Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
File:                     xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft (raw, json)
Hash identifier:          cU4ShNztLP21eX2kR3HC6qGQk5MlKZwdWqDSuGyEHbA=
Subject key identifier:   F7:3F:39:D9:41:11:4C:F7:53:62:7F:A4:AB:0C:C7:32:CD:15:2B:99
Authority key identifier: C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4
Certificate issuer:       /CN=F3695A2AAR/serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
Certificate serial:       022D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
Manifest number:          022B
Signing time:             Sun 27 Jul 2025 04:23:04 +0000
Manifest this update:     Sun 27 Jul 2025 04:23:03 +0000
Manifest next update:     Tue 29 Jul 2025 04:23:03 +0000
Files and hashes:         1: xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl (hash: fTt5da4Ov4TzXSzcL0yzr32j1WTypI15ru6LLx6/ntc=)
                          2: 6FFF2C08413411EFA7FB5A60762E951A.roa (hash: iN5LnQR83/zdvQSHnZNsxLnJVE/qt/FcoEST3TDCqcY=)
                          3: A98258D0404C11EFA55BD559762E951A.roa (hash: FlBCIPwQ4YkejGviFEaWQJchhPbjvvwNsjpap4nCAeQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                          rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAR, serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
        Validity
            Not Before: Jul 27 04:23:03 2025 GMT
            Not After : Jul 29 04:23:03 2025 GMT
        Subject: CN=6885a9a8-3c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:97:7f:e3:32:6a:a6:7b:3e:bf:96:06:46:
                    fb:2f:3e:9d:31:73:23:7c:49:78:d8:0c:65:3d:b5:
                    22:e7:0d:60:3d:54:a3:6a:a6:b1:ae:06:4e:70:7c:
                    19:ca:a0:1e:cb:61:cf:a1:86:16:c1:50:98:9b:42:
                    40:24:0f:17:5a:40:6d:c1:1b:ab:1b:45:60:15:4f:
                    b0:46:c5:74:a1:b6:b6:86:ba:d1:86:cf:67:a3:28:
                    8d:28:64:f1:9a:2f:b9:b3:f7:41:01:af:18:12:44:
                    33:39:e5:c8:93:09:e6:43:e7:1a:0d:b6:10:e4:47:
                    e6:57:f8:f2:28:13:1c:8e:24:3f:6a:f1:61:a1:f5:
                    9c:5b:e8:43:c3:1a:6b:78:26:e1:13:8a:1a:45:fb:
                    00:b4:fd:b0:7c:a3:4e:7e:10:5b:73:b3:33:cb:cd:
                    8e:88:cb:a6:db:c3:f7:1b:52:09:00:b0:99:60:3c:
                    c1:46:3b:89:b4:5c:99:cb:91:b3:79:43:46:8e:f3:
                    f9:13:4d:d8:99:4e:fa:d4:ab:03:b3:d1:8d:ef:52:
                    d3:67:8c:70:79:01:dc:f1:ab:da:24:9f:db:d0:fa:
                    62:f3:ad:d3:c0:3d:c1:92:c7:05:b0:43:52:fc:92:
                    1b:0a:99:93:a3:ef:81:0d:8d:f6:63:e1:e1:c8:90:
                    93:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3F:39:D9:41:11:4C:F7:53:62:7F:A4:AB:0C:C7:32:CD:15:2B:99
            X509v3 Authority Key Identifier:
                keyid:C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d1:9d:8a:5f:35:00:a0:ef:54:d8:ed:e8:6b:e1:38:7b:19:
         30:c1:4a:d3:ee:40:c2:83:02:9c:5f:74:a6:5b:59:41:16:fb:
         1a:8a:40:ba:78:9e:8b:3d:0b:e1:59:63:21:76:7d:ab:06:62:
         14:21:90:f0:ff:e3:f3:46:54:a1:89:d3:3e:63:24:19:5b:a0:
         97:a1:a3:31:a9:36:a6:7f:f0:45:75:dc:38:c6:a0:d7:e2:51:
         3c:13:03:60:d8:6c:3e:82:aa:9f:0c:35:1e:3d:33:48:9c:e3:
         be:7e:15:01:47:48:ff:f6:c7:eb:0b:40:27:1b:27:62:c5:6f:
         b5:84:97:ec:5c:31:44:ce:6f:af:2c:50:66:c4:5d:43:01:fc:
         2c:84:ee:1d:1c:8a:53:9a:94:b1:28:4a:95:bf:71:54:5c:8c:
         ec:60:cc:d6:0e:fb:6c:97:43:65:00:54:6a:ab:1d:f0:f9:60:
         1b:8d:86:a2:0b:8d:a7:ea:15:a5:6c:bc:46:3b:40:ce:70:b8:
         20:26:a8:88:f9:db:73:2e:97:70:cb:f9:fb:ef:83:f0:60:97:
         35:ea:62:d1:7f:9e:90:e9:6c:59:e0:af:59:a5:e8:6e:95:98:
         92:0c:22:55:e6:7c:f2:d7:86:f7:de:76:0b:20:57:a8:37:63:
         ce:69:48:f2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTVBMkFBUjExMC8GA1UEBRMoQzY3NkZGQ0I0MzJDNUI4NTI0MTVGQzYzQjg5NEM1
MjcwNTI5MzlBNDAeFw0yNTA3MjcwNDIzMDNaFw0yNTA3MjkwNDIzMDNaMBgxFjAU
BgNVBAMTDTY4ODVhOWE4LTNjNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9Ipd/4zJqpns+v5YGRvsvPp0xcyN8SXjYDGU9tSLnDWA9VKNqprGuBk5w
fBnKoB7LYc+hhhbBUJibQkAkDxdaQG3BG6sbRWAVT7BGxXShtraGutGGz2ejKI0o
ZPGaL7mz90EBrxgSRDM55ciTCeZD5xoNthDkR+ZX+PIoExyOJD9q8WGh9Zxb6EPD
Gmt4JuETihpF+wC0/bB8o05+EFtzszPLzY6Iy6bbw/cbUgkAsJlgPMFGO4m0XJnL
kbN5Q0aO8/kTTdiZTvrUqwOz0Y3vUtNnjHB5Adzxq9okn9vQ+mLzrdPAPcGSxwWw
Q1L8khsKmZOj74ENjfZj4eHIkJO9AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU9z85
2UERTPdTYn+kqwzHMs0VK5kwHwYDVR0jBBgwFoAUxnb/y0MsW4UkFfxjuJTFJwUp
OaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1QTJBLzhFRjUzNTdDQzQyRTExRUU5OTdBRkQ0Rjc3NTQxMkU2L3huYl95
ME1zVzRVa0ZmeGp1SlRGSndVcE9hUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3huYl95ME1zVzRVa0ZmeGp1SlRGSndVcE9hUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTVBMkEvOEVGNTM1N0NDNDJFMTFFRTk5N0FGRDRGNzc1NDEy
RTYveG5iX3kwTXNXNFVrRmZ4anVKVEZKd1VwT2FRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAW0Z2KXzUAoO9U2O3oa+E4exkwwUrT7kDC
gwKcX3SmW1lBFvsaikC6eJ6LPQvhWWMhdn2rBmIUIZDw/+PzRlShidM+YyQZW6CX
oaMxqTamf/BFddw4xqDX4lE8EwNg2Gw+gqqfDDUePTNInOO+fhUBR0j/9sfrC0An
GydixW+1hJfsXDFEzm+vLFBmxF1DAfwshO4dHIpTmpSxKEqVv3FUXIzsYMzWDvts
l0NlAFRqqx3w+WAbjYaiC42n6hWlbLxGO0DOcLggJqiI+dtzLpdwy/n774PwYJc1
6mLRf56Q6WxZ4K9ZpehulZiSDCJV5nzy14b33nYLIFeoN2POaUjy
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:23:07 2025 by rpki-client