Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
File:                     qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft (raw, json)
Hash identifier:          nfiR3+z+4/q5fVYRI6vth/CA+vsmPF/ElHVCZIUCghE=
Subject key identifier:   82:91:90:9E:DE:03:1D:7E:9D:65:42:55:26:23:61:37:6B:DA:93:E5
Authority key identifier: AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A
Certificate issuer:       /CN=F3676EF0AR/serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
Certificate serial:       0120
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
Manifest number:          011F
Signing time:             Sat 07 Jun 2025 04:53:07 +0000
Manifest this update:     Sat 07 Jun 2025 04:53:06 +0000
Manifest next update:     Mon 09 Jun 2025 04:53:06 +0000
Files and hashes:         1: qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl (hash: ygZflOW4UI0YcQpgWRdaOQ2c2+LFYTzQwxwxhvMhhGo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                          rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676EF0AR, serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
        Validity
            Not Before: Jun  7 04:53:06 2025 GMT
            Not After : Jun  9 04:53:06 2025 GMT
        Subject: CN=6843c5b3-5fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:a5:c6:5e:f9:63:4c:3c:88:c0:f8:b8:09:
                    ce:4b:ed:63:4a:b8:c7:60:70:e7:bf:42:af:c8:fe:
                    d3:50:40:03:5c:cb:1c:ac:7b:e5:5d:7a:83:db:22:
                    99:12:1b:4a:8b:bd:c5:70:66:9d:71:72:2c:5d:e2:
                    f5:96:41:6d:f7:e4:20:86:50:e2:ac:3a:21:e5:22:
                    11:7d:db:62:6a:5f:7f:ff:f4:af:d2:0d:79:2b:68:
                    9d:11:e6:07:64:20:d2:0d:4b:45:a1:5c:6f:37:18:
                    9b:ea:8f:0f:d3:7a:37:28:71:3e:8a:49:b5:d6:c0:
                    60:27:ad:23:5e:dc:0e:ee:6f:6c:1b:34:f7:fa:ba:
                    2b:ef:f6:fd:09:c6:4d:fb:35:f1:9f:1e:f7:04:34:
                    4f:5d:63:f6:fe:5c:1b:f7:26:8c:93:da:60:2c:82:
                    39:f5:56:b5:93:01:74:9d:51:f7:b4:75:0d:d7:ab:
                    7e:3a:5c:a4:ed:47:0e:2b:68:40:18:ec:07:3e:d0:
                    08:ad:46:6c:1c:fc:2a:b9:e8:cb:ae:ad:1e:37:f3:
                    48:92:fa:8e:ab:b3:40:7d:4f:ca:82:0a:1a:7f:f0:
                    f0:64:4e:3a:fd:d9:2a:08:38:39:64:05:5c:00:d0:
                    4e:94:35:68:f8:32:eb:75:b2:9b:ad:06:f8:17:a3:
                    b7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:91:90:9E:DE:03:1D:7E:9D:65:42:55:26:23:61:37:6B:DA:93:E5
            X509v3 Authority Key Identifier:
                keyid:AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:47:d0:53:96:0c:e3:14:d3:84:42:78:16:21:54:e2:f8:54:
         e1:e5:9a:bf:8d:33:22:57:3d:2d:c8:14:55:09:38:c9:94:7e:
         0c:19:3b:cb:9f:b4:77:5a:bb:fa:81:4b:06:98:75:c7:68:70:
         05:bc:81:d4:d9:08:42:24:3e:d7:51:bc:1c:9b:2b:6c:cb:58:
         28:b0:0d:70:2b:e1:91:4d:19:1a:d4:f8:8a:d4:8e:40:91:12:
         f4:81:5e:14:d3:2e:38:59:54:55:33:40:e4:51:e9:39:6a:48:
         52:7c:7c:d8:fd:8a:9c:ab:ac:0f:c5:02:07:5c:39:b7:67:4d:
         39:9f:87:21:94:4b:84:a5:c5:53:4c:4a:cd:19:a5:ea:53:9b:
         99:6c:66:19:fa:50:76:59:29:7a:bb:12:f5:e5:a1:74:c8:60:
         22:60:39:b1:b9:ef:2f:41:85:cc:f2:b8:6a:79:4a:71:9a:a1:
         60:76:d7:ea:27:f5:72:27:a1:52:2e:5d:dd:4a:70:9e:32:88:
         12:5f:10:8a:bb:74:54:32:e5:ec:fe:9f:57:74:6b:19:28:f0:
         b1:81:f5:ec:77:c0:91:25:78:58:5e:43:8f:bd:f4:da:52:d8:
         c1:1f:13:e8:14:15:01:03:61:b6:5f:36:70:92:a8:4a:1d:16:
         8b:5c:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:51:48 2025 by rpki-client