Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
File:                     qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft (raw, json)
Hash identifier:          5Ndi56c9BD79YZJQ7Q+7FKMJ1R40ivN8Rh+bceyxGCc=
Subject key identifier:   9B:7B:B0:F8:0A:DE:41:33:FF:37:EA:86:4E:36:BB:7B:1B:BC:C1:4F
Authority key identifier: AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A
Certificate issuer:       /CN=F3676EF0AR/serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
Certificate serial:       0153
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
Manifest number:          0152
Signing time:             Sun 27 Jul 2025 04:53:42 +0000
Manifest this update:     Sun 27 Jul 2025 04:53:41 +0000
Manifest next update:     Tue 29 Jul 2025 04:53:41 +0000
Files and hashes:         1: qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl (hash: 0wVMg+22VWvjTNsTqsppZBL20z3Jfvn6fA/qqYfestY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                          rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676EF0AR, serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
        Validity
            Not Before: Jul 27 04:53:41 2025 GMT
            Not After : Jul 29 04:53:41 2025 GMT
        Subject: CN=6885b0d6-5773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:e3:61:c5:11:7a:40:2a:2c:d2:f3:dd:8e:
                    9c:6f:c8:bd:9d:f0:97:a5:5b:55:f2:3a:9f:5e:a2:
                    f0:21:09:a7:8b:c6:eb:bb:77:db:13:8c:68:b9:63:
                    68:f7:9b:d5:7a:a5:2d:fc:98:6c:d9:b8:d4:8f:9a:
                    c2:ae:f2:7d:e2:eb:b0:48:b5:7b:13:0f:6f:31:fd:
                    ac:7a:a4:6f:5b:9e:5f:85:a1:20:ad:a4:ac:66:c0:
                    37:db:31:2b:4a:7f:c8:63:c0:f4:84:f6:06:20:93:
                    4e:d9:0e:c4:31:9a:6a:aa:02:da:fa:86:dd:3e:a9:
                    b6:0f:ae:dc:9f:7e:0a:1d:95:80:20:55:34:fb:6d:
                    29:03:20:84:c7:27:4e:0b:4e:76:77:33:f2:d9:24:
                    fb:58:6c:b3:43:1c:ea:f1:93:2d:a4:c6:4d:78:3f:
                    48:52:48:08:da:b6:20:2d:e1:5f:06:6e:f8:c9:65:
                    59:a2:f8:7a:f8:3c:d3:c2:46:bf:f3:3d:68:a8:87:
                    64:96:08:e7:0c:2b:b4:f6:74:59:1d:00:d8:71:a3:
                    b0:02:41:fe:a6:bc:d1:d6:47:f0:55:f8:85:0d:a3:
                    18:b0:19:8a:33:d8:08:ff:ee:b5:45:8a:22:ee:a3:
                    f6:b3:19:12:88:58:b2:75:72:84:6d:15:5f:49:e6:
                    5d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7B:B0:F8:0A:DE:41:33:FF:37:EA:86:4E:36:BB:7B:1B:BC:C1:4F
            X509v3 Authority Key Identifier:
                keyid:AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:bb:3f:8e:bc:8c:a9:d9:bd:3e:60:af:17:86:1e:da:27:8c:
         47:bb:0e:c4:6b:86:94:00:37:2e:5a:be:51:a2:58:da:ca:19:
         11:06:e5:b3:f2:d8:57:7e:42:81:a7:fd:05:81:20:2a:3c:f9:
         30:03:0a:a6:44:c9:ee:2c:35:28:b1:e2:2a:14:1a:57:dd:db:
         dd:ad:13:63:70:e0:17:73:c7:8b:ef:43:a7:d1:20:9d:78:f6:
         45:6f:e2:6c:cc:c1:97:9e:4b:dd:6f:fc:c9:c1:9d:eb:41:cb:
         0c:85:7b:a6:27:55:01:f3:14:00:6f:d8:ba:72:54:a9:31:16:
         4d:7c:97:36:d2:6f:27:db:fe:ae:20:2b:81:cc:a2:d2:3a:2d:
         ef:95:76:52:bc:02:27:19:d8:70:a2:93:27:01:b9:e8:41:54:
         70:58:62:48:c6:9f:2b:73:d0:08:93:6b:aa:f2:4c:42:26:c3:
         fa:78:37:4e:ed:33:bf:74:3f:71:35:b9:11:5e:a6:08:ff:aa:
         e1:58:ca:da:23:7a:5d:9c:77:2b:aa:af:54:aa:a8:b8:04:57:
         06:ff:ea:36:15:cd:57:80:f9:85:fd:be:f6:bc:96:86:6a:71:
         f0:76:43:8a:5e:f4:0a:9c:06:27:97:47:bc:c3:df:dd:93:f7:
         a7:31:3c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:57:00 2025 by rpki-client