Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
File:                     mpAdFskLYBlnVD3tV83q800LJz4.mft (raw, json)
Hash identifier:          WChXupxJt69hjiOYpdvtaH5LBh7u6+04HZCWqMlaFo4=
Subject key identifier:   08:9E:BB:96:74:D9:6A:83:E8:00:9D:D8:B6:41:84:B3:29:FD:85:10
Authority key identifier: 9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
Certificate issuer:       /CN=F36ED442AR/serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
Certificate serial:       0E64
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
Manifest number:          0E64
Signing time:             Thu 31 Jul 2025 00:58:05 +0000
Manifest this update:     Thu 31 Jul 2025 00:58:04 +0000
Manifest next update:     Sat 02 Aug 2025 00:58:04 +0000
Files and hashes:         1: mpAdFskLYBlnVD3tV83q800LJz4.crl (hash: rleSKoqlvFUrYb4EuMYkKZ8141t/zLINwDEabSZIK4s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                          rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3684 (0xe64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AR, serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
        Validity
            Not Before: Jul 31 00:58:04 2025 GMT
            Not After : Aug  2 00:58:04 2025 GMT
        Subject: CN=688abf9d-a060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:8c:a5:39:10:e4:66:5f:7b:58:62:bc:40:
                    85:e2:30:30:5f:b8:47:8f:d7:13:06:61:ed:48:04:
                    90:ae:ea:d7:84:23:2a:5e:0a:10:08:75:b3:a6:ad:
                    9e:8c:2a:be:a7:73:24:62:3b:8c:48:ae:68:72:a5:
                    fa:92:5f:d6:1c:f0:68:74:54:7f:d0:8d:2f:c6:12:
                    91:1c:36:08:02:8d:c6:e5:e5:f6:13:f5:ab:1b:a1:
                    aa:a8:0c:8c:37:90:d7:37:a9:6d:77:3e:64:4c:ae:
                    6e:21:02:7d:67:b0:28:d8:f9:d4:21:78:c8:9f:4f:
                    6d:18:5a:17:25:18:95:ca:03:2b:6d:cb:10:78:d5:
                    ed:b4:8f:20:fc:8b:74:63:68:89:76:77:95:7a:3b:
                    5a:32:7e:6f:b9:ae:31:0f:84:f2:7f:de:dd:6a:44:
                    1e:e0:15:a2:9a:f6:c9:8c:30:3c:91:c5:ae:75:6a:
                    62:6c:bf:ba:97:01:90:0d:d5:43:01:d3:8f:1d:e4:
                    55:ba:f8:47:00:db:57:b9:6e:8f:6c:fd:06:5a:77:
                    7e:d8:60:59:c8:19:a9:d8:9f:11:91:b3:db:fb:15:
                    4a:f3:bc:94:cc:a7:90:c0:c2:e1:e1:db:99:7a:d4:
                    d7:78:79:11:c7:fe:fd:e5:38:0d:61:7f:62:71:08:
                    4f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9E:BB:96:74:D9:6A:83:E8:00:9D:D8:B6:41:84:B3:29:FD:85:10
            X509v3 Authority Key Identifier:
                keyid:9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:91:e1:f2:4c:b2:b7:93:ad:82:1c:08:0a:4e:b3:38:a5:77:
         33:84:68:10:4d:42:f4:cc:c7:3c:09:93:4d:aa:2a:e2:d9:23:
         33:44:37:53:df:f5:83:7b:b0:e0:37:ed:f0:1a:00:a1:da:a2:
         19:1f:c6:51:11:06:4c:98:20:86:be:41:45:91:a0:a3:bf:c8:
         45:7d:57:bf:fb:bb:df:38:84:e2:fb:45:2a:cd:00:19:d0:0a:
         a1:7e:5b:6a:ca:aa:9e:a7:59:b0:74:05:bb:4f:84:3f:c3:03:
         3a:1e:13:6b:01:37:70:31:5c:bd:4c:6f:2a:98:0c:67:f0:bb:
         f7:2f:66:41:84:bf:10:4a:0c:28:03:8e:f5:c1:8a:33:10:94:
         2d:9f:5d:67:ec:90:2a:e9:21:a2:38:76:27:38:f8:7e:38:04:
         44:bf:21:d9:0b:ef:13:ca:d6:0b:5a:97:c8:1a:99:ee:c1:13:
         c2:d4:0b:5d:59:4a:ad:a4:74:b8:e3:43:4c:5d:e6:41:41:84:
         05:df:ca:fb:c1:98:52:e6:af:83:53:67:9e:a7:7c:8c:db:89:
         c3:ab:80:28:13:74:94:98:43:11:77:f9:eb:3c:1c:12:f7:57:
         34:c5:f7:cc:e8:72:36:92:87:33:59:31:a6:5a:39:ff:83:39:
         92:8a:6f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:34:55 2025 by rpki-client