Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
File:                     bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft (raw, json)
Hash identifier:          e+nrctIqI3MAgangHF4+jbkyjT4jG8AorDtjOVQe94I=
Subject key identifier:   25:D4:E2:E7:0E:08:A2:1F:6B:93:25:75:E9:03:0F:E3:06:8F:96:2B
Authority key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Certificate issuer:       /CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Certificate serial:       060F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
Manifest number:          060D
Signing time:             Tue 16 Sep 2025 02:20:44 +0000
Manifest this update:     Tue 16 Sep 2025 02:20:43 +0000
Manifest next update:     Thu 18 Sep 2025 02:20:43 +0000
Files and hashes:         1: bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl (hash: uM9UESNWFldyMJ7apB9ExsoRoUH5+CbJAnDLPhogdLg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
                          rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C95F1AR, serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
        Validity
            Not Before: Sep 16 02:20:43 2025 GMT
            Not After : Sep 18 02:20:43 2025 GMT
        Subject: CN=68c8c97c-6fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:77:78:4c:cb:cf:78:ea:58:d5:e6:19:a7:a6:
                    43:22:f2:0c:a7:89:f9:7c:74:0c:c4:5d:36:f6:3d:
                    91:f0:c6:eb:47:35:7a:2e:e9:af:a5:cf:1e:9c:0b:
                    88:31:59:31:a5:65:58:49:45:9b:38:2d:64:58:7b:
                    59:1f:6c:68:0c:da:ee:f6:a4:59:3e:ff:98:94:98:
                    fe:4e:71:5b:44:c9:a6:0a:70:f1:c8:9a:1e:03:ab:
                    d5:70:2f:90:7e:2f:3d:b0:3d:98:ed:eb:49:6d:62:
                    bf:c9:58:04:67:37:e2:5c:cb:8f:ed:a2:80:12:f8:
                    1c:7d:d1:72:cd:fe:af:ad:f1:b8:c9:ec:42:7e:c9:
                    c3:96:74:e8:99:3d:70:e6:67:d8:04:61:e3:85:45:
                    63:59:1f:3a:57:b5:55:b9:32:2c:4e:81:bb:ec:28:
                    46:14:fd:9d:26:eb:c1:71:f1:2f:12:c7:5d:6a:55:
                    07:31:b4:8f:ff:62:f6:51:41:09:8a:70:e4:42:6c:
                    3c:e4:aa:db:6a:00:86:8f:a2:3e:29:15:66:72:a9:
                    b7:b5:56:e7:5e:b7:a4:69:66:6b:e8:db:1e:fd:59:
                    1b:b5:94:4b:2d:b1:c9:89:fd:2e:11:61:ff:e5:ae:
                    ec:83:2f:06:bb:d0:de:ae:1a:ad:8f:c2:30:c2:10:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D4:E2:E7:0E:08:A2:1F:6B:93:25:75:E9:03:0F:E3:06:8F:96:2B
            X509v3 Authority Key Identifier:
                keyid:6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:49:32:3e:17:d5:42:b6:65:05:da:9c:cc:ac:e2:fe:43:cb:
         86:c5:aa:4b:a5:7e:d5:cb:c2:42:12:24:c3:2a:ce:1f:fc:fc:
         27:19:ae:b7:b5:52:d4:e5:82:54:08:ee:75:43:95:ae:c6:71:
         3a:04:7a:21:cb:d4:67:52:8d:e5:a3:7c:e3:b8:d9:0b:0a:ba:
         2a:2b:a4:43:3e:a5:d5:a3:c2:a3:12:93:95:7d:03:15:6c:ea:
         8b:c2:a9:30:f8:29:06:a2:8a:dc:eb:09:8a:09:a4:86:93:d7:
         31:d1:67:b1:7a:db:02:1a:4a:33:77:ae:ed:a1:69:70:1a:45:
         02:fd:3a:f6:e7:5e:46:3f:0b:68:09:27:67:34:fa:5f:11:97:
         36:bd:78:98:84:3f:92:1e:02:6b:3c:73:c0:6f:17:61:6b:f6:
         b2:54:68:db:7d:70:a1:04:56:d3:31:fc:6d:b3:94:4d:4f:d6:
         f1:0f:54:e8:ca:45:90:3d:74:70:c9:f9:fa:7b:4a:01:7f:a1:
         33:1b:cc:96:b6:0a:9a:aa:45:3d:f5:98:44:2e:0a:45:69:c7:
         66:36:68:e3:98:e9:39:84:d7:51:3d:7b:bb:8e:d0:1d:dc:ea:
         19:bb:a8:e0:21:d3:bb:c6:ce:68:68:e8:45:cb:e8:8a:02:64:
         f8:53:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:59:13 2025 by rpki-client