Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
File:                     hursQpTfunBFqIZC6d_EVRs0wlU.mft (raw, json)
Hash identifier:          g51svhbc4s4Vif59wvgHsBAWzmaF74FEuDThh9ZOlFk=
Subject key identifier:   6B:72:04:D0:0D:BA:26:7B:BB:E8:9B:3F:A7:99:D0:F1:06:B2:73:22
Authority key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Certificate issuer:       /CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Certificate serial:       08F2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
Manifest number:          08E5
Signing time:             Thu 11 Sep 2025 01:34:34 +0000
Manifest this update:     Thu 11 Sep 2025 01:34:33 +0000
Manifest next update:     Sat 13 Sep 2025 01:34:33 +0000
Files and hashes:         1: hursQpTfunBFqIZC6d_EVRs0wlU.crl (hash: PRD5HKhedAIZOJLf1yROXZ0/tsilfPlr1Jl44Fz9w+w=)
                          2: 79F59A648E6611EBBC39876CF8AEA228.roa (hash: 23hasVT7STzhojJmCnzWqlWjP/WJmmjWHiydYYblzCA=)
                          3: E3CC92B2AB1811EF86C7F479762E951A.roa (hash: TFsOPlhZpWRBJYJKBHhEjMZSgDMfyDlwRle6Xdkgtls=)
                          4: D2F1A5928E6411EBBC748B6AF8AEA228.roa (hash: 6qK0G9UDQpIN5VB9HAdPfGyjLR6yeZQoNvVlRbOIFCk=)
                          5: 3F03153416A911EFA217550F017001B1.roa (hash: 9/pgGRkm3NQotfShqK62IqS8JeOjMdrxiB5oVZ+s0Go=)
                          6: D1CB5D328E6611EB8E50DC6CF8AEA228.roa (hash: Uj+iO4kxeUkmUkuThovmvQFW6hvGQ4iYoLoY2th9wkk=)
                          7: 2A782EBC8E6511EBBA24DF6AF8AEA228.roa (hash: yGZ6SnXS1RSRZj/wE1QJtTRTtRj6tcY4vFXhT5iHrl4=)
                          8: 97E367AE8E6611EB8103A46CF8AEA228.roa (hash: e2XQQBe/+KWcM7cIO5S9ibGFcKgcrbxG4dVNAASJpqI=)
                          9: A15549308E6411EBA8883A6AF8AEA228.roa (hash: rMD9Bdkw1CGzfMpgpTrn426f5jHiNnuNNjjZcqe2kgo=)
                          10: 028AE0848E6511EB9F7DB66AF8AEA228.roa (hash: 0qPx7Dwu8RjdR4H81YDiJJ6f5FFJ4STm+gTVCcpfY+w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                          rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Sep 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2290 (0x8f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAR, serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
        Validity
            Not Before: Sep 11 01:34:33 2025 GMT
            Not After : Sep 13 01:34:33 2025 GMT
        Subject: CN=68c2272a-33b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:5a:a5:cf:52:9b:af:49:4f:20:98:50:87:
                    f5:53:fd:12:a5:c4:70:c1:81:54:5e:5a:dd:32:10:
                    a1:28:79:45:0d:40:6d:c7:31:6d:51:5c:1e:16:16:
                    d1:20:7f:a0:41:05:dd:39:66:f1:ab:0f:c4:fa:9e:
                    03:cf:ce:a5:02:6f:27:8f:75:da:72:11:2b:20:36:
                    c0:9b:a8:6d:de:3b:8b:14:72:28:cb:35:2a:a9:75:
                    42:ff:d2:e6:f9:a9:14:5f:86:5e:3b:cc:45:08:62:
                    51:08:f7:70:d7:ee:b2:7e:e2:56:98:82:3f:3d:c1:
                    68:71:31:69:28:2a:d9:c4:0e:dc:95:e3:63:c8:61:
                    bb:6a:a8:22:a2:47:d9:fd:94:b8:22:a0:14:8a:70:
                    82:a0:b3:83:1f:7c:be:2b:28:aa:a4:30:be:0d:1a:
                    90:97:9d:8c:5c:b7:af:b5:88:5e:50:68:63:0d:89:
                    83:ba:31:52:e7:f8:66:d1:34:97:15:3a:b0:41:af:
                    e6:e4:f7:05:bc:13:5f:53:bd:c0:f5:b9:76:e0:f3:
                    22:d8:40:29:c0:ad:4d:a9:16:bc:ca:4c:d1:eb:5d:
                    b0:67:e0:c3:d2:c7:1c:4f:b4:e6:62:72:24:dc:59:
                    9d:9b:f3:ff:7b:ed:bf:49:86:27:ed:e7:55:57:7c:
                    65:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:72:04:D0:0D:BA:26:7B:BB:E8:9B:3F:A7:99:D0:F1:06:B2:73:22
            X509v3 Authority Key Identifier:
                keyid:86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:f8:cd:01:5e:a5:ae:57:be:9a:54:7e:b8:bf:62:00:f7:d8:
         3e:b2:c4:74:42:93:b1:ce:14:f8:14:8d:cb:1f:fc:47:d7:90:
         f6:60:96:ed:f3:30:5f:f8:82:e3:36:b8:c1:60:8b:8b:a8:8b:
         3f:b0:9e:2e:96:75:e7:24:65:1b:87:bc:83:b4:29:19:a9:02:
         34:a7:83:64:f0:4b:ac:07:3b:ad:e2:e6:a0:ed:13:00:12:03:
         be:4a:ff:30:72:de:56:2c:02:5a:00:3c:20:ff:7c:1f:15:40:
         c6:eb:f2:88:c8:6b:4c:4d:a9:41:44:38:69:43:83:2d:a4:2a:
         cb:e5:a4:df:42:02:e9:1c:12:de:f7:15:32:55:f4:5f:1d:09:
         d5:79:10:76:78:83:d9:b7:8e:7b:1d:b0:03:a2:b8:d6:95:2e:
         70:f3:df:36:34:c9:a1:79:1e:f0:5b:20:42:72:72:73:a7:75:
         5d:bc:5e:f5:71:2a:44:92:bb:b5:bb:44:f8:f6:a4:24:ef:83:
         d7:1e:7e:1f:39:f7:96:dc:a9:01:27:c7:45:96:71:13:9a:e8:
         6d:42:90:11:17:5b:f1:d2:8a:8f:60:9c:ac:a3:1a:ac:33:45:
         0e:70:58:1a:76:98:1b:ee:c6:4e:55:3d:5a:39:d0:db:ca:fa:
         80:0b:e0:51
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODU4OEVBUjExMC8GA1UEBRMoODZFQUVDNDI5NERGQkE3MDQ1QTg4NjQyRTlERkM0
NTUxQjM0QzI1NTAeFw0yNTA5MTEwMTM0MzNaFw0yNTA5MTMwMTM0MzNaMBgxFjAU
BgNVBAMTDTY4YzIyNzJhLTMzYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbDFqlz1Kbr0lPIJhQh/VT/RKlxHDBgVReWt0yEKEoeUUNQG3HMW1RXB4W
FtEgf6BBBd05ZvGrD8T6ngPPzqUCbyePddpyESsgNsCbqG3eO4sUcijLNSqpdUL/
0ub5qRRfhl47zEUIYlEI93DX7rJ+4laYgj89wWhxMWkoKtnEDtyV42PIYbtqqCKi
R9n9lLgioBSKcIKgs4MffL4rKKqkML4NGpCXnYxct6+1iF5QaGMNiYO6MVLn+GbR
NJcVOrBBr+bk9wW8E19TvcD1uXbg8yLYQCnArU2pFrzKTNHrXbBn4MPSxxxPtOZi
ciTcWZ2b8/977b9Jhift51VXfGVlAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUa3IE
0A26Jnu76Js/p5nQ8QaycyIwHwYDVR0jBBgwFoAUhursQpTfunBFqIZC6d/EVRs0
wlUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg1ODhFL0I1RjQyNTQwQ0IyRjExRTlBNjI5MjkyN0Y4QUVBMjI4L2h1cnNR
cFRmdW5CRnFJWkM2ZF9FVlJzMHdsVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2h1cnNRcFRmdW5CRnFJWkM2ZF9FVlJzMHdsVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODU4OEUvQjVGNDI1NDBDQjJGMTFFOUE2MjkyOTI3RjhBRUEy
MjgvaHVyc1FwVGZ1bkJGcUlaQzZkX0VWUnMwd2xVLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC9+M0BXqWuV76aVH64v2IA99g+ssR0QpOx
zhT4FI3LH/xH15D2YJbt8zBf+ILjNrjBYIuLqIs/sJ4ulnXnJGUbh7yDtCkZqQI0
p4Nk8EusBzut4uag7RMAEgO+Sv8wct5WLAJaADwg/3wfFUDG6/KIyGtMTalBRDhp
Q4MtpCrL5aTfQgLpHBLe9xUyVfRfHQnVeRB2eIPZt457HbADorjWlS5w8982NMmh
eR7wWyBCcnJzp3VdvF71cSpEkru1u0T49qQk74PXHn4fOfeW3KkBJ8dFlnETmuht
QpARF1vx0oqPYJysoxqsM0UOcFgadpgb7sZOVT1aOdDbyvqAC+BR
-----END CERTIFICATE-----
Generated at Thu Sep 11 19:25:11 2025 by rpki-client