Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          yS0lU2Y/ubCbazvde/stRiHduqbf16wWMUJoZLi0nCI=
Subject key identifier:   D8:D3:7E:45:5D:46:95:11:C3:F8:A1:F2:BF:33:2E:30:E3:DD:54:8B
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       01BA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          01B9
Signing time:             Sun 27 Jul 2025 04:36:41 +0000
Manifest this update:     Sun 27 Jul 2025 04:36:40 +0000
Manifest next update:     Tue 29 Jul 2025 04:36:40 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: Aw9JMr4FRR9u/RoJAi7mp5IfLTXrAWSVMP9xFMjNcps=)
                          2: 5E52EDD81C4911EFA98F9E317DDC24C2.roa (hash: Zixh/aFPuo2zs0C1hGvWJdvczTuAhUvvaA1FyHi6zv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR, serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Jul 27 04:36:40 2025 GMT
            Not After : Jul 29 04:36:40 2025 GMT
        Subject: CN=6885acd9-7e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c7:91:5d:aa:9e:85:9a:0b:d7:c0:dc:fb:8f:
                    0a:0b:48:48:dc:e8:ad:95:ad:74:08:d8:45:53:4c:
                    2d:95:ba:12:b3:7e:41:a7:0c:9a:45:12:60:2c:51:
                    42:30:ee:96:28:c4:7a:c6:28:e4:a3:44:53:da:6f:
                    b9:90:28:9c:fd:12:43:7a:d0:d3:35:19:85:4c:3b:
                    bc:04:f3:a6:d2:5b:b6:ef:38:04:4d:83:4d:0b:82:
                    9b:fa:ae:19:96:82:ce:fe:f7:31:d2:a1:70:d3:be:
                    02:f4:91:4c:04:ac:05:10:36:9b:60:69:9b:39:f9:
                    cc:d5:62:77:e0:09:e7:f5:81:89:5f:32:13:e5:7c:
                    48:ca:fc:a3:42:e9:0e:76:57:c5:19:38:d7:0d:a1:
                    fe:1d:a0:0a:d9:e8:1b:ac:ec:fb:e6:ac:7f:19:2f:
                    87:30:7f:8e:af:c9:c5:45:9c:58:c0:b3:cd:6c:8e:
                    e4:61:cb:48:0d:d5:18:52:f7:79:9b:5e:90:59:3d:
                    fb:a6:da:9a:82:37:01:f6:62:18:9e:22:3c:58:66:
                    31:37:40:07:5b:aa:59:55:ec:76:27:51:e5:8d:43:
                    b1:a7:f8:39:59:75:76:fd:43:88:33:44:77:40:71:
                    d5:51:57:51:1b:b1:e7:ad:5d:58:32:ea:10:eb:45:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D3:7E:45:5D:46:95:11:C3:F8:A1:F2:BF:33:2E:30:E3:DD:54:8B
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:fd:5e:39:86:7a:82:31:5b:12:2e:0b:4b:0c:74:23:23:87:
         58:03:ec:fb:56:6f:be:17:43:70:d5:90:57:8b:a3:a2:0b:6d:
         66:10:0e:27:89:6c:bd:a2:f3:f9:13:e1:e0:a6:86:33:c6:8f:
         d8:f2:4a:3e:59:7c:7d:08:00:48:69:4f:85:f8:dc:e6:9a:10:
         e8:1b:df:0f:76:02:e6:f9:11:28:d6:3f:86:3c:6b:98:8c:5b:
         d0:a4:66:48:0e:b6:ff:b0:57:e2:cb:6e:b2:d4:36:e4:2e:b9:
         eb:89:13:eb:c4:bb:c9:c7:b7:8b:42:b1:b1:0e:fb:bf:94:a2:
         a4:c5:09:39:6a:2c:64:85:e0:7a:7a:44:c9:49:f3:4c:89:a1:
         04:6e:3f:60:6e:5e:8e:5d:d4:d5:49:5d:6f:e3:aa:0a:4c:ac:
         86:f8:98:6c:5e:43:b1:4a:38:96:10:03:c7:84:b6:28:2f:0c:
         0d:58:4e:e8:84:a7:d3:a4:37:14:2e:0a:60:67:85:f5:a2:01:
         c7:dd:8c:1a:27:e9:72:bb:c0:92:be:da:c4:c5:c2:c3:25:6b:
         fc:e9:fa:b2:92:4e:ca:ce:70:84:f0:64:ec:0c:af:5a:8a:8b:
         02:80:a9:75:6e:ef:50:af:33:6c:87:b9:ab:6a:81:e2:d5:81:
         aa:1c:b8:e1
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAbowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzJCRjJBUjExMC8GA1UEBRMoMjIzNkZGQUI0Rjc4QTA3QTE5QjgyRThGREU2REMy
REIwNjRBREJCRjAeFw0yNTA3MjcwNDM2NDBaFw0yNTA3MjkwNDM2NDBaMBgxFjAU
BgNVBAMTDTY4ODVhY2Q5LTdlODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfx5Fdqp6FmgvXwNz7jwoLSEjc6K2VrXQI2EVTTC2VuhKzfkGnDJpFEmAs
UUIw7pYoxHrGKOSjRFPab7mQKJz9EkN60NM1GYVMO7wE86bSW7bvOARNg00Lgpv6
rhmWgs7+9zHSoXDTvgL0kUwErAUQNptgaZs5+czVYnfgCef1gYlfMhPlfEjK/KNC
6Q52V8UZONcNof4doArZ6Bus7PvmrH8ZL4cwf46vycVFnFjAs81sjuRhy0gN1RhS
93mbXpBZPfum2pqCNwH2YhieIjxYZjE3QAdbqllV7HYnUeWNQ7Gn+DlZdXb9Q4gz
RHdAcdVRV1EbseetXVgy6hDrRdhnAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU2NN+
RV1GlRHD+KHyvzMuMOPdVIswHwYDVR0jBBgwFoAUIjb/q094oHoZuC6P3m3C2wZK
278wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMyQkYyL0YxN0E0OThBMTlFQzExRUY5QzAyODkyQzAxNzAwMUIxL0lqYl9x
MDk0b0hvWnVDNlAzbTNDMndaSzI3OC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0lqYl9xMDk0b0hvWnVDNlAzbTNDMndaSzI3OC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzJCRjIvRjE3QTQ5OEExOUVDMTFFRjlDMDI4OTJDMDE3MDAx
QjEvSWpiX3EwOTRvSG9adUM2UDNtM0Myd1pLMjc4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQ/V45hnqCMVsSLgtLDHQjI4dYA+z7Vm++
F0Nw1ZBXi6OiC21mEA4niWy9ovP5E+HgpoYzxo/Y8ko+WXx9CABIaU+F+NzmmhDo
G98PdgLm+REo1j+GPGuYjFvQpGZIDrb/sFfiy26y1DbkLrnriRPrxLvJx7eLQrGx
Dvu/lKKkxQk5aixkheB6ekTJSfNMiaEEbj9gbl6OXdTVSV1v46oKTKyG+JhsXkOx
SjiWEAPHhLYoLwwNWE7ohKfTpDcULgpgZ4X1ogHH3YwaJ+lyu8CSvtrExcLDJWv8
6fqykk7KznCE8GTsDK9aiosCgKl1bu9QrzNsh7mraoHi1YGqHLjh
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:50:22 2025 by rpki-client