
                    1f:89:7c:7e:d6:c0:93:5f:33:ec:25:e6:da:1e:98:
                    f1:85:ba:6d:26:f5:a1:ce:7e:93:ea:9e:f8:33:7d:
                    d4:c0:45:22:d1:67:eb:e4:97:29:49:ac:e1:63:e7:
                    48:66:bb:9f:b7:a9:31:0a:ca:0d:15:93:99:af:61:
                    26:85:0a:f2:fd:fd:85:cd:38:29:e5:2e:ed:a2:1b:
                    99:a8:e0:d3:ce:f5:92:70:ed:e8:46:7b:8d:a2:5a:
                    e1:1c:1e:65:2e:b6:2d:e0:ca:0e:86:d3:be:b3:1e:
                    80:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C3:90:A0:CA:78:F3:C9:72:80:C4:CB:FF:37:BE:72:2C:35:A6:2A
            X509v3 Authority Key Identifier:
                keyid:0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:68:df:0e:0f:32:a9:84:00:b7:f1:12:3e:de:de:14:4a:97:
         d0:1a:3b:b1:cb:b3:0c:f6:2b:97:9e:9c:53:67:0b:8b:68:e4:
         55:e0:d6:38:b4:d6:2c:d1:cf:6a:25:c2:67:9c:7f:a0:57:31:
         86:44:fe:e1:b0:3f:27:5b:0e:f3:65:ec:f4:8f:82:4d:02:cb:
         c8:72:45:eb:20:8f:a4:21:f6:49:40:73:ca:f6:40:93:7f:a4:
         36:8c:9b:62:aa:99:5d:61:bf:1b:04:b5:6f:57:da:30:03:3d:
         01:24:ac:e1:0a:b4:82:e6:ec:74:d1:28:19:93:4b:d8:2c:ce:
         6f:5e:f8:8f:df:36:a0:97:e1:3b:f1:10:84:d3:97:8e:84:a5:
         a6:9f:1d:e6:3c:77:3c:e2:0f:7c:9e:53:14:25:d1:84:95:2d:
         55:19:5a:e8:6a:8a:12:1d:a0:bf:3a:85:8d:35:ba:f2:72:72:
         63:8f:ee:b4:88:29:96:e5:1f:b8:f7:c9:97:e3:00:4c:b8:13:
         55:e5:52:79:77:9a:a2:c3:18:f8:30:84:e8:6d:95:35:41:2e:
         bd:e2:33:2e:74:99:e2:4d:c4:dc:68:91:aa:28:ed:c1:d3:2a:
         98:b4:5f:0d:c6:58:6b:02:ec:49:2b:cd:25:d0:00:36:3a:ed:
         88:d0:0d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:49:11 2025 by rpki-client