Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
File:                     TFQzRWcaPQxAiChKkfx3-2zGsGg.mft (raw, json)
Hash identifier:          d1T2PnWVVDKwu7dCZak6blm4xpp3h794BzVpCNJaYOk=
Subject key identifier:   DC:43:57:37:95:7F:8F:5B:CC:9A:16:82:B8:1B:88:07:8F:73:A4:C6
Authority key identifier: 4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68
Certificate issuer:       /CN=F3668231AR/serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
Certificate serial:       0BB5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
Manifest number:          0BB4
Signing time:             Sun 27 Jul 2025 01:11:00 +0000
Manifest this update:     Sun 27 Jul 2025 01:11:00 +0000
Manifest next update:     Tue 29 Jul 2025 01:11:00 +0000
Files and hashes:         1: TFQzRWcaPQxAiChKkfx3-2zGsGg.crl (hash: 5Spi7/Tr6L/BRmR7VVnulw4G/IjrYyZMRFfg/WB9Adw=)
                          2: DA08B89A6B8E11E7952D2166F8AEA228.roa (hash: rve7QOec9FqmRJKLI6WNqhqnq4CSIGF+XgPlE64aa9A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
                          rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2997 (0xbb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AR, serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
        Validity
            Not Before: Jul 27 01:11:00 2025 GMT
            Not After : Jul 29 01:11:00 2025 GMT
        Subject: CN=68857ca4-5203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:09:69:84:3e:4b:39:0e:e1:5e:be:0b:8e:88:
                    f2:2e:7f:40:a0:62:18:31:a8:67:c2:b0:c2:5b:dc:
                    95:1c:53:53:13:b1:8d:27:24:11:fa:43:05:14:90:
                    c8:73:65:04:a0:5a:1c:81:68:97:b3:da:9f:6e:cd:
                    67:8d:b2:2b:e3:2e:60:02:6e:08:0f:27:30:4e:88:
                    05:8f:0b:79:ec:a2:ef:2b:6e:72:dc:04:bb:fc:99:
                    3a:d5:5b:88:5e:33:5d:56:b0:79:a9:16:9a:0d:99:
                    eb:68:66:80:09:d0:e5:72:b3:8e:10:7c:e6:38:b1:
                    3f:af:dc:d6:bb:15:62:0c:c8:c3:22:f6:8d:e9:16:
                    71:e9:93:64:16:57:19:e0:31:db:0e:62:02:e4:5d:
                    6b:f6:37:0c:27:a0:e2:97:71:ba:62:92:47:18:f1:
                    d1:33:9d:3f:75:fc:ca:d1:6a:04:55:6a:2e:19:3f:
                    c5:d1:59:d4:d9:0a:03:b8:96:f8:c2:df:42:b9:61:
                    f8:3c:16:3c:6d:e7:32:b8:50:85:9a:81:3a:8a:07:
                    41:7c:fb:07:50:89:1c:a6:42:7a:75:99:81:18:ff:
                    18:24:b7:9f:f8:4f:fb:ca:9f:0e:b1:e0:e2:2d:1c:
                    80:cb:f7:7e:36:e7:b6:63:47:2c:4a:a4:9f:2b:83:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:43:57:37:95:7F:8F:5B:CC:9A:16:82:B8:1B:88:07:8F:73:A4:C6
            X509v3 Authority Key Identifier:
                keyid:4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:41:d8:a0:e0:6e:70:a7:87:66:2d:9b:7e:0c:95:0d:24:3b:
         48:2e:1d:87:4f:d0:98:9e:76:15:45:27:77:9d:1b:69:d2:dc:
         84:49:f2:2f:2b:76:2f:a2:a2:ae:6d:b4:0f:fe:02:50:39:cb:
         a1:3f:03:0d:97:a8:9e:c6:45:13:af:95:74:8c:6a:cd:f7:f6:
         85:39:c6:c2:1d:4a:fc:2f:8d:38:e5:9d:bf:c5:de:a6:e2:f4:
         ed:9b:ca:6e:0e:f2:90:93:21:84:e6:83:a5:ce:76:7c:e3:71:
         31:9b:59:92:00:cc:f5:a1:ed:9e:4c:07:7f:9a:e8:01:54:71:
         f6:e3:5a:cf:4f:78:58:b9:45:01:ae:0e:7c:6f:f9:7e:95:06:
         aa:da:33:00:a2:91:43:ab:dd:cc:18:36:c3:f8:dc:f6:b5:d8:
         08:d9:d7:b0:3a:d3:c6:58:92:e8:25:5c:e2:cc:c1:ae:96:8e:
         58:d9:32:40:4c:7d:c6:11:d3:b3:f4:b4:f8:e4:21:63:0b:de:
         ee:73:d8:d4:fd:b8:e7:be:f3:fa:94:6e:54:5f:8d:8b:8e:d5:
         38:06:da:f7:02:1d:9a:2e:71:6d:b1:0f:b9:16:f0:e6:b6:af:
         50:27:d4:e7:ba:26:fc:f4:59:88:33:b0:2e:48:c7:7d:bd:be:
         a4:80:ea:cf
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICC7UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjgyMzFBUjExMC8GA1UEBRMoNEM1NDMzNDU2NzFBM0QwQzQwODgyODRBOTFGQzc3
RkI2Q0M2QjA2ODAeFw0yNTA3MjcwMTExMDBaFw0yNTA3MjkwMTExMDBaMBgxFjAU
BgNVBAMTDTY4ODU3Y2E0LTUyMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2CWmEPks5DuFevguOiPIuf0CgYhgxqGfCsMJb3JUcU1MTsY0nJBH6QwUU
kMhzZQSgWhyBaJez2p9uzWeNsivjLmACbggPJzBOiAWPC3nsou8rbnLcBLv8mTrV
W4heM11WsHmpFpoNmetoZoAJ0OVys44QfOY4sT+v3Na7FWIMyMMi9o3pFnHpk2QW
VxngMdsOYgLkXWv2NwwnoOKXcbpikkcY8dEznT91/MrRagRVai4ZP8XRWdTZCgO4
lvjC30K5Yfg8Fjxt5zK4UIWagTqKB0F8+wdQiRymQnp1mYEY/xgkt5/4T/vKnw6x
4OItHIDL934257ZjRyxKpJ8rg/7PAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU3ENX
N5V/j1vMmhaCuBuIB49zpMYwHwYDVR0jBBgwFoAUTFQzRWcaPQxAiChKkfx3+2zG
sGgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4MjMxLzcwMDJBM0FDNkI4RTExRTc5QzIwRUM2NUY4QUVBMjI4L1RGUXpS
V2NhUFF4QWlDaEtrZngzLTJ6R3NHZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1RGUXpSV2NhUFF4QWlDaEtrZngzLTJ6R3NHZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjgyMzEvNzAwMkEzQUM2QjhFMTFFNzlDMjBFQzY1RjhBRUEy
MjgvVEZRelJXY2FQUXhBaUNoS2tmeDMtMnpHc0dnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3Qdig4G5wp4dmLZt+DJUNJDtILh2HT9CY
nnYVRSd3nRtp0tyESfIvK3YvoqKubbQP/gJQOcuhPwMNl6iexkUTr5V0jGrN9/aF
OcbCHUr8L4045Z2/xd6m4vTtm8puDvKQkyGE5oOlznZ843Exm1mSAMz1oe2eTAd/
mugBVHH241rPT3hYuUUBrg58b/l+lQaq2jMAopFDq93MGDbD+Nz2tdgI2dewOtPG
WJLoJVzizMGulo5Y2TJATH3GEdOz9LT45CFjC97uc9jU/bjnvvP6lG5UX42LjtU4
Btr3Ah2aLnFtsQ+5FvDmtq9QJ9Tnuib89FmIM7AuSMd9vb6kgOrP
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:12:41 2025 by rpki-client