Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File:                     xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier:          FSjOdfvOjqLl8zrZ12vTPnAKezqtJ5H5aG87PbrqMgo=
Subject key identifier:   CD:E1:DB:ED:5B:BB:14:A3:1A:A9:8E:54:A3:70:46:2F:87:2F:AA:3C
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer:       /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial:       E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number:          DA
Signing time:             Thu 31 Jul 2025 05:18:17 +0000
Manifest this update:     Thu 31 Jul 2025 05:18:16 +0000
Manifest next update:     Sat 02 Aug 2025 05:18:16 +0000
Files and hashes:         1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: FlCA086h7oKkUMVPgAsQ6Mmev9ER4eud3OLGFvo74tE=)
                          2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                          rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
        Validity
            Not Before: Jul 31 05:18:16 2025 GMT
            Not After : Aug  2 05:18:16 2025 GMT
        Subject: CN=688afc99-caa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:e4:44:9f:ff:53:cd:65:05:67:9d:85:58:
                    21:81:a0:15:27:bb:0b:2d:ee:9e:8c:7b:84:a2:62:
                    ca:51:2a:39:e4:bd:12:00:1c:5a:d7:71:c5:b6:3a:
                    c1:b7:87:57:54:11:d6:c1:dd:d7:ac:64:5c:0b:17:
                    6b:8c:03:c6:60:e2:c1:4c:3f:e7:0e:3d:df:4f:5e:
                    84:b6:47:91:0a:0a:d1:3e:8c:ac:af:05:9e:9d:14:
                    0a:71:c4:6d:44:ee:a7:d3:ed:39:a6:78:9e:4d:d0:
                    d0:6c:d2:f1:54:81:28:65:d5:81:21:bc:58:fd:c9:
                    68:69:be:c4:92:94:89:7c:52:92:3c:d3:5d:be:31:
                    bc:96:b1:62:e9:01:f1:10:ea:ac:4e:c7:92:51:6c:
                    2a:82:54:1a:91:db:f3:ff:72:51:a0:25:71:1d:39:
                    af:da:21:07:31:29:b6:3d:08:05:77:28:0a:eb:ee:
                    ce:bb:7d:2f:71:b7:71:97:ba:9b:39:90:99:28:af:
                    f0:39:96:8b:24:3c:ec:d9:d7:fc:f1:e5:36:ae:71:
                    b1:ca:72:e2:c9:97:d3:e4:11:9e:e4:ee:b8:a0:e7:
                    ea:b2:3a:a7:1d:fa:8d:c7:e8:1d:a0:a0:33:0f:65:
                    0f:45:10:e4:94:fa:05:d5:80:cf:96:a8:99:34:48:
                    bb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E1:DB:ED:5B:BB:14:A3:1A:A9:8E:54:A3:70:46:2F:87:2F:AA:3C
            X509v3 Authority Key Identifier:
                keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ab:b6:25:12:84:2e:f9:02:ac:f4:f1:b8:ef:c0:e6:fe:10:
         de:bb:04:cc:83:ee:e1:11:85:2a:62:59:2a:4f:b4:8d:c2:cf:
         81:ce:d3:c5:b8:9f:e9:3a:cb:41:91:3e:0e:e6:d1:dd:52:63:
         7f:f5:cd:6e:7c:85:46:21:eb:25:f3:44:98:02:a9:2c:e8:46:
         44:3c:f6:87:6e:ef:ac:eb:4e:2b:2a:8d:e8:3e:54:7c:66:47:
         69:b6:0f:83:d9:96:d9:6f:4d:a6:80:07:8f:88:a0:6e:32:f2:
         d9:29:cd:64:00:6f:d0:e5:ae:26:65:7f:09:4f:10:28:9f:e5:
         96:b8:96:72:bf:13:a8:73:de:b9:fa:d8:30:9c:5f:e0:ec:9f:
         e1:08:11:97:e0:91:89:41:8c:fe:0c:f2:99:92:53:ce:c8:74:
         fa:5e:c5:93:21:65:54:95:4e:b1:09:27:e4:46:f3:82:e8:22:
         42:9f:1b:6f:12:d8:13:98:b3:46:32:e8:7f:46:23:2e:1c:82:
         4a:1b:c5:15:f7:3e:78:3d:4e:35:f8:cb:d6:d4:bd:43:50:61:
         1b:fc:d0:2f:87:bf:37:cb:07:27:5c:7c:3a:e5:b5:c0:f1:92:
         b2:24:1a:e8:27:2e:67:81:44:8a:14:1a:f2:6b:8d:44:94:1b:
         f9:4e:20:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:47:39 2025 by rpki-client