Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
File:                     5PfkpBui3-Gkmtw2NMzweTXpIRg.mft (raw, json)
Hash identifier:          WCFQ9efl9E2QiLCayrQZziQKhryOC7tRMK6wChIQPBI=
Subject key identifier:   7F:89:D6:0B:59:30:93:A9:D2:38:6D:CA:65:9A:56:1E:FD:79:AB:E8
Authority key identifier: E4:F7:E4:A4:1B:A2:DF:E1:A4:9A:DC:36:34:CC:F0:79:35:E9:21:18
Certificate issuer:       /CN=F368356FAR/serialNumber=E4F7E4A41BA2DFE1A49ADC3634CCF07935E92118
Certificate serial:       3E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
Manifest number:          3C
Signing time:             Tue 16 Sep 2025 05:05:12 +0000
Manifest this update:     Tue 16 Sep 2025 05:05:11 +0000
Manifest next update:     Thu 18 Sep 2025 05:05:11 +0000
Files and hashes:         1: 5PfkpBui3-Gkmtw2NMzweTXpIRg.crl (hash: a/N3lMse6Gh1MdxrDOnkp2cLTB6SgaedTedRqURUlag=)
                          2: 5BCF46A8923911F0BEE309F5DAE4EC9C.roa (hash: ncq+Mwbrx6oQKK1sHldvuf8E9iLus0kj4fB63aqtMb4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
                          rsync://rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368356FAR, serialNumber=E4F7E4A41BA2DFE1A49ADC3634CCF07935E92118
        Validity
            Not Before: Sep 16 05:05:11 2025 GMT
            Not After : Sep 18 05:05:11 2025 GMT
        Subject: CN=68c8f008-3af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:24:3b:d0:88:fb:49:df:63:7a:2e:c4:a0:
                    5b:ab:4f:a2:97:8c:2c:2a:3a:e0:0a:46:0a:b3:01:
                    3d:36:80:c0:24:8c:39:c4:b8:8d:76:bb:6e:72:37:
                    d6:ab:ab:fd:e1:b5:ff:9f:36:6b:6c:65:98:c1:59:
                    b2:72:58:d3:73:10:d2:a7:4b:a0:9d:c5:0f:98:a3:
                    c3:16:35:9b:21:cf:92:2e:7d:ca:51:19:8a:2f:56:
                    f0:16:88:80:64:17:34:6f:78:d8:3a:a3:cc:03:e1:
                    ba:80:b9:df:7e:31:30:bc:bc:ef:43:ce:5c:bb:69:
                    75:a6:a6:c4:f5:8d:80:c0:08:89:85:21:ed:21:f4:
                    ab:6d:3d:a6:ca:7f:7e:29:68:43:7d:75:94:5f:f0:
                    fb:0c:04:dc:80:82:fe:22:4f:1c:ca:1b:b5:0d:41:
                    19:d1:91:02:39:71:6b:16:f8:14:24:2a:a5:8d:40:
                    33:f0:23:83:36:c8:74:78:c6:eb:c5:91:e4:3a:26:
                    20:41:a4:97:a6:ba:47:09:3d:bc:87:f8:9e:17:00:
                    83:3a:fb:e7:ed:75:ef:16:8e:41:8d:d2:c0:34:37:
                    aa:13:33:c9:80:51:25:d5:0b:fc:07:ba:3e:0a:6b:
                    b7:26:8b:74:40:e1:fe:3d:1a:93:1c:37:45:00:3a:
                    30:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:89:D6:0B:59:30:93:A9:D2:38:6D:CA:65:9A:56:1E:FD:79:AB:E8
            X509v3 Authority Key Identifier:
                keyid:E4:F7:E4:A4:1B:A2:DF:E1:A4:9A:DC:36:34:CC:F0:79:35:E9:21:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c6:90:c2:df:d6:3c:81:8b:ee:d1:e6:66:16:01:ba:e2:65:
         a1:9a:e7:54:25:5d:c6:13:9a:bf:18:97:74:48:ea:49:98:f4:
         85:11:a3:e9:7c:ce:aa:88:f1:9a:12:93:72:90:b9:86:47:40:
         4b:da:15:7a:45:07:8c:65:07:db:14:d4:79:8a:89:9a:2b:e4:
         33:12:8d:94:86:1e:99:86:34:0c:8a:bf:1a:86:75:1b:d0:33:
         8c:e0:5f:19:eb:f3:0e:96:6c:19:61:28:e0:1e:28:a9:bc:bf:
         1a:ef:fd:4b:e9:2f:cd:68:25:f8:08:cc:a2:9b:f5:83:43:46:
         4c:33:96:63:d9:ac:65:a3:22:c1:30:e7:b1:c7:c5:c8:4c:d4:
         87:66:75:39:9f:77:85:31:69:d9:9c:dd:52:21:99:d3:55:1e:
         52:a4:26:15:c3:95:af:f4:91:88:38:21:c1:49:62:42:99:ab:
         64:73:a7:14:36:46:b9:fc:82:27:25:b7:75:ab:da:0e:b3:51:
         f9:1e:f5:01:ad:15:13:0c:1c:52:22:bc:e2:3f:b0:b9:6c:dc:
         7f:36:fd:c8:e9:e1:1e:11:75:de:29:78:f4:78:8f:a9:0b:63:
         2b:76:1b:76:ca:ce:e5:16:26:11:3b:4e:b1:4c:f2:5c:65:bf:
         77:ae:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:43:04 2025 by rpki-client