Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
File:                     QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft (raw, json)
Hash identifier:          GxH48zUIvok3t0E9M8oETlp7osIs2/zJSXI8aqsOO1A=
Subject key identifier:   EB:E2:6D:07:BB:61:8D:B6:AF:14:61:B2:40:34:4E:B1:AF:AB:23:34
Authority key identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
Certificate issuer:       /CN=F36D2FA4AR/serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
Certificate serial:       47
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
Manifest number:          45
Signing time:             Wed 20 Aug 2025 05:20:42 +0000
Manifest this update:     Wed 20 Aug 2025 05:20:41 +0000
Manifest next update:     Fri 22 Aug 2025 05:20:41 +0000
Files and hashes:         1: QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl (hash: 5MWdJEbJGztJPV/+mYF3QLkrfBIUNJjMmhhtMKzPaaA=)
                          2: DD733EA6501911F081EC1BD5DAE4EC9C.roa (hash: pTSTw7CMzw5Tzo3x06Bd0K5rfFXqGfOJjDBXR7lNILg=)
                          3: 702497F0502311F0A0A1EC91DAE4EC9C.roa (hash: TKThQssce2usSG8fqrLv7uZqNWwbS2fbqTY3b7wi6xo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                          rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 22 Aug 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AR, serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
        Validity
            Not Before: Aug 20 05:20:41 2025 GMT
            Not After : Aug 22 05:20:41 2025 GMT
        Subject: CN=68a55b2a-f4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:1b:9c:a8:a7:50:32:91:58:e0:64:49:bf:
                    96:c9:fd:74:7e:b5:14:b3:e7:d3:36:fc:b7:62:ad:
                    7f:be:9b:ee:a2:8d:b9:c1:ba:eb:37:a0:c8:96:39:
                    24:94:f0:79:a8:21:5f:b3:4c:02:50:57:5e:e0:22:
                    21:fb:94:1f:e9:1a:b8:e9:26:ca:3d:50:0d:33:2d:
                    ac:88:d6:d0:ea:56:84:e2:87:5e:b0:1d:ee:e7:d2:
                    f3:f6:b7:c8:fa:f3:8e:35:94:ca:01:c9:e0:f2:b3:
                    5c:33:28:c2:99:c9:e8:39:cd:c9:cd:11:b4:25:4e:
                    42:35:70:70:1e:cc:48:05:3d:fc:1f:19:92:22:aa:
                    4b:5a:34:15:97:e5:dd:69:ca:86:7a:2c:5a:2f:e8:
                    64:44:21:57:c0:46:0a:23:a9:4f:85:48:e9:15:7a:
                    b0:bf:73:29:1b:b2:71:4b:37:dd:57:01:db:f8:e8:
                    da:e0:fe:94:a4:3f:85:0a:34:b2:b7:85:a6:f5:42:
                    f3:c5:70:01:bf:66:3e:1c:94:ad:7c:92:d2:87:44:
                    fd:ca:cb:c9:18:e7:27:18:01:8d:ed:bc:4f:06:11:
                    87:63:f9:60:b6:2e:ea:19:e7:0e:38:17:d0:be:8b:
                    fa:4f:2b:fb:de:64:30:b1:66:de:95:29:40:64:a2:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E2:6D:07:BB:61:8D:B6:AF:14:61:B2:40:34:4E:B1:AF:AB:23:34
            X509v3 Authority Key Identifier:
                keyid:41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f3:92:0a:63:30:c2:5d:eb:87:20:d2:86:14:d6:f1:6f:66:
         6e:92:a5:da:e3:3e:56:70:bd:fd:20:3a:cc:fe:c1:13:15:dd:
         9b:ba:f0:3b:d3:a4:e7:21:32:d3:68:b4:29:c3:b1:59:f8:6e:
         23:8c:19:3f:62:2c:13:01:31:60:15:13:6c:26:ca:77:19:57:
         75:60:37:da:8f:85:fe:e1:0b:27:24:a9:67:b3:55:ac:57:91:
         4d:04:11:ad:05:5d:b1:68:63:0d:9d:8b:c7:06:5b:ab:3b:c4:
         ca:82:49:37:1d:2b:c0:da:f6:7b:2e:ee:e9:e1:c4:5d:59:d7:
         ea:8f:ca:af:cb:da:5b:3e:93:8d:78:5c:cd:04:44:fe:5b:c6:
         6e:cb:3a:49:65:fb:fa:b6:9e:29:8d:89:5a:1a:19:fc:a5:52:
         7b:54:37:0e:14:40:b2:e6:97:92:12:38:e0:ef:56:e3:88:d9:
         0d:09:58:2a:f2:76:a4:63:2f:a9:c8:18:1e:b0:1c:b3:d7:66:
         66:62:ca:14:71:4e:7f:24:f5:56:01:e9:e3:fc:fd:ab:bf:c5:
         16:15:66:e0:17:3e:ee:ae:dc:33:29:31:19:a5:5e:cd:71:ba:
         92:cc:77:c2:06:74:33:6e:a5:fb:82:11:0d:35:2f:cf:de:0b:
         af:f2:77:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 18:55:27 2025 by rpki-client