Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
File:                     XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft (raw, json)
Hash identifier:          mhITOu5eBtVpk3ypUTxMwHKR5Elc6WWwChwpPQFVElM=
Subject key identifier:   01:65:F2:68:4B:AB:44:7B:35:12:C6:8B:B8:91:05:D5:B8:55:7C:0B
Authority key identifier: 5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
Certificate issuer:       /CN=F36795C4AR/serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Certificate serial:       08F6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
Manifest number:          08F5
Signing time:             Thu 31 Jul 2025 01:36:20 +0000
Manifest this update:     Thu 31 Jul 2025 01:36:19 +0000
Manifest next update:     Sat 02 Aug 2025 01:36:19 +0000
Files and hashes:         1: XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl (hash: oGWN6FJBwqckIF9BmDfn001FJTa6LullDOYqmv+nDEY=)
                          2: 85DEE92291EF11E9ABCCB07EF8AEA228.roa (hash: 3K2tDuP6LQooSlB5SsHZUahCN8ylMLHTNlp/RyDYHoc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                          rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2294 (0x8f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AR, serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
        Validity
            Not Before: Jul 31 01:36:19 2025 GMT
            Not After : Aug  2 01:36:19 2025 GMT
        Subject: CN=688ac894-17bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:29:66:5f:b9:54:a9:1b:46:f2:82:07:98:88:
                    a1:e9:a4:67:d4:75:c8:bb:e2:5b:14:f2:5a:d8:e3:
                    4a:1c:c3:ba:46:0e:2f:da:da:a2:6b:0e:de:74:d9:
                    bd:93:89:0d:6e:6a:a8:ba:d2:22:9e:ee:1c:d2:ce:
                    89:bd:c4:95:1c:de:6c:6f:24:4f:3c:65:25:5f:a6:
                    ae:a6:c0:13:ce:f1:cf:5d:8e:db:2e:e3:a5:15:40:
                    85:6a:dd:eb:05:59:e5:1c:c3:5b:ba:4d:1d:44:bf:
                    9b:e4:22:0a:29:61:a9:b5:91:73:c8:92:41:27:5f:
                    70:0b:4c:31:46:37:e5:3b:86:bc:7d:77:49:f6:3f:
                    3a:94:c7:90:19:ba:5c:b9:d4:59:be:d8:3c:bf:2f:
                    83:af:67:a9:71:ff:fe:bb:14:d8:28:5a:58:b5:61:
                    c0:ea:f2:b7:ed:df:9d:ac:12:76:f1:d3:cf:5e:91:
                    2a:bf:c6:ff:cd:a1:da:0f:18:bf:18:a2:cc:dc:3a:
                    33:51:86:84:9a:02:bd:fa:3b:71:28:e2:20:eb:e6:
                    f1:b5:40:49:2d:56:37:c0:57:19:d5:58:b0:9d:31:
                    2d:07:f0:76:01:7d:ad:4f:33:ca:30:19:d6:c1:6b:
                    be:24:3e:30:b7:2b:1d:f7:e8:56:c7:12:81:fd:f5:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:65:F2:68:4B:AB:44:7B:35:12:C6:8B:B8:91:05:D5:B8:55:7C:0B
            X509v3 Authority Key Identifier:
                keyid:5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3e:0d:a2:92:b8:fa:ab:c2:13:94:c5:ad:c5:25:cb:cd:6a:
         de:e2:5e:ad:3e:3c:38:10:e9:da:af:ed:12:b4:b8:95:a5:6a:
         40:55:7c:2c:4a:c1:06:f1:46:5e:87:e5:20:1d:bf:fc:97:01:
         ef:c9:2c:5e:cb:73:7f:9c:33:1f:3f:2b:f4:26:4c:2e:b8:3c:
         d5:40:7e:99:26:b9:d1:31:6a:b0:e3:2f:ac:a5:49:d9:8f:30:
         3f:42:0f:d9:f1:67:62:96:ec:f7:00:14:aa:13:14:b2:67:44:
         24:72:65:24:f3:72:9a:44:8a:ea:e7:8f:54:c0:fe:42:98:a5:
         6f:4f:c2:72:2c:44:c1:8d:eb:f9:6b:84:3e:cd:45:a6:87:2e:
         af:ce:07:90:f2:0c:c7:a8:c4:21:b9:18:66:e1:5e:59:a7:11:
         ff:4d:64:16:f0:9f:4b:e3:26:ec:ed:c7:8b:23:3f:64:b7:c1:
         14:57:85:17:ac:44:b1:a8:3c:8b:2b:1e:d1:6a:48:48:1e:b1:
         d3:ba:d5:63:11:08:ec:2d:40:1f:a6:6e:ad:07:88:e9:5e:2f:
         05:22:0b:cd:73:39:d3:5e:f7:03:78:dd:c9:f0:f5:1b:3f:6a:
         3e:87:8b:e3:5e:9a:7a:cf:ae:cc:c7:68:5b:65:f0:88:64:0a:
         ee:9c:55:3c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk1QzRBUjExMC8GA1UEBRMoNUREMTlDNjdGMTNFNjNEN0FEQTFBRUFDOEI3N0FD
QzA2M0U5RTUxNDAeFw0yNTA3MzEwMTM2MTlaFw0yNTA4MDIwMTM2MTlaMBgxFjAU
BgNVBAMTDTY4OGFjODk0LTE3YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKKWZfuVSpG0byggeYiKHppGfUdci74lsU8lrY40ocw7pGDi/a2qJrDt50
2b2TiQ1uaqi60iKe7hzSzom9xJUc3mxvJE88ZSVfpq6mwBPO8c9djtsu46UVQIVq
3esFWeUcw1u6TR1Ev5vkIgopYam1kXPIkkEnX3ALTDFGN+U7hrx9d0n2PzqUx5AZ
uly51Fm+2Dy/L4OvZ6lx//67FNgoWli1YcDq8rft352sEnbx089ekSq/xv/NodoP
GL8YoszcOjNRhoSaAr36O3Eo4iDr5vG1QEktVjfAVxnVWLCdMS0H8HYBfa1PM8ow
GdbBa74kPjC3Kx336FbHEoH99SxlAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUAWXy
aEurRHs1EsaLuJEF1bhVfAswHwYDVR0jBBgwFoAUXdGcZ/E+Y9etoa6si3eswGPp
5RQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NUM0L0U4NDcwM0JDOTFFRDExRTlCMDlFNzQ3REY4QUVBMjI4L1hkR2Na
X0UtWTlldG9hNnNpM2Vzd0dQcDVSUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1hkR2NaX0UtWTlldG9hNnNpM2Vzd0dQcDVSUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Nzk1QzQvRTg0NzAzQkM5MUVEMTFFOUIwOUU3NDdERjhBRUEy
MjgvWGRHY1pfRS1ZOWV0b2E2c2kzZXN3R1BwNVJRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALPg2ikrj6q8ITlMWtxSXLzWre4l6tPjw4
EOnar+0StLiVpWpAVXwsSsEG8UZeh+UgHb/8lwHvySxey3N/nDMfPyv0JkwuuDzV
QH6ZJrnRMWqw4y+spUnZjzA/Qg/Z8Wdiluz3ABSqExSyZ0QkcmUk83KaRIrq549U
wP5CmKVvT8JyLETBjev5a4Q+zUWmhy6vzgeQ8gzHqMQhuRhm4V5ZpxH/TWQW8J9L
4ybs7ceLIz9kt8EUV4UXrESxqDyLKx7RakhIHrHTutVjEQjsLUAfpm6tB4jpXi8F
IgvNcznTXvcDeN3J8PUbP2o+h4vjXpp6z67Mx2hbZfCIZArunFU8
-----END CERTIFICATE-----
Generated at Thu Jul 31 13:13:21 2025 by rpki-client