Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
File:                     kkLGCS_iI5rNMMSPNawbxN313L4.mft (raw, json)
Hash identifier:          J5hm7ctnAemJS+Bo9fLOLrrKbD9+XmfskLIyL72ySwY=
Subject key identifier:   AB:94:BE:2A:BE:7B:FA:81:1C:0F:89:77:3E:BD:79:45:7B:A1:BB:13
Authority key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Certificate issuer:       /CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Certificate serial:       03A7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
Manifest number:          03A6
Signing time:             Sun 27 Jul 2025 03:30:03 +0000
Manifest this update:     Sun 27 Jul 2025 03:30:03 +0000
Manifest next update:     Tue 29 Jul 2025 03:30:03 +0000
Files and hashes:         1: kkLGCS_iI5rNMMSPNawbxN313L4.crl (hash: 1vcFcjQAVYJV3Nm0Kyj8QPbh3DdYStwFe7GTbFa4e/A=)
                          2: 77776CF68DDF11EE9554951A4AD9E6FC.roa (hash: P/s62KTUxEoG/rgkYrfYli6201mLv2NV6jxtdASDzgE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                          rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935 (0x3a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AR, serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
        Validity
            Not Before: Jul 27 03:30:03 2025 GMT
            Not After : Jul 29 03:30:03 2025 GMT
        Subject: CN=68859d3b-cd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:84:da:68:fa:14:28:6f:27:ab:7c:b3:87:
                    fa:3e:a4:1b:fe:7a:53:f6:a0:a7:c0:ee:9c:8c:fd:
                    da:06:38:3b:90:56:55:6d:58:b8:3b:da:59:9d:10:
                    78:47:35:d0:b8:0d:29:1b:7e:ec:22:b3:1b:75:b9:
                    69:84:d4:bf:eb:3d:25:44:76:23:3d:b8:eb:4b:00:
                    c6:1c:b8:fc:85:ec:04:ff:e6:ca:8b:9a:56:d8:83:
                    46:f5:08:9f:51:75:90:47:55:38:30:70:03:4e:c2:
                    0b:ae:1e:82:85:b0:01:5b:37:2c:35:20:1e:cb:a1:
                    bf:34:c2:33:0f:9b:45:32:64:fb:af:6c:30:18:cc:
                    e7:16:95:5a:0b:d5:2e:90:08:03:48:c1:44:e4:c9:
                    92:6c:0a:70:cd:55:78:e4:e3:e8:90:34:de:f0:44:
                    41:b5:1b:c0:89:0e:df:b4:8d:2a:ce:0f:69:89:a3:
                    39:62:2f:c2:15:76:40:22:af:aa:c3:9e:0e:d3:ad:
                    98:b1:38:4e:65:c3:13:d3:91:98:a1:11:e1:56:95:
                    5c:8b:5b:ac:bf:6f:a1:c5:ab:5f:a4:ff:49:f9:6e:
                    2e:44:e6:e6:f5:95:af:6d:e6:ec:2e:a3:68:c4:db:
                    58:b1:54:fe:93:08:52:1c:63:8b:cb:4b:79:e8:4f:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:94:BE:2A:BE:7B:FA:81:1C:0F:89:77:3E:BD:79:45:7B:A1:BB:13
            X509v3 Authority Key Identifier:
                keyid:92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:66:5f:93:95:c3:eb:04:b9:a3:f1:16:eb:e0:e3:6d:83:ca:
         fa:8f:71:1b:0e:6d:ab:07:e5:52:14:a9:f5:5a:01:e4:07:a9:
         a4:59:ec:b8:e0:c7:77:ee:54:97:c1:9e:2d:60:de:c4:04:34:
         5a:6e:02:62:ac:bd:3d:54:d3:e2:ce:69:a0:59:89:31:47:4e:
         b6:40:7c:f0:2b:aa:fa:b6:e2:ff:e9:da:9f:51:6c:77:f3:b2:
         74:2c:7f:34:c2:c2:62:a8:d7:d5:ae:a8:57:0e:eb:8c:50:ec:
         79:a1:69:9e:b5:00:19:28:35:b2:f1:36:6e:44:54:ea:df:b5:
         7b:da:8f:5d:ab:1f:2e:03:80:18:ec:d3:3c:64:cb:05:61:c5:
         93:87:8c:46:f4:13:c3:c4:4a:28:26:1f:22:f2:9f:06:30:ba:
         f2:ea:86:f5:8e:75:5b:a1:fd:43:32:65:98:6e:b4:04:86:9d:
         c0:71:4d:c8:3d:04:a2:2d:0f:19:56:33:cd:a1:22:da:10:1a:
         50:8b:36:82:31:e7:d0:ef:af:79:3b:ae:f0:13:16:c5:22:54:
         70:08:cd:7c:47:5f:9b:27:7b:3d:bd:21:19:9e:3c:3a:26:6d:
         e5:f8:72:43:f1:da:31:cf:2b:1e:5d:ba:25:92:88:67:82:8f:
         8a:97:bb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:47:56 2025 by rpki-client