Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft
File:                     sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft (raw, json)
Hash identifier:          AfQU3ZORXdLLrS2Z+0l5QhkzkTCl3kIWNeMNaX/f6oE=
Subject key identifier:   BE:2E:7F:EE:C7:AB:32:EB:16:A9:7E:DF:76:6D:7D:30:BD:C3:89:CB
Authority key identifier: B1:02:D3:28:DA:3A:4C:5B:41:6C:27:A8:3D:54:87:90:2D:06:38:FD
Certificate issuer:       /CN=F36A7FC6AR/serialNumber=B102D328DA3A4C5B416C27A83D5487902D0638FD
Certificate serial:       0314
Authority info access:    rsync://rpki.afrinic.net/repository/arin/sQLTKNo6TFtBbCeoPVSHkC0GOP0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft
Manifest number:          0312
Signing time:             Sat 07 Jun 2025 03:43:03 +0000
Manifest this update:     Sat 07 Jun 2025 03:43:02 +0000
Manifest next update:     Mon 09 Jun 2025 03:43:02 +0000
Files and hashes:         1: sQLTKNo6TFtBbCeoPVSHkC0GOP0.crl (hash: xhH8wpHn8O66J19Wcy/FcheLCCS2f4niMuJ1f8gFNp0=)
                          2: A486AA4E42D411F0B4F8DBDEDAE4EC9C.roa (hash: 4xKKYuuFJh/zKzeLBQTXL6axi1L1p5+TaD3uqW3PPwQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft
                          rsync://rpki.afrinic.net/repository/arin/sQLTKNo6TFtBbCeoPVSHkC0GOP0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 03:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A7FC6AR, serialNumber=B102D328DA3A4C5B416C27A83D5487902D0638FD
        Validity
            Not Before: Jun  7 03:43:02 2025 GMT
            Not After : Jun  9 03:43:02 2025 GMT
        Subject: CN=6843b547-fa65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:1c:bd:51:07:4d:de:95:fe:8a:26:c9:94:
                    20:0f:49:82:a4:4d:7c:2c:d1:08:f8:65:a5:5c:c3:
                    08:39:b2:65:f3:ca:b2:17:b1:cd:78:c3:da:aa:89:
                    63:fe:54:65:8d:64:16:6d:b9:a8:2b:24:2d:d1:74:
                    3c:71:e0:60:b5:a6:e2:60:e9:c4:99:a4:da:d3:87:
                    03:23:d6:93:6b:79:83:5b:5c:55:46:27:66:7b:44:
                    24:78:9c:c5:64:9a:69:30:31:95:18:76:4b:b5:78:
                    3d:cf:07:d4:4d:bf:ab:2b:ac:c7:7b:9f:ea:b8:37:
                    0c:16:05:55:dd:38:e7:69:8a:21:81:bb:27:ce:f4:
                    6a:04:99:c4:da:f5:9d:97:08:43:f7:94:99:30:3c:
                    95:cd:ae:a3:5b:51:30:0b:d5:d6:2b:95:92:00:8b:
                    d8:37:4e:27:ec:92:bf:da:b4:95:39:71:8a:12:9e:
                    b9:0e:74:04:e3:8a:8b:88:33:b8:83:63:ed:a5:e5:
                    c1:48:12:d6:8f:f8:b1:df:04:96:7c:9c:7d:69:02:
                    c9:45:1a:26:97:ff:81:b3:b9:10:13:ba:a5:05:ae:
                    55:4a:31:1d:10:3b:54:6b:9b:d0:ec:ed:50:99:59:
                    d5:60:44:03:7a:89:98:af:05:dd:c8:2e:99:b5:5d:
                    97:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2E:7F:EE:C7:AB:32:EB:16:A9:7E:DF:76:6D:7D:30:BD:C3:89:CB
            X509v3 Authority Key Identifier:
                keyid:B1:02:D3:28:DA:3A:4C:5B:41:6C:27:A8:3D:54:87:90:2D:06:38:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/sQLTKNo6TFtBbCeoPVSHkC0GOP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/6C0765F6EE3911EDB951826A4AD9E6FC/sQLTKNo6TFtBbCeoPVSHkC0GOP0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3a:81:9b:8b:2d:3b:a6:64:e1:71:20:a2:47:71:97:0c:36:
         c4:47:7d:27:53:41:6b:79:dd:01:40:80:4b:cb:cb:ae:e5:04:
         3b:97:a4:ee:c1:c2:13:2a:2d:09:0e:8d:68:b8:d5:16:d9:86:
         0d:5d:2f:57:4f:c7:74:98:ac:f5:81:2b:f6:9a:b5:f9:65:bf:
         c8:18:66:1a:03:3f:9e:8c:65:bb:45:63:3c:99:eb:d3:fe:9f:
         9e:5d:9b:2c:e4:91:08:bb:ef:f3:d8:52:9c:81:fa:eb:99:dc:
         77:18:78:74:e2:85:4a:db:cd:fb:80:4c:89:c6:50:90:e5:9a:
         6c:77:71:a1:0b:48:93:fd:b6:7e:ad:2f:71:b6:2c:58:00:dc:
         ec:fb:a8:a7:9f:a8:df:08:f4:8f:f1:a9:12:02:1c:f5:e7:1d:
         58:42:3d:23:f8:3d:d1:6b:17:71:9e:90:77:ab:97:8b:19:ec:
         58:3d:0f:08:5d:59:45:6d:9b:d5:ae:08:89:62:c9:51:9a:09:
         08:ef:ed:d1:7b:28:25:13:91:bc:d7:5f:41:58:3d:a3:ef:e3:
         2a:68:e2:02:9f:7d:d6:46:44:59:ac:23:cb:41:f9:cf:53:40:
         8d:a7:aa:07:ab:53:b0:bb:95:de:46:6a:8c:76:a3:55:e9:4d:
         4f:72:24:5d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAxQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTdGQzZBUjExMC8GA1UEBRMoQjEwMkQzMjhEQTNBNEM1QjQxNkMyN0E4M0Q1NDg3
OTAyRDA2MzhGRDAeFw0yNTA2MDcwMzQzMDJaFw0yNTA2MDkwMzQzMDJaMBgxFjAU
BgNVBAMTDTY4NDNiNTQ3LWZhNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqTxy9UQdN3pX+iibJlCAPSYKkTXws0Qj4ZaVcwwg5smXzyrIXsc14w9qq
iWP+VGWNZBZtuagrJC3RdDxx4GC1puJg6cSZpNrThwMj1pNreYNbXFVGJ2Z7RCR4
nMVkmmkwMZUYdku1eD3PB9RNv6srrMd7n+q4NwwWBVXdOOdpiiGBuyfO9GoEmcTa
9Z2XCEP3lJkwPJXNrqNbUTAL1dYrlZIAi9g3Tifskr/atJU5cYoSnrkOdATjiouI
M7iDY+2l5cFIEtaP+LHfBJZ8nH1pAslFGiaX/4GzuRATuqUFrlVKMR0QO1Rrm9Ds
7VCZWdVgRAN6iZivBd3ILpm1XZdHAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUvi5/
7serMusWqX7fdm19ML3DicswHwYDVR0jBBgwFoAUsQLTKNo6TFtBbCeoPVSHkC0G
OP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE3RkM2LzZDMDc2NUY2RUUzOTExRURCOTUxODI2QTRBRDlFNkZDL3NRTFRL
Tm82VEZ0QmJDZW9QVlNIa0MwR09QMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3NRTFRLTm82VEZ0QmJDZW9QVlNIa0MwR09QMC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTdGQzYvNkMwNzY1RjZFRTM5MTFFREI5NTE4MjZBNEFEOUU2
RkMvc1FMVEtObzZURnRCYkNlb1BWU0hrQzBHT1AwLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVOoGbiy07pmThcSCiR3GXDDbER30nU0Fr
ed0BQIBLy8uu5QQ7l6TuwcITKi0JDo1ouNUW2YYNXS9XT8d0mKz1gSv2mrX5Zb/I
GGYaAz+ejGW7RWM8mevT/p+eXZss5JEIu+/z2FKcgfrrmdx3GHh04oVK2837gEyJ
xlCQ5Zpsd3GhC0iT/bZ+rS9xtixYANzs+6inn6jfCPSP8akSAhz15x1YQj0j+D3R
axdxnpB3q5eLGexYPQ8IXVlFbZvVrgiJYslRmgkI7+3ReyglE5G8119BWD2j7+Mq
aOICn33WRkRZrCPLQfnPU0CNp6oHq1Owu5XeRmqMdqNV6U1PciRd
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:19:46 2025 by rpki-client