Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
File:                     DjU23jQviMVeSslMS36nCgwn6aE.mft (raw, json)
Hash identifier:          fPdW913lReG6ky8wSzyPH3BcSowWY9CDWnYmiasLmaM=
Subject key identifier:   3C:00:A1:7F:F4:39:72:2B:F2:4E:19:5C:17:0B:30:D8:E0:39:28:3E
Authority key identifier: 0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1
Certificate issuer:       /CN=F36A1CEFAR/serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
Certificate serial:       05EA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
Manifest number:          05E8
Signing time:             Thu 31 Jul 2025 02:30:45 +0000
Manifest this update:     Thu 31 Jul 2025 02:30:45 +0000
Manifest next update:     Sat 02 Aug 2025 02:30:44 +0000
Files and hashes:         1: DjU23jQviMVeSslMS36nCgwn6aE.crl (hash: wyix2RZc54Q+O9du2FiQGrKjXm1XaBhW7Ef82DMgaaM=)
                          2: A6E483ACF13D11EBB28E971FD8A014CE.roa (hash: tXqfjeHuKCyrjlrfXizxneaHbdNneJ3cppKugGAFdHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
                          rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514 (0x5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAR, serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
        Validity
            Not Before: Jul 31 02:30:45 2025 GMT
            Not After : Aug  2 02:30:44 2025 GMT
        Subject: CN=688ad555-ea46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:62:16:77:d4:40:78:55:ef:b3:ff:01:a3:8c:
                    56:a8:2c:30:91:66:a7:45:e9:59:02:34:12:5f:bf:
                    8d:6a:3e:ca:f5:1a:14:1f:22:43:5e:4d:87:96:9d:
                    40:00:6b:71:18:59:38:2a:94:36:e9:16:aa:54:37:
                    22:5b:4c:a7:b7:95:90:d3:79:36:1d:d9:58:df:be:
                    6b:af:48:f7:22:da:e2:ec:0d:f3:1c:76:1d:1b:fe:
                    af:d1:c3:e8:1f:c9:13:2c:e2:38:1e:89:ea:14:1f:
                    14:0a:73:5e:81:bb:60:fb:30:55:8a:e4:91:fb:c4:
                    5a:1c:65:fa:6d:b5:f1:7f:a0:98:56:2f:79:e5:74:
                    8b:f5:d2:66:ad:4a:8d:76:e0:d8:6f:1d:14:7d:1d:
                    f3:92:28:4b:a7:74:62:7e:c7:af:40:88:09:b7:17:
                    e9:e1:e4:67:85:56:25:ab:b0:50:cf:52:66:d7:cc:
                    e8:fa:7d:51:ee:67:ab:4d:71:61:37:46:54:d2:6d:
                    d7:98:f6:17:86:50:c2:ea:91:87:f2:1b:24:bc:bf:
                    4b:f2:6b:1a:74:4d:1d:e0:29:09:45:30:0f:a8:21:
                    d3:9d:c4:0b:ad:bc:3c:1d:50:4d:3e:c1:3c:b5:13:
                    4b:0d:3e:19:d1:bc:0c:4f:10:27:2a:e7:5e:89:02:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:00:A1:7F:F4:39:72:2B:F2:4E:19:5C:17:0B:30:D8:E0:39:28:3E
            X509v3 Authority Key Identifier:
                keyid:0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a6:8d:a7:79:86:11:93:fa:3c:e0:c6:c3:8a:b0:f0:b7:03:
         28:be:a2:31:1d:6c:0f:15:0b:45:5e:cf:ba:ae:55:b7:08:6b:
         d7:08:25:ef:8d:bd:e0:6d:62:a8:34:11:59:8a:c8:95:12:5f:
         e7:c0:0b:38:fe:da:a4:1c:54:0e:89:1e:ee:15:11:9d:f9:dd:
         35:9a:e1:1b:dc:b7:ba:21:34:4c:25:f6:43:25:10:75:cb:35:
         66:ab:bc:7f:33:25:5f:0b:93:49:89:60:3a:2e:c4:56:87:fa:
         ef:bc:63:0a:1d:ac:fa:8f:33:ee:d9:ad:d4:64:44:4b:c3:c3:
         71:4f:14:b9:8d:e2:66:5e:0f:43:0e:13:a5:4f:61:a9:c6:22:
         3a:21:87:bc:58:88:d7:9f:4c:8f:cc:b7:f1:a1:4c:10:a9:a2:
         85:87:b3:08:b1:72:ca:3a:b2:c2:68:e9:97:3a:21:66:aa:30:
         d4:28:d0:df:f7:5a:da:89:55:96:2f:a1:3d:05:02:4d:ea:e2:
         38:a3:43:09:66:53:c6:d9:88:14:bc:d7:b0:97:a8:3c:9d:a0:
         cd:63:ea:a9:03:cb:14:9c:75:91:8b:c9:6b:11:d5:f4:fa:26:
         ab:ce:f5:e4:ad:41:75:24:a5:6d:38:a1:2f:ff:8a:c2:43:cc:
         e8:3a:25:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:43:23 2025 by rpki-client