Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
File:                     l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft (raw, json)
Hash identifier:          B5bKLYHQt0tEHoFySukXjAGd4S0Ls5/d9JZj5s97Ajs=
Subject key identifier:   FF:9F:FE:8A:5B:D1:58:35:7B:03:05:12:64:8E:C4:7D:E1:0F:06:8A
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Certificate issuer:       /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial:       064B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
Manifest number:          0649
Signing time:             Tue 16 Sep 2025 02:13:56 +0000
Manifest this update:     Tue 16 Sep 2025 02:13:55 +0000
Manifest next update:     Thu 18 Sep 2025 02:13:55 +0000
Files and hashes:         1: l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl (hash: n3eZ9iar9i2FIolUHT69lBQw+BRWGD0NNAIGj1me41w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                          rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AR, serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
        Validity
            Not Before: Sep 16 02:13:55 2025 GMT
            Not After : Sep 18 02:13:55 2025 GMT
        Subject: CN=68c8c7e4-45f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:13:20:96:6b:09:4a:87:06:ce:ab:8f:4f:
                    6f:70:0f:cf:63:22:e1:11:55:a2:0b:c2:4b:9a:4b:
                    3c:e8:6e:b9:5c:5f:e5:48:3c:ef:58:32:fb:13:6b:
                    ad:c2:17:c0:ed:64:fa:b6:4a:6a:bf:60:8f:c6:a9:
                    01:92:fe:41:7e:66:7e:ea:d3:a4:9a:38:e2:d6:c1:
                    26:55:d5:d7:f3:d6:8d:3b:45:50:3f:4a:1e:77:08:
                    e7:0d:56:18:79:02:81:29:f0:83:b9:db:87:a6:a9:
                    4f:bc:cb:00:20:09:b1:91:2e:0d:40:bc:76:7d:5f:
                    fb:ef:1c:46:3b:5a:40:c2:0e:f2:67:f6:52:2d:dc:
                    fc:95:ce:b3:0d:5c:22:6d:76:cf:11:a3:f4:ec:e8:
                    fb:42:e9:41:65:88:53:97:b7:8b:d0:e6:f0:a4:ef:
                    5a:49:3b:29:1d:28:a6:56:c3:e6:3d:c5:4b:fc:8b:
                    b3:43:c6:af:2d:e2:28:5d:72:e5:ed:9c:69:06:1c:
                    45:63:1a:a6:97:2f:f6:79:30:60:aa:6e:cd:50:3f:
                    19:03:ff:aa:5e:6d:96:9e:0e:95:c7:82:2c:40:9e:
                    e5:b0:dd:9e:1b:fd:3c:63:45:32:04:71:b6:56:51:
                    51:ad:c2:6c:0c:86:05:fb:1a:d5:5c:df:86:8b:7d:
                    2c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9F:FE:8A:5B:D1:58:35:7B:03:05:12:64:8E:C4:7D:E1:0F:06:8A
            X509v3 Authority Key Identifier:
                keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:18:b9:45:53:80:9b:5e:fb:7b:2b:be:bf:09:1c:a2:b7:df:
         b5:88:cb:50:ba:10:6c:07:c5:6b:ea:e5:07:af:5a:e0:4f:8b:
         24:cf:03:b3:ca:eb:47:58:1d:f5:6b:4a:f7:a9:4e:ea:37:2e:
         7c:5a:d2:a4:eb:9f:21:72:f6:89:b2:36:0d:96:60:2d:8f:af:
         dc:6a:5c:a6:01:ba:37:7b:29:25:87:1c:a6:8c:6b:e2:69:9a:
         3e:78:d5:d1:1a:06:16:5c:28:f3:dc:60:1b:60:44:0c:88:13:
         fe:33:69:02:70:a1:ae:14:ce:cf:37:44:3f:88:ac:0f:f5:c8:
         61:52:ae:ac:14:db:6b:80:ee:57:86:48:0c:a4:d7:06:0d:28:
         7b:04:ae:bf:81:02:5d:d8:ad:61:7e:cd:79:db:db:f6:4c:a7:
         1b:6e:46:d4:6c:d3:b5:56:dd:c7:83:71:38:81:66:fb:d0:51:
         bf:f0:15:cb:b2:3c:4d:3a:b7:d4:c9:26:7f:31:3e:15:32:df:
         e0:d3:4e:39:43:71:4c:41:42:90:f9:7d:73:01:60:97:61:89:
         dc:78:97:7f:4c:34:3e:82:e0:eb:29:40:80:c7:20:98:e3:9a:
         c8:c9:94:37:9e:89:c5:3f:ce:34:e0:ec:de:90:77:9c:59:e1:
         2c:36:99:05
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBkswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgyQTFBUjExMC8GA1UEBRMoOTc2MUEyRDI4MURCOTQ3RUZFODdFNUJBOTE1MDI3
OERCQjk4OTZFRjAeFw0yNTA5MTYwMjEzNTVaFw0yNTA5MTgwMjEzNTVaMBgxFjAU
BgNVBAMTDTY4YzhjN2U0LTQ1ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwbhMglmsJSocGzquPT29wD89jIuERVaILwkuaSzzobrlcX+VIPO9YMvsT
a63CF8DtZPq2Smq/YI/GqQGS/kF+Zn7q06SaOOLWwSZV1dfz1o07RVA/Sh53COcN
Vhh5AoEp8IO524emqU+8ywAgCbGRLg1AvHZ9X/vvHEY7WkDCDvJn9lIt3PyVzrMN
XCJtds8Ro/Ts6PtC6UFliFOXt4vQ5vCk71pJOykdKKZWw+Y9xUv8i7NDxq8t4ihd
cuXtnGkGHEVjGqaXL/Z5MGCqbs1QPxkD/6pebZaeDpXHgixAnuWw3Z4b/TxjRTIE
cbZWUVGtwmwMhgX7GtVc34aLfSxHAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU/5/+
ilvRWDV7AwUSZI7EfeEPBoowHwYDVR0jBBgwFoAUl2Gi0oHblH7+h+W6kVAnjbuY
lu8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MkExL0I2NjdCODI4QzdDNDExRUI5NzM2Qzc2OEY4QUVBMjI4L2wyR2kw
b0hibEg3LWgtVzZrVkFuamJ1WWx1OC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2wyR2kwb0hibEg3LWgtVzZrVkFuamJ1WWx1OC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODgyQTEvQjY2N0I4MjhDN0M0MTFFQjk3MzZDNzY4RjhBRUEy
MjgvbDJHaTBvSGJsSDctaC1XNmtWQW5qYnVZbHU4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnGLlFU4CbXvt7K76/CRyit9+1iMtQuhBs
B8Vr6uUHr1rgT4skzwOzyutHWB31a0r3qU7qNy58WtKk658hcvaJsjYNlmAtj6/c
alymAbo3eyklhxymjGviaZo+eNXRGgYWXCjz3GAbYEQMiBP+M2kCcKGuFM7PN0Q/
iKwP9chhUq6sFNtrgO5XhkgMpNcGDSh7BK6/gQJd2K1hfs1529v2TKcbbkbUbNO1
Vt3Hg3E4gWb70FG/8BXLsjxNOrfUySZ/MT4VMt/g0045Q3FMQUKQ+X1zAWCXYYnc
eJd/TDQ+guDrKUCAxyCY45rIyZQ3nonFP8404OzekHecWeEsNpkF
-----END CERTIFICATE-----
Generated at Tue Sep 16 18:01:33 2025 by rpki-client