Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
File:                     TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft (raw, json)
Hash identifier:          iKsyzUPKsZKByL1gvAoR/zLtg5sw+FixxCa2558Bkl8=
Subject key identifier:   B7:87:DE:FE:7A:DE:EC:B8:7B:3E:4F:12:0E:DA:28:2E:BD:A6:BA:F7
Authority key identifier: 4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF
Certificate issuer:       /CN=F36ED8A8AR/serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
Certificate serial:       5A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
Manifest number:          5A
Signing time:             Sat 07 Jun 2025 05:17:10 +0000
Manifest this update:     Sat 07 Jun 2025 05:17:09 +0000
Manifest next update:     Mon 09 Jun 2025 05:17:09 +0000
Files and hashes:         1: TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl (hash: RcRr+o9K0/LTdxv9Kn7RUyum192Dfqf7U8JY1pzKztg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                          rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED8A8AR, serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
        Validity
            Not Before: Jun  7 05:17:09 2025 GMT
            Not After : Jun  9 05:17:09 2025 GMT
        Subject: CN=6843cb56-1773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:e8:bb:99:2c:1d:d1:87:02:09:9d:96:0e:
                    b9:48:c7:2a:76:46:bb:14:12:b3:a4:15:d8:b5:7b:
                    7c:b2:fe:9a:8c:35:aa:c1:af:48:1a:04:d8:5f:09:
                    98:df:2e:20:61:7c:e0:fa:5d:cb:ab:70:47:82:22:
                    c4:ec:cc:3d:c0:b9:bb:11:69:fc:7d:3d:11:2e:47:
                    c6:38:35:cf:b3:63:51:f8:7d:8e:05:87:56:12:79:
                    04:b7:a4:63:72:ed:5a:32:49:7b:8d:8a:70:f0:81:
                    60:53:c7:ac:9d:66:e6:dc:18:2d:dd:19:eb:2c:ef:
                    c0:02:b0:7b:4b:b8:47:cf:cb:3e:7c:e4:17:7f:60:
                    02:b4:b8:e9:eb:f6:db:97:bf:0e:0f:4d:c4:af:09:
                    1a:b6:53:37:16:a6:e9:ad:27:2c:fc:17:d2:95:6e:
                    38:20:46:7a:0d:c1:e0:4f:a4:18:c1:d6:18:f8:51:
                    5b:df:7a:e1:27:d9:5e:ad:4d:34:8a:d1:6e:ab:7c:
                    79:a7:97:15:d3:b0:a3:15:53:b2:24:19:e3:d6:a2:
                    9e:c8:ca:a0:b0:98:6f:7a:90:af:fc:2a:37:53:e2:
                    d3:fd:66:c5:24:21:c4:fc:b6:25:ba:5f:90:3e:fb:
                    57:b9:54:90:ef:25:b5:0a:47:99:dd:42:20:d4:1f:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:87:DE:FE:7A:DE:EC:B8:7B:3E:4F:12:0E:DA:28:2E:BD:A6:BA:F7
            X509v3 Authority Key Identifier:
                keyid:4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e9:43:7b:d5:80:2c:65:58:53:f7:78:b1:ea:9e:13:3e:6d:
         e5:75:04:70:61:04:22:c4:28:e1:93:47:b5:39:76:39:f8:c1:
         fa:1f:df:b3:ae:a6:03:c8:b4:a3:f6:8b:2d:a4:f4:f3:cc:37:
         28:d1:3f:64:ac:42:42:f7:ec:8f:32:bc:4e:d0:51:0d:ec:f7:
         77:7e:4b:9c:e1:de:43:4b:c3:8b:8b:32:56:1b:8f:a3:40:d1:
         e0:40:bb:91:60:58:93:72:4e:57:57:79:d1:78:61:b3:40:56:
         07:a4:3e:7b:ad:59:15:7c:27:98:5e:67:43:5b:cf:04:54:6e:
         6f:c3:fc:dd:b8:eb:6b:33:4d:32:2d:b4:01:aa:e6:97:5e:0c:
         85:b9:c7:ec:1c:f1:e7:0d:51:2d:f7:c9:c8:07:58:a0:56:ae:
         78:e4:d0:f6:d1:68:d4:f4:70:e5:74:ea:d9:9c:84:84:60:ad:
         b1:45:67:a2:bf:97:b6:03:61:c5:a7:ee:2b:77:c6:b6:62:5e:
         1c:cc:a0:05:59:8b:07:6c:a2:33:d8:93:4d:05:da:44:5e:57:
         37:4f:8c:6a:ef:cc:e0:15:64:42:b6:47:a6:9c:15:57:88:a5:
         05:06:93:98:75:da:22:04:00:69:f0:65:c9:8a:50:40:0b:d7:
         47:5c:42:0f
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBWjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
RDhBOEFSMTEwLwYDVQQFEyg0RjI2NUJDNTQ1QTE3RTE3QkY4MDlGMTk1NjREMzYx
NjEwOEQ4N0RGMB4XDTI1MDYwNzA1MTcwOVoXDTI1MDYwOTA1MTcwOVowGDEWMBQG
A1UEAxMNNjg0M2NiNTYtMTc3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMSn6LuZLB3RhwIJnZYOuUjHKnZGuxQSs6QV2LV7fLL+mow1qsGvSBoE2F8J
mN8uIGF84Ppdy6twR4IixOzMPcC5uxFp/H09ES5Hxjg1z7NjUfh9jgWHVhJ5BLek
Y3LtWjJJe42KcPCBYFPHrJ1m5twYLd0Z6yzvwAKwe0u4R8/LPnzkF39gArS46ev2
25e/Dg9NxK8JGrZTNxam6a0nLPwX0pVuOCBGeg3B4E+kGMHWGPhRW9964SfZXq1N
NIrRbqt8eaeXFdOwoxVTsiQZ49ainsjKoLCYb3qQr/wqN1Pi0/1mxSQhxPy2Jbpf
kD77V7lUkO8ltQpHmd1CINQfpGcCAwEAAaOCArUwggKxMB0GA1UdDgQWBBS3h97+
et7suHs+TxIO2iguvaa69zAfBgNVHSMEGDAWgBRPJlvFRaF+F7+AnxlWTTYWEI2H
3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUQ4QTgvMEUyQkM2RjZGRTRCMTFFRkJDMUZDNDc5NzYyRTk1MUEvVHlaYnhV
V2hmaGVfZ0o4WlZrMDJGaENOaDk4LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
VHlaYnhVV2hmaGVfZ0o4WlZrMDJGaENOaDk4LmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZFRDhBOC8wRTJCQzZGNkZFNEIxMUVGQkMxRkM0Nzk3NjJFOTUx
QS9UeVpieFVXaGZoZV9nSjhaVmswMkZoQ05oOTgubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHfpQ3vVgCxlWFP3eLHqnhM+beV1BHBhBCLE
KOGTR7U5djn4wfof37OupgPItKP2iy2k9PPMNyjRP2SsQkL37I8yvE7QUQ3s93d+
S5zh3kNLw4uLMlYbj6NA0eBAu5FgWJNyTldXedF4YbNAVgekPnutWRV8J5heZ0Nb
zwRUbm/D/N2462szTTIttAGq5pdeDIW5x+wc8ecNUS33ycgHWKBWrnjk0PbRaNT0
cOV06tmchIRgrbFFZ6K/l7YDYcWn7it3xrZiXhzMoAVZiwdsojPYk00F2kReVzdP
jGrvzOAVZEK2R6acFVeIpQUGk5h12iIEAGnwZcmKUEAL10dcQg8=
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:05:39 2025 by rpki-client