Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
File:                     5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft (raw, json)
Hash identifier:          XKP63ax3X8Vugc4jwVcFMsdUfT/MHFO5OxeN8MEhOYc=
Subject key identifier:   69:07:8B:37:E0:7D:0F:3F:C8:09:D6:43:57:2C:50:0E:6C:CE:B0:C9
Authority key identifier: E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
Certificate issuer:       /CN=F36AA888AR/serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Certificate serial:       0902
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
Manifest number:          0901
Signing time:             Sun 27 Jul 2025 01:31:18 +0000
Manifest this update:     Sun 27 Jul 2025 01:31:17 +0000
Manifest next update:     Tue 29 Jul 2025 01:31:17 +0000
Files and hashes:         1: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl (hash: ILZOIeugSqRh+R+Nhj0AV3SA/6Ro1OK5hk8XEn47xHQ=)
                          2: 58B26BA4886211E99B31DD63F8AEA228.roa (hash: nvT/Y3DEz1TX+5D/zLT7HQfvvtuHBy4pd0aYSFdPAvg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                          rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2306 (0x902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA888AR, serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
        Validity
            Not Before: Jul 27 01:31:17 2025 GMT
            Not After : Jul 29 01:31:17 2025 GMT
        Subject: CN=68858166-e555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:42:29:98:86:85:5a:65:37:02:58:21:f1:
                    4e:8b:2f:c0:d7:dd:c1:ef:de:25:0f:2a:df:ea:c6:
                    5a:1d:92:47:0f:13:03:d3:b9:7d:5e:bc:bd:b8:59:
                    da:b1:3c:0b:23:9a:dd:4b:50:0c:9f:2d:58:ab:54:
                    1a:37:f8:a6:ac:d5:d1:cd:d3:65:04:9e:1b:0e:84:
                    a3:e1:5f:14:a9:0c:da:76:89:1b:ad:f7:f1:d4:7b:
                    11:6c:4a:74:32:d9:25:bf:fa:e0:1c:92:93:33:f8:
                    0c:ac:e6:66:c7:be:0d:16:e1:ae:d2:0f:77:45:d6:
                    fb:f4:e2:b4:88:30:c2:a5:72:56:91:bc:5f:63:75:
                    aa:ac:31:60:f0:27:b6:65:ae:20:9b:a8:4c:88:13:
                    1f:4a:10:f6:91:75:42:85:6c:8a:70:68:84:45:47:
                    31:6b:e8:e6:f1:86:af:50:9b:5e:40:53:cf:e5:9e:
                    84:4c:ca:97:73:0b:97:ff:95:45:c2:65:49:e0:00:
                    56:3b:7c:81:be:6e:40:88:c6:a8:d9:5b:d5:71:97:
                    0d:f0:78:97:12:ff:82:02:ed:c3:15:26:3d:61:c0:
                    74:f7:2e:6b:75:7d:c0:56:dc:7f:b4:cf:de:6a:7f:
                    a7:70:c6:61:95:5a:e2:03:47:77:4c:f5:1d:0b:a3:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:07:8B:37:E0:7D:0F:3F:C8:09:D6:43:57:2C:50:0E:6C:CE:B0:C9
            X509v3 Authority Key Identifier:
                keyid:E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:14:9b:e9:4a:39:36:69:82:92:0e:64:8a:ce:24:85:7d:ec:
         0c:3f:7e:1f:61:ba:02:5a:80:77:5e:c1:11:8c:50:7c:a1:b7:
         08:23:4d:6f:82:7c:27:79:93:2b:b6:43:cd:41:21:ba:17:0a:
         1c:ca:fd:f1:e9:4a:cd:0d:34:8a:fa:89:ed:9d:93:54:c8:47:
         f4:28:6a:6c:dc:32:74:1c:cd:f1:2f:b9:f7:da:fa:05:e3:c6:
         10:1b:8e:1a:f4:ec:ee:e2:83:b1:56:8e:35:06:21:9d:de:51:
         f3:2c:a1:32:6a:41:8a:dd:ca:59:72:d2:b1:55:ea:90:da:6f:
         da:5b:80:34:53:aa:d2:d3:65:7b:a0:50:f8:aa:ec:ba:70:7b:
         47:a9:47:27:82:d6:d8:b4:1f:7c:0b:c5:c5:64:13:c5:aa:18:
         3d:c7:88:39:cb:0f:00:e1:5f:b9:01:17:fd:35:57:fe:c2:dc:
         bb:69:fd:45:7d:8b:eb:ce:a4:ee:f1:41:9f:c8:96:14:c3:d3:
         6e:e4:fb:ce:ce:fc:f7:13:a9:ea:d4:c0:d4:d1:da:4e:65:1a:
         3a:aa:94:f3:10:92:3a:3c:a3:77:83:a8:4d:c8:af:9c:46:0e:
         3c:d6:b0:63:f5:af:2a:d1:88:82:82:61:98:1d:26:42:69:f1:
         4a:78:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:01:24 2025 by rpki-client