Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
File:                     kjOEThK8fu30Ns4cyZ6uITZHJkc.mft (raw, json)
Hash identifier:          UeChW0LQsYej9QT+QYdo4ybCOw652yTmz/PQYXeeFpM=
Subject key identifier:   F1:51:8D:E7:3F:E3:41:D4:6A:5F:2E:7E:A0:42:06:16:2B:6F:B5:41
Authority key identifier: 92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47
Certificate issuer:       /CN=F36F8DABAR/serialNumber=9233844E12BC7EEDF436CE1CC99EAE2136472647
Certificate serial:       0B94
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
Manifest number:          0B8E
Signing time:             Tue 16 Sep 2025 01:09:41 +0000
Manifest this update:     Tue 16 Sep 2025 01:09:41 +0000
Manifest next update:     Thu 18 Sep 2025 01:09:41 +0000
Files and hashes:         1: kjOEThK8fu30Ns4cyZ6uITZHJkc.crl (hash: RxPQ9jp7zM5J2Bx0AMqFeYrrmAI2n1O/339FLRo6Gg0=)
                          2: DC9DA0E4D58F11EEB154057C775412E6.roa (hash: gp7fukfD5fPb1a+zTWjX6E2Nn206G89h7J8+rzHmk5o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
                          rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2964 (0xb94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8DABAR, serialNumber=9233844E12BC7EEDF436CE1CC99EAE2136472647
        Validity
            Not Before: Sep 16 01:09:41 2025 GMT
            Not After : Sep 18 01:09:41 2025 GMT
        Subject: CN=68c8b8d5-20a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:9f:3d:80:00:8b:15:c7:82:5f:c7:f8:8a:
                    85:e4:a9:b0:5e:24:37:44:e7:df:79:bd:2b:1b:cc:
                    80:d3:85:fd:b5:81:dc:3f:49:fa:5b:5c:51:e8:43:
                    ec:6f:a7:2e:79:a7:37:5f:ad:44:72:c4:a8:02:c8:
                    f7:1d:e9:96:57:fa:d9:35:9e:a2:7a:61:00:21:f7:
                    0b:b0:bd:06:e3:9b:8c:e0:4b:d5:53:ce:8d:55:80:
                    5e:4b:32:65:f6:91:20:8a:2e:f6:c9:98:e4:50:eb:
                    66:2d:58:52:b0:45:35:eb:d9:02:26:97:eb:1c:29:
                    82:fa:21:06:14:47:67:df:54:64:16:2a:19:00:f5:
                    fe:42:5f:a3:91:22:00:7b:2f:64:a3:75:19:78:9c:
                    61:cf:1c:33:ce:42:df:4d:c4:a4:e8:57:0e:48:45:
                    fe:a3:82:30:2b:3f:91:a2:cd:ad:c3:6d:a1:54:77:
                    f7:2e:6f:d6:34:33:5a:bd:dd:f0:a6:e4:d0:27:43:
                    80:c8:24:20:93:90:83:92:6a:e1:85:63:90:5a:d2:
                    5d:26:af:7c:73:ff:d8:33:28:04:3e:69:3d:db:4b:
                    62:83:58:2a:16:49:b6:63:a1:34:f0:3a:33:cd:eb:
                    d3:20:cd:e3:70:17:6c:2b:e6:8f:95:f5:e7:7a:f8:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:51:8D:E7:3F:E3:41:D4:6A:5F:2E:7E:A0:42:06:16:2B:6F:B5:41
            X509v3 Authority Key Identifier:
                keyid:92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b4:a2:5e:cb:6d:e9:29:81:1d:d8:63:79:15:b9:9c:fa:13:
         00:b6:82:d4:e9:a4:cb:5b:60:cf:71:f5:87:ab:15:56:63:e7:
         76:df:27:8e:9c:27:49:fa:c9:45:c5:09:da:62:95:56:e6:24:
         57:d6:ef:da:c0:a2:b7:be:b8:4e:90:a2:02:26:0c:7c:e8:06:
         2f:5a:66:aa:c7:f8:e3:cd:09:87:e7:90:84:1c:a2:95:93:42:
         aa:32:2a:28:7f:4a:b0:d7:03:8f:4e:f4:c4:d3:83:5e:ed:30:
         7b:19:df:49:68:c1:35:4d:b9:11:66:bf:14:56:3a:07:91:d5:
         2e:3a:38:a9:f6:65:cc:a4:7a:de:64:20:38:1c:1f:a2:d8:c0:
         9b:81:7e:d1:33:d4:4a:8b:94:b8:ec:ad:01:0d:d4:11:b6:e8:
         26:80:a6:3e:2d:c8:67:fc:ae:76:5c:14:a2:c4:5e:17:e5:7d:
         0b:e3:58:92:d1:9b:f5:0c:72:0f:db:9c:28:52:72:fa:91:9d:
         79:b6:2d:94:6e:80:72:e0:13:61:f6:a9:36:e7:fc:6e:59:4a:
         09:3d:02:0e:66:e2:9c:10:a3:76:34:52:d8:c6:0e:38:85:c7:
         33:ec:0a:b7:89:5e:dd:7f:9c:49:7b:c4:5c:55:9b:9c:f8:45:
         d3:30:38:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:46:17 2025 by rpki-client