Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
File:                     iyncQT61Ar1t3qMGRh4aehCExfY.mft (raw, json)
Hash identifier:          0E+zm+9KNeJOL4pAEVxSgAHc+yBm7e7aAQTeVEcU5d8=
Subject key identifier:   B6:76:AF:B7:10:25:04:57:E3:A1:9F:F0:11:DE:D6:6B:85:76:8D:E0
Authority key identifier: 8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
Certificate issuer:       /CN=F3696E5FAR/serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
Certificate serial:       0495
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
Manifest number:          0493
Signing time:             Tue 16 Sep 2025 02:56:33 +0000
Manifest this update:     Tue 16 Sep 2025 02:56:32 +0000
Manifest next update:     Thu 18 Sep 2025 02:56:32 +0000
Files and hashes:         1: iyncQT61Ar1t3qMGRh4aehCExfY.crl (hash: l26aU16ps32wZ7+V8x0H/bcSbshzbdUD3Lyxf0uIsfw=)
                          2: 526F2A62732611EEA96ED8714AD9E6FC.roa (hash: Ukkb5AVQsO1Gjuu3k0PEd18RL/gRcbSRynh/B4Aa3tQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                          rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173 (0x495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAR, serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
        Validity
            Not Before: Sep 16 02:56:32 2025 GMT
            Not After : Sep 18 02:56:32 2025 GMT
        Subject: CN=68c8d1e1-581e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:63:92:a0:4e:39:6e:b6:78:a9:2d:d0:4d:
                    11:4c:75:6c:79:90:8c:c7:4f:56:6b:32:5b:2e:99:
                    03:ea:5f:0a:ea:91:8b:a7:81:39:f5:49:9b:b7:1a:
                    b9:77:d7:17:f1:86:3a:cb:c0:49:79:86:47:24:a3:
                    94:7e:28:93:c7:96:d5:6c:0e:64:bc:eb:f5:39:7a:
                    12:36:a8:01:be:15:b9:9a:64:2d:8d:2f:b4:76:8b:
                    83:ab:ac:20:38:37:16:71:64:09:82:d7:c4:c4:59:
                    bb:26:53:e2:fd:d0:1f:21:ed:52:6d:05:96:64:ef:
                    07:f4:4e:8c:fd:53:c4:ca:73:be:19:35:55:34:0f:
                    ac:ca:39:ee:6b:ea:05:ff:ed:e6:73:83:b0:3f:40:
                    2f:a2:ed:37:83:d9:2f:b5:cb:3d:53:36:87:eb:05:
                    bc:d0:34:f0:4f:0f:c4:49:48:6f:d7:a0:b1:1f:b6:
                    18:34:11:bc:76:6d:aa:63:93:f6:a2:d9:08:00:8a:
                    5c:d3:40:9b:8b:60:1d:bb:97:10:9d:99:d7:75:3a:
                    67:af:8f:b8:97:34:8a:a2:10:bb:a2:b8:89:27:b4:
                    ee:5c:bb:18:5a:00:b2:af:bf:b5:e9:0a:0b:5a:14:
                    4b:82:75:7c:f9:01:2e:a0:8c:31:3e:2a:c6:0d:df:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:76:AF:B7:10:25:04:57:E3:A1:9F:F0:11:DE:D6:6B:85:76:8D:E0
            X509v3 Authority Key Identifier:
                keyid:8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:37:6e:42:bb:ed:84:25:f1:76:29:95:62:df:e1:0d:46:ee:
         33:ec:a4:29:91:91:5a:4a:df:e1:7d:04:3b:f9:23:54:ce:49:
         c4:fa:13:0c:3a:e2:f8:2a:8a:7a:7c:bd:fe:5d:15:bd:fa:3d:
         d1:66:e3:ad:44:9d:3c:9d:a7:ff:6f:78:6a:18:10:3d:5d:6b:
         78:c2:f3:ba:97:1b:97:5b:23:ab:0f:0f:c6:1b:a3:9c:47:76:
         5f:79:e8:16:28:4e:27:33:87:4e:3e:4d:b1:9b:26:f8:23:c1:
         94:fe:37:75:79:15:41:56:74:16:93:dd:fb:d0:ea:c2:80:d2:
         35:8c:13:ed:8e:f5:ea:e0:92:88:07:53:ea:72:94:e7:b7:0b:
         6f:7e:e6:53:56:cc:35:89:74:75:c4:d5:7e:c2:bc:21:63:f3:
         53:ec:22:29:f8:d3:f6:52:1f:a6:71:7a:b9:4e:d7:9d:a9:14:
         df:ba:3d:d2:8a:9d:9f:df:8e:9e:86:16:33:cc:e0:50:e4:50:
         67:52:ec:a1:bb:7d:a1:af:ba:50:b6:3d:07:44:e6:8f:55:36:
         38:63:50:cd:2c:a9:d8:03:19:db:8e:2a:d6:af:58:39:d9:7f:
         ab:27:e8:26:ef:ea:c2:7e:f3:52:2a:43:7e:2f:e6:c7:8d:f1:
         09:db:6c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:46:26 2025 by rpki-client