Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
File:                     7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft (raw, json)
Hash identifier:          49M1bPPXcKIRo4lP2DCgm7B4NyWv7iTeZvPXh+2f/t4=
Subject key identifier:   EC:52:7F:95:39:0B:A4:14:B9:7C:C5:F8:69:21:1D:1D:80:FD:C2:B7
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Certificate issuer:       /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial:       059C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
Manifest number:          0596
Signing time:             Sun 27 Jul 2025 02:41:05 +0000
Manifest this update:     Sun 27 Jul 2025 02:41:04 +0000
Manifest next update:     Tue 29 Jul 2025 02:41:04 +0000
Files and hashes:         1: 7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl (hash: UHk4anHmUpirvCcxv5JJWxrU9qA6o0WKPE3K4x3ecS0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                          rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAR, serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
        Validity
            Not Before: Jul 27 02:41:04 2025 GMT
            Not After : Jul 29 02:41:04 2025 GMT
        Subject: CN=688591c1-7f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a0:8c:e7:cc:14:f9:06:80:4c:a4:45:c0:74:
                    48:a9:88:da:64:00:91:84:fe:8d:4c:4e:6f:3a:2f:
                    94:17:e6:67:2d:dd:6b:b9:5e:c6:94:96:a9:d9:73:
                    f9:ca:4b:cd:d5:cf:4b:2c:98:9b:b8:6e:a7:bc:0e:
                    83:5e:38:c6:46:c1:68:03:5b:dd:d3:2c:fc:07:ec:
                    48:f5:69:e0:e8:8c:eb:62:7a:d0:25:57:60:26:ef:
                    07:09:b3:f1:07:9c:e7:1d:df:47:84:3d:3f:64:9f:
                    8f:d1:0d:c1:49:4e:ff:f7:fb:af:58:9e:3d:fd:4d:
                    15:32:62:21:c6:34:bd:63:99:ae:2f:d8:de:12:dd:
                    cc:89:8a:b4:ef:ef:b4:69:c7:78:d4:1d:ef:ca:0c:
                    75:96:24:cd:ac:91:49:9d:fe:65:69:d5:8d:74:4d:
                    00:b7:74:05:7c:b5:c9:c9:1c:1f:6b:78:ee:2b:c1:
                    db:90:41:17:49:a1:ef:9f:80:1c:0d:47:a2:74:94:
                    1b:d5:75:21:50:02:fd:b8:02:bc:57:75:b8:7d:cd:
                    9d:fc:a7:ad:d0:12:04:92:9e:f6:e7:5f:31:d8:43:
                    5b:ca:3e:e9:74:fc:01:bf:5d:fb:b6:35:19:80:5b:
                    d7:f7:77:12:f6:64:48:a0:14:11:b9:61:80:d7:56:
                    93:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:52:7F:95:39:0B:A4:14:B9:7C:C5:F8:69:21:1D:1D:80:FD:C2:B7
            X509v3 Authority Key Identifier:
                keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:14:c5:b4:42:ac:5e:3d:07:33:db:b7:8a:04:11:f3:ad:d8:
         f9:fd:a1:eb:19:39:58:c0:62:fc:7c:e8:ce:ed:b4:07:fb:9d:
         30:32:7c:e0:78:ab:c7:9e:26:db:6c:1e:f3:5d:38:ee:56:fb:
         e9:5e:3e:5f:89:fb:a4:a5:61:18:52:ac:55:ac:d0:87:90:3c:
         1d:72:d6:78:e3:24:e1:8d:ed:0d:c4:41:ad:3a:95:42:76:dc:
         ee:bc:e9:b1:57:e2:67:e5:fe:3a:d1:d0:36:a9:62:f3:57:2b:
         f1:29:47:cf:62:bc:d2:1e:21:4e:5e:1a:6f:06:50:08:fa:48:
         32:c7:85:1c:de:df:a4:06:67:e3:2f:46:89:d0:77:8d:7a:13:
         bb:0f:61:45:c3:da:b7:62:1c:4e:54:de:77:3d:9f:06:73:a9:
         07:39:3b:fd:51:aa:bd:b9:1c:4a:6f:8f:51:d1:62:96:be:b9:
         a9:d5:c7:50:5a:5d:d3:85:ff:13:e6:11:a0:d5:26:24:d2:79:
         49:17:cc:a0:b3:8e:c0:77:9d:09:44:78:36:25:e1:68:61:63:
         40:23:37:b5:c7:0e:59:af:9c:67:e4:ea:60:d9:f8:59:38:64:
         4d:d1:04:6f:f6:cd:01:ab:b9:66:5c:cd:71:f5:50:3c:a4:3f:
         54:53:61:bb
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkQ5N0NBUjExMC8GA1UEBRMoRUZGNDA2MUYzNTU3MkU2QkZBMUMyNEJCMjM2OEZD
RkUyRUFFNjA1QTAeFw0yNTA3MjcwMjQxMDRaFw0yNTA3MjkwMjQxMDRaMBgxFjAU
BgNVBAMTDTY4ODU5MWMxLTdmMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDToIznzBT5BoBMpEXAdEipiNpkAJGE/o1MTm86L5QX5mct3Wu5XsaUlqnZ
c/nKS83Vz0ssmJu4bqe8DoNeOMZGwWgDW93TLPwH7Ej1aeDojOtietAlV2Am7wcJ
s/EHnOcd30eEPT9kn4/RDcFJTv/3+69Ynj39TRUyYiHGNL1jma4v2N4S3cyJirTv
77Rpx3jUHe/KDHWWJM2skUmd/mVp1Y10TQC3dAV8tcnJHB9reO4rwduQQRdJoe+f
gBwNR6J0lBvVdSFQAv24ArxXdbh9zZ38p63QEgSSnvbnXzHYQ1vKPul0/AG/Xfu2
NRmAW9f3dxL2ZEigFBG5YYDXVpNRAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU7FJ/
lTkLpBS5fMX4aSEdHYD9wrcwHwYDVR0jBBgwFoAU7/QGHzVXLmv6HCS7I2j8/i6u
YFowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJEOTdDL0U0MjRBRTJBMkQ5NDExRUM5NzJDQTE0NUQ4QTAxNENFLzdfUUdI
elZYTG12NkhDUzdJMmo4X2k2dVlGby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzdfUUdIelZYTG12NkhDUzdJMmo4X2k2dVlGby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QkQ5N0MvRTQyNEFFMkEyRDk0MTFFQzk3MkNBMTQ1RDhBMDE0
Q0UvN19RR0h6VlhMbXY2SENTN0kyajhfaTZ1WUZvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0FMW0QqxePQcz27eKBBHzrdj5/aHrGTlY
wGL8fOjO7bQH+50wMnzgeKvHnibbbB7zXTjuVvvpXj5fifukpWEYUqxVrNCHkDwd
ctZ44yThje0NxEGtOpVCdtzuvOmxV+Jn5f460dA2qWLzVyvxKUfPYrzSHiFOXhpv
BlAI+kgyx4Uc3t+kBmfjL0aJ0HeNehO7D2FFw9q3YhxOVN53PZ8Gc6kHOTv9Uaq9
uRxKb49R0WKWvrmp1cdQWl3Thf8T5hGg1SYk0nlJF8ygs47Ad50JRHg2JeFoYWNA
Ize1xw5Zr5xn5Opg2fhZOGRN0QRv9s0Bq7lmXM1x9VA8pD9UU2G7
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:47:53 2025 by rpki-client