Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
File:                     0sTzVYe07S0EZPKfkswmt10TiZE.mft (raw, json)
Hash identifier:          vB96mB1dgHBxbCxRdcEeXhe/m+D5C92zh9a2hQ9pqBU=
Subject key identifier:   45:04:00:B6:24:BC:64:61:3D:C5:94:A2:2D:AE:0E:F5:DF:74:B8:F5
Authority key identifier: D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91
Certificate issuer:       /CN=F369859BAR/serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
Certificate serial:       01DE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
Manifest number:          01DE
Signing time:             Tue 16 Sep 2025 04:16:28 +0000
Manifest this update:     Tue 16 Sep 2025 04:16:27 +0000
Manifest next update:     Thu 18 Sep 2025 04:16:27 +0000
Files and hashes:         1: 0sTzVYe07S0EZPKfkswmt10TiZE.crl (hash: fEVC4WINgQnbh6lXpmD8sPe1GPsV2uWH576F3zznvS0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                          rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369859BAR, serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
        Validity
            Not Before: Sep 16 04:16:27 2025 GMT
            Not After : Sep 18 04:16:27 2025 GMT
        Subject: CN=68c8e49c-2775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:45:18:e3:ec:e8:7b:90:43:78:41:f5:d5:
                    4f:97:89:96:bd:b0:02:b0:bf:c8:cd:2e:7b:9f:92:
                    27:d9:be:fe:b0:9e:64:22:9d:bc:e2:9b:0f:d0:dd:
                    3c:7b:62:6a:58:b6:b8:75:34:34:71:44:06:02:69:
                    e0:50:db:a6:a7:3d:b5:28:f0:6b:bc:cf:0c:b9:c4:
                    a1:73:99:ae:43:67:9f:73:12:9e:4b:eb:a5:f3:b8:
                    a1:f0:26:b5:7b:de:57:48:bc:08:ed:ee:14:fb:15:
                    45:7e:2a:40:62:7e:f1:94:93:76:94:83:db:9f:6c:
                    85:21:70:12:1e:cf:90:24:ca:5a:97:79:61:e1:e7:
                    02:13:b0:70:8c:0f:94:a1:d5:7a:bb:e5:8b:36:66:
                    8c:01:f9:bd:b2:23:ab:fa:7a:f6:19:e6:87:f0:03:
                    91:d5:2d:fe:bb:44:c6:74:3a:c3:ca:49:f5:24:e3:
                    e6:66:e2:92:4f:de:66:03:5d:77:58:19:f4:30:9d:
                    68:84:be:39:0b:ed:5e:08:c4:6e:f9:5a:40:22:99:
                    eb:71:94:41:dc:ce:f2:6c:ec:b4:9c:ff:49:b1:48:
                    ff:56:e7:83:b7:6c:12:82:f0:0b:ed:cc:f7:9d:8d:
                    7b:01:7d:b3:2f:50:5e:1e:39:90:ba:29:94:4b:e5:
                    7d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:04:00:B6:24:BC:64:61:3D:C5:94:A2:2D:AE:0E:F5:DF:74:B8:F5
            X509v3 Authority Key Identifier:
                keyid:D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:07:0f:eb:c0:8e:20:38:8a:de:57:57:60:c4:df:22:41:07:
         22:2b:85:e1:8a:93:78:6a:47:0e:ea:28:bc:77:54:e9:8b:42:
         aa:c0:10:21:15:d0:b8:ff:53:7d:aa:73:81:bb:bf:2e:63:00:
         c4:c8:c8:8b:9b:0a:30:61:80:c9:b5:ac:2a:34:b1:12:6d:ad:
         2d:49:01:54:80:e6:62:da:66:d3:27:2a:35:d8:4d:b5:04:4f:
         43:41:e8:ca:ad:e7:d5:44:ba:0d:7a:8a:14:a4:6b:12:77:03:
         ed:0e:c5:c8:14:72:74:ed:e5:47:64:0b:f8:38:97:3c:62:0b:
         1c:d9:30:b0:3e:82:87:6a:c9:b0:23:3b:01:f6:2b:2f:63:63:
         b4:ce:cd:d2:94:b7:c7:d5:ca:26:6f:76:fe:99:c0:33:f2:3e:
         fb:09:a3:6b:56:c5:83:57:76:48:3a:26:df:64:d8:e7:08:f3:
         64:3c:85:df:5c:5d:da:c2:39:be:bf:65:da:63:74:43:25:54:
         21:52:bb:34:9f:76:69:92:b2:5d:19:b1:fa:f9:c2:81:59:cc:
         83:50:7c:71:1d:7c:72:dc:4a:a2:a4:9e:52:13:41:ca:7c:b6:
         0d:b5:d6:15:25:8b:16:b5:8e:0b:3c:7e:a2:23:b0:68:ef:51:
         2e:b5:db:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:11:05 2025 by rpki-client