Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
File:                     4xEv77cGGMJWaxygluyNG7Xzucs.mft (raw, json)
Hash identifier:          4Dd6zlrWyXtOm15JYhAWCBYA+70h86xvDZ6JxDnffbU=
Subject key identifier:   97:FA:3D:53:6B:84:EB:34:BB:AF:4F:4D:BF:4E:85:49:F6:AB:E8:00
Authority key identifier: E3:11:2F:EF:B7:06:18:C2:56:6B:1C:A0:96:EC:8D:1B:B5:F3:B9:CB
Certificate issuer:       /CN=F367FC4FAR/serialNumber=E3112FEFB70618C2566B1CA096EC8D1BB5F3B9CB
Certificate serial:       0D1A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
Manifest number:          0D19
Signing time:             Tue 16 Sep 2025 01:05:23 +0000
Manifest this update:     Tue 16 Sep 2025 01:05:23 +0000
Manifest next update:     Thu 18 Sep 2025 01:05:23 +0000
Files and hashes:         1: 4xEv77cGGMJWaxygluyNG7Xzucs.crl (hash: ebcgCjQYMjATiA/fNDCc7v6DuPL9n49reyfdbu+IiT4=)
                          2: CF0B622680CF11E6B85F0616F8AEA228.roa (hash: 1lI0Ic1CEtnqLpkbf3wsFe/5DRUyxbUGqpE48sR72kQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
                          rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3354 (0xd1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAR, serialNumber=E3112FEFB70618C2566B1CA096EC8D1BB5F3B9CB
        Validity
            Not Before: Sep 16 01:05:23 2025 GMT
            Not After : Sep 18 01:05:23 2025 GMT
        Subject: CN=68c8b7d3-055f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cb:a6:b7:26:9e:00:d9:26:b7:8d:86:07:89:
                    8b:ef:bc:0f:4c:e9:17:b7:b7:83:e1:e9:64:7c:bd:
                    13:bf:04:6b:4a:0e:a0:d2:85:db:43:3e:a3:53:31:
                    9a:dc:34:79:41:2c:76:16:15:6f:ba:f7:a2:eb:a9:
                    1f:7d:45:5d:24:e4:42:56:10:45:cf:74:f2:1e:57:
                    97:72:d0:b7:35:f0:aa:9c:ff:48:23:e1:f6:86:a7:
                    d9:60:fc:49:cb:ef:ca:37:ec:cc:43:8c:4c:cf:7a:
                    3f:c9:a0:92:24:49:e2:e5:6f:13:c2:ed:47:52:47:
                    ef:f1:e9:f2:f9:b3:74:cb:ab:2a:38:73:7f:8c:63:
                    4a:08:37:04:ce:7b:fe:ff:ed:fd:d3:96:76:c4:eb:
                    b9:00:61:67:e5:6d:90:13:a6:8f:1a:54:93:01:23:
                    21:eb:98:f0:b0:75:c0:f2:62:92:bd:f9:c2:1c:3e:
                    27:3e:c6:5f:47:7a:45:d0:8d:fc:a5:4c:c1:a6:f7:
                    40:f1:44:6a:98:c0:74:2b:f0:bf:fd:75:25:ba:3c:
                    ad:41:13:46:db:b7:fc:90:1e:61:86:1d:51:62:36:
                    8e:6a:f6:b5:fe:a3:a5:9f:99:16:89:1e:1d:df:82:
                    6a:ca:a7:80:c7:db:1f:3a:b9:bb:21:8e:d3:48:86:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FA:3D:53:6B:84:EB:34:BB:AF:4F:4D:BF:4E:85:49:F6:AB:E8:00
            X509v3 Authority Key Identifier:
                keyid:E3:11:2F:EF:B7:06:18:C2:56:6B:1C:A0:96:EC:8D:1B:B5:F3:B9:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2f:58:1f:8f:ef:91:09:8a:0e:2a:8b:ce:b5:2a:d6:ab:33:
         b7:b0:38:cf:bf:a4:1d:d3:6c:03:ae:07:e1:dd:3c:44:fd:5f:
         fa:90:44:44:0e:39:50:bd:32:e1:2f:87:17:a7:7a:b2:8c:c8:
         46:c1:83:d7:78:60:b0:7b:65:66:26:4f:c3:26:f0:d1:c1:fd:
         2c:b7:5c:31:03:31:4b:15:4f:68:8c:28:70:de:6d:4c:78:45:
         79:e9:26:96:fe:d4:92:ca:b9:84:54:a5:ed:5c:8e:3d:53:96:
         51:bf:d9:27:9c:a4:4a:9e:46:53:3f:bc:2d:6b:b0:14:4e:43:
         7c:c2:ec:a9:ab:75:f7:48:a6:24:04:0d:a9:0d:ac:1f:6c:25:
         a0:1a:48:4b:36:b3:de:e1:a2:bd:f6:81:b5:07:17:40:55:c2:
         84:95:51:72:e4:23:80:1f:19:8c:d7:ce:c8:54:4f:cc:63:75:
         38:0c:a7:33:25:a4:fd:2e:fd:7b:04:d5:1e:36:59:00:73:60:
         4c:00:10:fe:77:4f:bd:a3:f5:25:53:8f:29:9b:a1:eb:ce:e1:
         b0:ca:56:8f:e7:6d:7d:00:39:82:a2:50:62:15:43:41:86:7c:
         55:7f:e6:49:e4:10:bd:36:09:14:51:1c:e9:0a:26:d2:96:d2:
         24:a0:b1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:53:52 2025 by rpki-client