Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
File:                     0sTzVYe07S0EZPKfkswmt10TiZE.mft (raw, json)
Hash identifier:          6IpD63Uhsurbgya6n48lfF+VxhL2o4dEsYYunuIPIhk=
Subject key identifier:   A1:37:2D:AD:2F:B1:73:AA:4A:40:4A:17:21:6C:5E:E6:FB:9F:39:AF
Authority key identifier: D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91
Certificate issuer:       /CN=F369859BAR/serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
Certificate serial:       01AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
Manifest number:          01AB
Signing time:             Sun 27 Jul 2025 04:38:15 +0000
Manifest this update:     Sun 27 Jul 2025 04:38:14 +0000
Manifest next update:     Tue 29 Jul 2025 04:38:14 +0000
Files and hashes:         1: 0sTzVYe07S0EZPKfkswmt10TiZE.crl (hash: fFzwAwsw6xhEV2ALRINjPIx1cAqLeTpgLqIyCKCW7JM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                          rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369859BAR, serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
        Validity
            Not Before: Jul 27 04:38:14 2025 GMT
            Not After : Jul 29 04:38:14 2025 GMT
        Subject: CN=6885ad37-8086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:67:41:4d:b6:8c:1d:24:ca:91:8a:fd:09:
                    8a:a4:07:c5:bf:e7:a3:f8:40:3d:29:4b:2c:62:10:
                    03:b2:b3:b5:a3:16:1e:20:01:b9:e7:4d:9f:6b:c9:
                    de:73:9c:b0:48:d6:25:a5:cb:e8:03:dd:2c:c8:d8:
                    72:23:81:3d:67:52:9f:f1:e1:f4:c1:21:e8:e9:03:
                    29:7e:24:23:32:99:ef:1b:f0:19:fe:ec:d4:c0:c4:
                    f1:68:5f:63:ba:44:5c:b6:d0:2b:cc:4d:6e:6c:3f:
                    b3:39:0c:32:a9:ec:12:f0:ec:19:d9:21:49:e8:24:
                    b5:59:a4:e8:b1:21:87:32:ef:65:41:76:99:db:75:
                    9f:ff:91:b3:d2:dc:86:d4:24:5a:4e:50:8b:ed:d8:
                    8d:45:6b:42:bc:c8:0a:ff:ab:2b:33:36:73:7e:35:
                    64:e1:da:90:35:2b:19:40:60:01:69:79:97:21:eb:
                    b4:4c:8b:7f:c1:a9:8e:b7:28:6f:66:8a:d8:7f:d8:
                    ab:ce:5a:ec:dc:46:72:c8:c0:67:41:b9:99:a9:b9:
                    cd:4d:ad:dd:4c:0d:aa:9e:df:79:2d:26:cc:8d:33:
                    a5:97:c0:3c:a1:ea:e2:6b:f0:1f:59:ef:a5:6d:e9:
                    29:92:13:65:a4:f1:e9:8e:6b:cb:f2:42:17:6a:56:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:37:2D:AD:2F:B1:73:AA:4A:40:4A:17:21:6C:5E:E6:FB:9F:39:AF
            X509v3 Authority Key Identifier:
                keyid:D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:70:ad:cb:eb:8e:4f:06:dd:a5:ff:fd:00:05:09:2e:11:5a:
         29:c2:cf:72:22:fc:9a:1e:94:47:f5:05:1c:5b:34:a5:22:ef:
         64:2f:57:84:cd:cf:ea:d1:96:5c:ee:fb:68:20:23:54:bc:05:
         c5:c4:dd:4b:53:5d:f2:38:ba:2c:39:d8:18:a8:85:4c:0d:72:
         96:50:68:37:79:72:53:e9:57:09:41:f1:0c:72:3c:ed:45:1c:
         6d:45:66:ad:9a:bb:9f:b1:36:96:1f:d3:d7:5a:8b:89:81:16:
         75:e4:7e:72:6d:39:dc:f0:8a:6d:22:47:db:df:05:ed:15:63:
         71:40:7c:f3:69:61:88:e7:b7:1d:38:b0:7d:99:8d:4d:f6:27:
         2a:be:53:14:cc:fc:11:2b:63:67:6e:7c:c1:a9:94:d9:5b:01:
         c8:dc:2e:38:ed:8a:b4:54:c4:3e:65:9f:4b:d2:22:0e:8c:b4:
         30:82:12:e3:18:05:a4:6b:14:e8:e3:75:c5:28:ff:fd:0d:0a:
         54:5c:d2:4f:43:f1:7e:e2:d0:69:d2:90:66:10:86:90:6c:74:
         06:ad:4a:2f:3a:d8:00:07:85:96:7e:3f:66:fb:25:5b:ca:f4:
         13:e1:46:e8:19:df:52:65:80:95:28:d1:bc:0a:a8:9a:ac:f1:
         df:42:b8:4a
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAaswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTg1OUJBUjExMC8GA1UEBRMoRDJDNEYzNTU4N0I0RUQyRDA0NjRGMjlGOTJDQzI2
Qjc1RDEzODk5MTAeFw0yNTA3MjcwNDM4MTRaFw0yNTA3MjkwNDM4MTRaMBgxFjAU
BgNVBAMTDTY4ODVhZDM3LTgwODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8b2dBTbaMHSTKkYr9CYqkB8W/56P4QD0pSyxiEAOys7WjFh4gAbnnTZ9r
yd5znLBI1iWly+gD3SzI2HIjgT1nUp/x4fTBIejpAyl+JCMyme8b8Bn+7NTAxPFo
X2O6RFy20CvMTW5sP7M5DDKp7BLw7BnZIUnoJLVZpOixIYcy72VBdpnbdZ//kbPS
3IbUJFpOUIvt2I1Fa0K8yAr/qyszNnN+NWTh2pA1KxlAYAFpeZch67RMi3/BqY63
KG9mith/2KvOWuzcRnLIwGdBuZmpuc1Nrd1MDaqe33ktJsyNM6WXwDyh6uJr8B9Z
76Vt6SmSE2Wk8emOa8vyQhdqVk/zAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUoTct
rS+xc6pKQEoXIWxe5vufOa8wHwYDVR0jBBgwFoAU0sTzVYe07S0EZPKfkswmt10T
iZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk4NTlCLzlFMUZERjlDMjQxNTExRUZBRjQwQUEzNDdEREMyNEMyLzBzVHpW
WWUwN1MwRVpQS2Zrc3dtdDEwVGlaRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzBzVHpWWWUwN1MwRVpQS2Zrc3dtdDEwVGlaRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTg1OUIvOUUxRkRGOUMyNDE1MTFFRkFGNDBBQTM0N0REQzI0
QzIvMHNUelZZZTA3UzBFWlBLZmtzd210MTBUaVpFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCdcK3L645PBt2l//0ABQkuEVopws9yIvya
HpRH9QUcWzSlIu9kL1eEzc/q0ZZc7vtoICNUvAXFxN1LU13yOLosOdgYqIVMDXKW
UGg3eXJT6VcJQfEMcjztRRxtRWatmrufsTaWH9PXWouJgRZ15H5ybTnc8IptIkfb
3wXtFWNxQHzzaWGI57cdOLB9mY1N9icqvlMUzPwRK2NnbnzBqZTZWwHI3C447Yq0
VMQ+ZZ9L0iIOjLQwghLjGAWkaxTo43XFKP/9DQpUXNJPQ/F+4tBp0pBmEIaQbHQG
rUovOtgAB4WWfj9m+yVbyvQT4UboGd9SZYCVKNG8CqiarPHfQrhK
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:13:51 2025 by rpki-client