Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
File:                     iyncQT61Ar1t3qMGRh4aehCExfY.mft (raw, json)
Hash identifier:          xn+HMvFzcHEG4IIhkXkkMAYZKOd8pH8D7xt1NfV8wiU=
Subject key identifier:   C4:6C:B4:F8:80:D5:34:C3:B3:81:6A:2C:CB:41:68:18:0C:5F:D8:B7
Authority key identifier: 8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
Certificate issuer:       /CN=F3696E5FAR/serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
Certificate serial:       0462
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
Manifest number:          0460
Signing time:             Sun 27 Jul 2025 03:09:07 +0000
Manifest this update:     Sun 27 Jul 2025 03:09:07 +0000
Manifest next update:     Tue 29 Jul 2025 03:09:07 +0000
Files and hashes:         1: iyncQT61Ar1t3qMGRh4aehCExfY.crl (hash: PuNlMsbWeP+z19BhM5qdd17dPDAB75JH8ZkmuoPNhfc=)
                          2: 526F2A62732611EEA96ED8714AD9E6FC.roa (hash: Ukkb5AVQsO1Gjuu3k0PEd18RL/gRcbSRynh/B4Aa3tQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                          rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1122 (0x462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAR, serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
        Validity
            Not Before: Jul 27 03:09:07 2025 GMT
            Not After : Jul 29 03:09:07 2025 GMT
        Subject: CN=68859853-c49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6e:38:4a:d1:86:28:35:a1:1b:e9:47:eb:0f:
                    22:bc:21:e0:16:70:1d:ec:c7:ac:ab:38:dd:38:94:
                    8e:21:eb:7a:59:00:57:51:bd:ce:3f:d1:18:9e:fc:
                    13:42:f5:56:f9:24:d1:87:cb:66:2c:b0:4e:aa:26:
                    71:ee:d3:2d:ef:ce:76:78:9d:41:a1:c8:51:ca:a5:
                    63:77:33:05:76:ed:9c:c1:80:72:cc:b0:ad:35:29:
                    7f:c2:8a:3a:8c:fc:f6:9d:f6:0f:a9:95:9b:d6:c2:
                    64:77:f3:2a:c6:08:7f:7b:d5:63:53:c1:1e:e8:7e:
                    d2:6d:09:d6:91:d4:bf:f5:77:54:7b:25:cf:6a:09:
                    01:65:6b:35:17:e1:5e:29:e7:03:58:fc:7d:2f:6d:
                    74:eb:20:a3:7f:6c:92:41:d5:1a:6b:4e:38:f6:77:
                    89:c9:7a:0b:22:cc:72:5c:4c:57:28:4f:ca:13:07:
                    ee:ae:68:74:8e:2a:0f:65:1f:d9:7d:22:7b:d6:d6:
                    d3:f0:63:83:d2:03:f2:7b:97:ac:0d:9e:df:88:10:
                    59:c5:c8:38:69:a2:d0:71:a0:8c:14:42:a3:7b:e6:
                    44:95:18:30:9c:c0:e2:0a:58:27:f7:32:fe:83:49:
                    87:0c:16:a6:6b:0c:c7:4c:34:11:fd:8c:10:a2:1a:
                    99:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6C:B4:F8:80:D5:34:C3:B3:81:6A:2C:CB:41:68:18:0C:5F:D8:B7
            X509v3 Authority Key Identifier:
                keyid:8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6a:24:87:a0:9a:2c:7a:76:8e:a7:5c:79:60:4a:bc:6e:32:
         55:75:2b:68:9f:3c:5b:28:de:5f:96:9e:08:1f:0a:ed:97:25:
         67:fe:1e:20:f5:dc:48:ae:cc:8a:47:99:a2:ec:de:86:1d:cd:
         60:84:3c:bc:0d:06:fd:0c:93:9f:61:29:f3:d3:76:b6:34:e0:
         e3:2c:e0:77:4a:74:e8:0f:5b:c4:f6:7b:68:69:05:0f:7d:c4:
         e6:71:a7:be:95:75:94:60:59:10:f5:7f:46:d2:e9:3d:38:1c:
         c0:64:e1:25:37:99:7d:b5:76:bd:a5:b9:00:b8:8f:55:ee:40:
         2c:61:57:83:3e:61:e7:60:0a:53:f0:5a:7b:64:ba:2a:6e:e0:
         0e:12:a8:0b:ae:70:da:80:2d:16:fb:a7:8b:b1:7c:91:27:1c:
         4d:75:da:8a:e3:d2:07:44:3c:89:03:ab:c8:bb:16:0d:0c:84:
         3a:f3:14:0e:0a:07:c6:2a:f3:15:d3:6e:81:e3:cd:55:cd:da:
         11:0d:92:05:d5:4e:55:18:0a:48:c5:4a:32:f2:3c:81:e0:b0:
         ac:b4:7e:11:15:09:32:b1:ab:67:27:12:7d:72:81:95:d3:c3:
         51:12:26:54:77:8d:e5:d5:38:ac:53:6f:5b:70:cf:01:2d:c4:
         17:b5:45:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:35:28 2025 by rpki-client