Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File:                     xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier:          T9l6jq3R+wdUfXeWfjmMG82cRiRfm68bqYDy8m8Pd6s=
Subject key identifier:   62:EC:7C:7C:36:4A:71:3B:12:B1:63:23:68:26:14:C0:B4:DF:9F:FD
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer:       /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial:       0112
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number:          0109
Signing time:             Tue 16 Sep 2025 04:47:33 +0000
Manifest this update:     Tue 16 Sep 2025 04:47:33 +0000
Manifest next update:     Thu 18 Sep 2025 04:47:33 +0000
Files and hashes:         1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: Cod6Z0f0Dmr7ziDSAixnma63kIZSxY6/mZyqn0iXOgA=)
                          2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                          rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
        Validity
            Not Before: Sep 16 04:47:33 2025 GMT
            Not After : Sep 18 04:47:33 2025 GMT
        Subject: CN=68c8ebe5-ec85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:b9:b6:4e:86:9a:2b:a7:ee:f1:69:6e:cd:
                    fb:6f:24:94:19:3d:5e:15:b8:08:98:a7:e2:1f:3c:
                    93:5d:09:0f:a9:ed:94:54:6e:3a:d1:27:d8:ed:7e:
                    34:49:ab:77:97:53:3e:43:91:ea:82:ae:52:0b:b3:
                    9b:c6:be:d7:27:fc:fb:24:c3:0f:c9:be:ac:ed:a7:
                    b8:7b:74:6d:65:ba:fa:6d:4e:82:f2:50:f9:8a:a4:
                    dc:db:98:f5:42:d3:00:27:f4:2c:09:ad:f8:bc:3f:
                    22:63:bf:b2:c6:42:45:be:e8:3e:05:f4:ee:61:53:
                    11:26:f7:bb:e0:b8:9c:89:0d:eb:9c:d7:f6:c8:92:
                    e0:25:8f:6b:7f:10:21:5b:ef:94:0d:6b:6e:eb:b9:
                    43:ac:ee:b2:28:e0:a2:58:23:8c:17:56:d2:e0:d1:
                    ca:35:71:49:3a:6e:39:74:73:17:76:a6:c0:67:84:
                    f9:a0:15:b9:00:c0:55:28:1c:7d:01:88:92:60:29:
                    f5:25:35:69:d1:18:03:31:48:f4:d2:98:07:70:f7:
                    52:51:0c:2a:12:e1:67:54:c7:7e:3c:c8:56:4c:68:
                    cf:94:1f:7e:f2:89:0a:04:6d:14:7f:e8:0b:0e:ef:
                    d2:9d:7e:dd:33:da:ca:8c:ad:45:1d:d2:fe:d3:bc:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EC:7C:7C:36:4A:71:3B:12:B1:63:23:68:26:14:C0:B4:DF:9F:FD
            X509v3 Authority Key Identifier:
                keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:5d:6e:df:6d:04:6e:b5:3e:d4:7f:89:f1:b7:aa:e1:31:0b:
         88:57:ae:c6:b6:a0:64:8b:1c:5d:fc:64:2a:6e:22:10:09:dc:
         1d:b8:af:bf:2a:a8:6e:63:9a:0e:15:28:99:31:e5:43:df:2d:
         6c:d9:a5:e3:59:6b:f7:3d:99:4a:ab:22:a9:ce:6a:92:7d:e2:
         33:a1:f1:3e:09:5c:39:6e:07:3d:e7:dc:12:79:cf:e8:68:06:
         ec:40:a8:03:27:a2:87:a7:91:38:c2:0b:22:2c:83:cb:f8:05:
         9e:fa:a3:6b:e6:c4:d3:85:08:b8:8b:59:30:5f:64:83:ef:77:
         34:7b:ca:d3:93:0a:16:75:9d:c2:a0:85:5d:54:bf:7b:d1:d9:
         aa:ff:c8:bb:ae:9f:37:7f:32:ba:73:95:bf:f2:5e:8c:4e:56:
         36:a3:50:24:0f:c9:73:f8:dc:5f:3d:5a:56:6c:fe:59:5b:93:
         51:45:21:b7:8c:19:fa:be:0a:aa:c8:b9:89:7c:bd:5d:1e:6f:
         8c:bd:80:53:21:cc:3d:ae:16:0d:8f:04:b4:92:53:b7:0b:75:
         5a:04:ef:1e:2f:f9:33:9a:5d:91:49:fa:83:d3:17:d5:5c:42:
         13:f8:03:9c:6a:2d:97:a9:42:2a:82:99:32:e7:06:26:84:a7:
         32:89:60:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:08:17 2025 by rpki-client