Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
File:                     tKCUA2WAIUx9QccbjIZXpO4vQHI.mft (raw, json)
Hash identifier:          zyeEvGyVVQ/e/6bRLpjiFQ0o8UAK0N8gvKWtT9zj8gQ=
Subject key identifier:   13:2F:62:20:B8:74:A1:6C:A8:CA:A5:17:B6:D3:4D:B0:4F:70:95:EC
Authority key identifier: B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
Certificate issuer:       /CN=F367678FAR/serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
Certificate serial:       018A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
Manifest number:          018A
Signing time:             Tue 16 Sep 2025 04:29:26 +0000
Manifest this update:     Tue 16 Sep 2025 04:29:25 +0000
Manifest next update:     Thu 18 Sep 2025 04:29:25 +0000
Files and hashes:         1: tKCUA2WAIUx9QccbjIZXpO4vQHI.crl (hash: /0axik+YKfyA9ANlcLHl76+Z2h6u2K/G7D3U0APCZdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
                          rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAR, serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
        Validity
            Not Before: Sep 16 04:29:25 2025 GMT
            Not After : Sep 18 04:29:25 2025 GMT
        Subject: CN=68c8e7a6-6fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:d8:05:08:79:95:3a:85:24:b8:8f:ea:bf:
                    16:77:36:75:de:52:c1:a4:39:65:9d:39:ee:cf:5b:
                    47:55:80:69:df:2d:74:00:25:3e:a1:9f:1c:dd:3c:
                    7c:a3:17:20:23:fd:64:7c:5a:b0:df:50:39:91:ef:
                    ec:5e:29:c1:e7:ee:70:f6:a6:fb:2a:fd:74:16:f0:
                    1a:fc:da:4d:0a:47:fb:d4:7d:ef:d5:57:60:f1:17:
                    d2:56:9d:59:9d:1d:8a:bd:bb:3e:cc:d3:30:f7:8f:
                    27:82:3a:0c:3a:a8:fd:fa:cb:9c:39:36:86:07:f3:
                    83:22:a8:fd:e3:85:57:2e:c3:78:d6:58:04:04:ca:
                    30:f7:f3:89:5a:20:46:ed:70:2d:05:c1:20:3e:09:
                    4f:48:50:11:1c:02:f3:2d:99:22:0f:0a:11:54:fe:
                    33:28:5e:82:e6:b8:55:8f:81:e0:3f:47:fa:1f:8f:
                    ad:ab:c5:b2:c3:d4:b7:0e:5a:f5:bb:9b:ed:18:ee:
                    a7:f6:94:8f:90:6b:91:ff:bb:4d:1a:5b:b4:88:52:
                    f7:c7:ee:5c:52:a5:3f:57:01:9c:8e:9c:43:fb:e8:
                    a6:5d:75:9d:33:9c:30:f3:e0:bc:5a:90:80:c8:46:
                    8e:44:3a:34:cc:75:51:bd:2d:e7:9d:c1:6f:94:3e:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2F:62:20:B8:74:A1:6C:A8:CA:A5:17:B6:D3:4D:B0:4F:70:95:EC
            X509v3 Authority Key Identifier:
                keyid:B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:cf:0f:bb:21:a4:a3:d5:d1:67:38:81:cc:9c:88:25:04:92:
         f0:c3:de:f2:cd:32:71:99:11:b1:c0:a0:f8:8c:48:fd:47:0e:
         3a:02:1b:9c:ec:c3:ec:27:ef:77:fb:45:c7:51:b3:46:3f:15:
         fc:94:0d:6b:65:80:6b:65:fa:af:2b:bd:a9:52:e2:34:c9:fa:
         9b:47:a9:85:82:65:41:3e:d0:9d:54:10:55:0d:18:9c:b6:89:
         71:5f:22:93:57:3a:e0:5f:98:75:a9:05:01:ea:e7:e7:e3:e6:
         8b:d9:51:ce:9d:d5:04:9a:33:8c:86:c5:45:14:87:ba:45:04:
         9e:da:24:85:f1:42:c7:9c:9a:8f:e5:da:68:9d:b7:23:d6:d8:
         4e:dd:dc:9f:06:77:a0:f7:c3:cb:c1:fc:5b:61:c6:5b:49:16:
         60:59:df:60:fa:57:f4:27:9f:fb:69:7e:6f:06:79:0e:a3:31:
         3a:e0:a2:3f:29:e2:c1:ca:f3:f0:9f:68:45:77:f1:d7:ba:16:
         6b:65:ba:44:40:a5:80:26:39:87:43:68:b6:72:a6:29:ba:55:
         13:0e:1d:97:b2:88:8f:70:86:5f:f0:a1:57:6f:bb:4d:4e:dd:
         b2:2b:c8:68:29:9a:d9:34:a2:33:a5:c8:b2:ca:b3:4f:83:f5:
         77:bb:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:58:29 2025 by rpki-client