Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
File:                     xSvyehTUxJuqAvCZWQ287LDgS5c.mft (raw, json)
Hash identifier:          unUnzip//9EoYuPog//fonz+pKa4s7VlrQ2N8a+ge8s=
Subject key identifier:   FB:DE:9A:5C:83:4C:2B:08:A1:79:A0:F7:99:0A:32:AE:78:B8:55:39
Authority key identifier: C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
Certificate issuer:       /CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Certificate serial:       0392
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
Manifest number:          0391
Signing time:             Sat 07 Jun 2025 03:25:54 +0000
Manifest this update:     Sat 07 Jun 2025 03:25:53 +0000
Manifest next update:     Mon 09 Jun 2025 03:25:53 +0000
Files and hashes:         1: xSvyehTUxJuqAvCZWQ287LDgS5c.crl (hash: rm2cDB48LTWOS2pKxxPk1g1i0gkmVqgPe6Ni/3YcA/c=)
                          2: DC60099290ED11EDA023F07CF1222468.roa (hash: 9KneDc8AxCXKlLKwihUlSkgU/m9aNJKS4oxTHOBZ0ns=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                          rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8936AR, serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
        Validity
            Not Before: Jun  7 03:25:53 2025 GMT
            Not After : Jun  9 03:25:53 2025 GMT
        Subject: CN=6843b142-5347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2c:d9:75:fc:e1:64:74:3a:1d:d9:0b:cd:6f:
                    72:68:03:01:58:02:d6:b8:8e:dd:7f:4c:59:c4:4a:
                    2d:28:7d:f3:d2:08:16:f2:6a:d4:1c:22:50:f1:5c:
                    76:8f:c2:6c:23:b8:df:16:6e:15:c0:ff:f2:9f:5e:
                    99:d8:c2:54:62:57:30:30:64:e0:9a:c5:5a:fc:1a:
                    40:63:7f:ac:1b:33:fa:2e:c7:1d:9a:e7:c1:06:0e:
                    03:93:63:5c:b9:c7:35:09:14:79:43:23:b0:bb:60:
                    cd:34:a4:5f:dc:79:81:65:c4:80:a9:b5:43:aa:f8:
                    8a:a0:8d:3f:4d:e5:e8:6f:e2:e0:92:4d:21:62:f7:
                    48:b6:7e:36:97:0e:08:b2:1a:d7:8e:4e:92:72:33:
                    57:ce:41:99:f3:e3:44:e7:5c:8c:6b:89:0d:d1:42:
                    8a:b7:0b:55:0e:49:be:09:84:57:dc:8e:7c:5c:fc:
                    8c:0c:56:3e:1c:e9:4c:3c:68:20:fb:17:cc:cd:19:
                    5d:84:73:61:d8:53:17:51:b0:28:cc:ac:d7:81:aa:
                    35:a1:db:86:a8:6f:c6:b4:c6:0a:99:27:d4:eb:c8:
                    a0:56:07:b1:ff:7d:fb:04:c2:27:65:17:7a:87:c2:
                    ad:59:23:55:e7:f6:b4:f3:4e:fa:7e:01:a0:90:e7:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DE:9A:5C:83:4C:2B:08:A1:79:A0:F7:99:0A:32:AE:78:B8:55:39
            X509v3 Authority Key Identifier:
                keyid:C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:78:d7:a6:48:33:c7:15:f2:75:ed:a1:24:73:da:a2:5d:8d:
         bc:f1:f0:43:a7:c9:74:3f:31:5f:49:6f:75:33:f3:09:41:df:
         c2:53:ef:60:b4:06:e3:6c:63:b9:f5:21:8e:e2:c4:b4:42:c9:
         db:0e:2a:f3:40:02:2b:bf:73:b1:d0:3e:0e:1d:a5:f4:1d:49:
         b4:0e:af:8a:85:a9:70:52:1f:4d:8c:91:17:e2:25:e8:48:3a:
         54:92:d1:7b:bb:ac:73:15:7c:29:6c:6d:58:44:96:3a:6a:16:
         2a:e1:62:c8:ba:7a:94:1e:26:3b:4c:3f:1a:79:1a:93:4e:7c:
         90:1e:1c:58:91:c9:17:45:8c:f0:94:95:78:f1:1d:76:df:dd:
         6f:d0:88:df:40:72:98:b9:4e:4d:85:6d:aa:1c:a0:1d:bb:a8:
         e9:a6:7f:68:aa:74:3e:e4:7b:84:f4:0d:2a:12:40:2c:bd:c9:
         08:0c:81:82:b1:85:d4:b8:60:a7:0d:2c:1a:c3:cc:f2:a5:a9:
         4d:89:47:fe:2c:20:d6:db:30:40:39:54:8e:01:ce:3d:34:c8:
         2b:2f:d0:15:35:8d:0b:2a:71:86:11:d3:f5:bc:4a:03:36:fe:
         34:f9:be:9d:ae:a9:e0:b9:d0:9c:d7:4b:13:c9:c5:92:5e:2c:
         b8:a3:7e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:04 2025 by rpki-client