Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
File:                     HScudZNWWso9tIbvvdAfGXRUyYM.mft (raw, json)
Hash identifier:          bhxSJe8qFmfoj8K6PFEX7e2WEkwYlc0Zs1HU1VRi2gQ=
Subject key identifier:   75:41:79:79:C1:2C:B4:F6:77:42:72:CE:D2:CF:8E:FB:2D:1E:AC:3D
Authority key identifier: 1D:27:2E:75:93:56:5A:CA:3D:B4:86:EF:BD:D0:1F:19:74:54:C9:83
Certificate issuer:       /CN=F36C11E4AR/serialNumber=1D272E7593565ACA3DB486EFBDD01F197454C983
Certificate serial:       0285
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
Manifest number:          0284
Signing time:             Thu 31 Jul 2025 04:15:57 +0000
Manifest this update:     Thu 31 Jul 2025 04:15:56 +0000
Manifest next update:     Sat 02 Aug 2025 04:15:56 +0000
Files and hashes:         1: HScudZNWWso9tIbvvdAfGXRUyYM.crl (hash: x1AhISvu+exGAUIREuLcka19fUjB6E47yer1Wq17Zrs=)
                          2: DCA06BE083AE11EE861B88374AD9E6FC.roa (hash: 9vkj+XPNGesFwVW815jiX1HMcnZSf46ECccXSGVK764=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
                          rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C11E4AR, serialNumber=1D272E7593565ACA3DB486EFBDD01F197454C983
        Validity
            Not Before: Jul 31 04:15:56 2025 GMT
            Not After : Aug  2 04:15:56 2025 GMT
        Subject: CN=688aedfd-6167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4f:48:19:1d:d1:0c:c7:75:fb:51:bb:fa:06:
                    ff:5d:85:a6:fb:ae:a1:00:4a:bd:22:a8:29:b3:7e:
                    65:f5:f2:04:16:f6:c9:b7:74:9d:e4:ca:10:13:d8:
                    67:ea:39:36:a4:66:d3:53:2e:bc:93:9a:64:f6:6a:
                    6d:ae:88:c4:be:bb:81:60:4b:ce:31:d4:3d:70:93:
                    02:30:64:51:e7:56:25:8d:a6:43:93:ac:1b:2c:ac:
                    68:87:1d:e5:a1:8e:40:b3:3a:cc:ca:95:27:05:5e:
                    21:c3:26:ec:46:e8:8e:0a:d3:bd:e6:1a:01:63:ac:
                    1c:47:38:75:45:5a:60:12:1d:f7:ee:28:42:b5:c1:
                    2c:79:b2:96:98:ac:db:37:15:fb:d2:1f:5c:09:3f:
                    da:8d:aa:6a:0c:44:9c:95:36:47:cf:f1:b1:0f:5b:
                    61:8c:8f:4e:73:b2:12:0d:f6:7b:e5:66:43:23:25:
                    53:9b:6f:69:b8:91:44:88:6b:59:e6:f4:aa:79:53:
                    e3:87:76:1d:1b:44:bd:3a:5e:a8:ae:be:90:70:ed:
                    45:65:20:c0:0a:da:9d:4e:8f:c6:b8:c2:3f:0e:70:
                    b2:28:d9:70:6c:fc:ab:21:81:81:fd:aa:6a:0c:7a:
                    3c:78:38:3a:40:c3:35:a4:14:94:30:94:c8:b9:14:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:41:79:79:C1:2C:B4:F6:77:42:72:CE:D2:CF:8E:FB:2D:1E:AC:3D
            X509v3 Authority Key Identifier:
                keyid:1D:27:2E:75:93:56:5A:CA:3D:B4:86:EF:BD:D0:1F:19:74:54:C9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:fa:85:61:81:19:67:9f:dc:8f:b8:b5:d3:b6:c3:84:2f:c8:
         f5:de:ec:4b:87:c9:28:1b:a4:56:58:45:f3:85:a9:81:17:c2:
         06:6b:38:80:92:55:71:fc:2f:61:6a:f9:1b:07:d2:6d:15:94:
         d1:25:d5:bd:8c:14:9f:1e:ee:ee:83:e8:a7:35:d8:f6:c9:73:
         59:cc:76:eb:84:77:3b:63:67:f9:c6:3d:96:f1:d0:11:4a:47:
         14:3e:d4:05:29:95:e2:03:a7:bd:12:47:12:b4:cb:e0:52:e9:
         d1:1a:69:13:cd:60:60:15:dd:6a:61:70:c2:c4:2f:c7:5e:23:
         03:b0:01:ea:68:68:7b:45:aa:fc:dd:7d:27:16:75:2a:7e:d9:
         1b:cf:fb:a3:7b:05:fa:e9:ae:ab:20:f6:0e:92:be:12:71:b9:
         e3:bf:9e:aa:38:85:a3:ec:f3:9d:fe:b2:8d:b8:96:83:75:e5:
         b5:7f:a4:09:5f:3c:4a:f5:4e:4a:28:a3:57:33:84:d8:b9:e3:
         01:92:e8:37:d6:d1:ac:61:54:92:ab:0e:b4:78:54:d0:bd:06:
         f8:1f:6e:52:51:82:bf:90:d0:3a:a1:15:07:78:24:d3:b6:5d:
         e4:44:65:cc:09:c6:7c:bb:d4:e3:f9:ab:dc:cb:22:2f:37:24:
         eb:e6:77:91
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzExRTRBUjExMC8GA1UEBRMoMUQyNzJFNzU5MzU2NUFDQTNEQjQ4NkVGQkREMDFG
MTk3NDU0Qzk4MzAeFw0yNTA3MzEwNDE1NTZaFw0yNTA4MDIwNDE1NTZaMBgxFjAU
BgNVBAMTDTY4OGFlZGZkLTYxNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDyT0gZHdEMx3X7Ubv6Bv9dhab7rqEASr0iqCmzfmX18gQW9sm3dJ3kyhAT
2GfqOTakZtNTLryTmmT2am2uiMS+u4FgS84x1D1wkwIwZFHnViWNpkOTrBssrGiH
HeWhjkCzOszKlScFXiHDJuxG6I4K073mGgFjrBxHOHVFWmASHffuKEK1wSx5spaY
rNs3FfvSH1wJP9qNqmoMRJyVNkfP8bEPW2GMj05zshIN9nvlZkMjJVObb2m4kUSI
a1nm9Kp5U+OHdh0bRL06XqiuvpBw7UVlIMAK2p1Oj8a4wj8OcLIo2XBs/KshgYH9
qmoMejx4ODpAwzWkFJQwlMi5FNwBAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUdUF5
ecEstPZ3QnLO0s+O+y0erD0wHwYDVR0jBBgwFoAUHScudZNWWso9tIbvvdAfGXRU
yYMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMxMUU0LzI3QzUzQTA4ODNBRDExRUU5OEU1NjYzMjRBRDlFNkZDL0hTY3Vk
Wk5XV3NvOXRJYnZ2ZEFmR1hSVXlZTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0hTY3VkWk5XV3NvOXRJYnZ2ZEFmR1hSVXlZTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzExRTQvMjdDNTNBMDg4M0FEMTFFRTk4RTU2NjMyNEFEOUU2
RkMvSFNjdWRaTldXc285dElidnZkQWZHWFJVeVlNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQ+oVhgRlnn9yPuLXTtsOEL8j13uxLh8ko
G6RWWEXzhamBF8IGaziAklVx/C9havkbB9JtFZTRJdW9jBSfHu7ug+inNdj2yXNZ
zHbrhHc7Y2f5xj2W8dARSkcUPtQFKZXiA6e9EkcStMvgUunRGmkTzWBgFd1qYXDC
xC/HXiMDsAHqaGh7Rar83X0nFnUqftkbz/ujewX66a6rIPYOkr4Scbnjv56qOIWj
7POd/rKNuJaDdeW1f6QJXzxK9U5KKKNXM4TYueMBkug31tGsYVSSqw60eFTQvQb4
H25SUYK/kNA6oRUHeCTTtl3kRGXMCcZ8u9Tj+avcyyIvNyTr5neR
-----END CERTIFICATE-----
Generated at Thu Jul 31 13:40:18 2025 by rpki-client