Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
File:                     3e9RyKD_hVBdng5v-gInbCpVrug.mft (raw, json)
Hash identifier:          6v7l081OgG7oxJOek7A9Uz9PET9mH6Yc1Ue0hAcfNM8=
Subject key identifier:   90:87:68:AE:E1:C0:DB:7C:51:6B:F3:32:77:1F:75:FE:43:0C:33:5E
Authority key identifier: DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8
Certificate issuer:       /CN=F36FBB68AR/serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
Certificate serial:       06C8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
Manifest number:          06C4
Signing time:             Tue 16 Sep 2025 02:02:09 +0000
Manifest this update:     Tue 16 Sep 2025 02:02:08 +0000
Manifest next update:     Thu 18 Sep 2025 02:02:08 +0000
Files and hashes:         1: 3e9RyKD_hVBdng5v-gInbCpVrug.crl (hash: GUppV7CvcTpWhwlwpyOKpBRMjkGEIx2UtlY6nMi4Vqw=)
                          2: 8EB8874C767711EB81CF8371F8AEA228.roa (hash: a5Ya8AZMPcr4yo5onV+OXArWF7aJzeoyFelL2j6STfo=)
                          3: A8B2187C767511EBB8015C6FF8AEA228.roa (hash: +55ryPzqgEQMEpzdUbqmX7lkwQdExVhKk9NqHf4i0Lk=)
                          4: 1E3F561E8B1A11EBB0DA3D71F8AEA228.roa (hash: Cpd4zmkYKicudOUgZJe6/OaQ296nySd++X2fdJd/rUU=)
                          5: F8B4E3247D9E11EB83704925F8AEA228.roa (hash: 63CDlb9OzE0Ed+gaeo+vCDqqodWQ+GqMecV9r4cwpCQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                          rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBB68AR, serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
        Validity
            Not Before: Sep 16 02:02:08 2025 GMT
            Not After : Sep 18 02:02:08 2025 GMT
        Subject: CN=68c8c521-71a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:ae:1e:cf:04:32:77:4e:86:33:79:fb:36:
                    b0:63:a0:e7:56:c4:ec:92:60:eb:1d:50:4c:47:5e:
                    bf:b9:8f:0e:f1:bc:b3:8f:ee:74:86:37:c3:a2:18:
                    1f:d8:ef:27:ee:1d:13:31:8b:16:8a:87:41:76:f0:
                    2a:9c:28:12:35:24:fc:27:f8:fc:af:e8:91:cc:03:
                    3a:35:80:69:59:6f:cc:f7:44:54:75:35:a6:14:57:
                    69:e6:37:16:04:00:f6:b7:29:93:30:ba:1d:38:bd:
                    fc:34:cb:9a:ca:23:16:13:ca:f3:95:9e:6b:0a:f1:
                    48:8d:23:16:80:ce:62:e7:dc:59:79:91:d2:f7:4b:
                    a1:df:67:2c:9e:df:98:44:b2:34:1c:26:7e:40:46:
                    d3:7a:bc:72:09:1f:1d:1d:a9:70:2b:9b:ea:5b:e7:
                    91:8c:99:68:80:18:27:45:6a:89:70:85:86:47:eb:
                    fe:7b:2b:4c:9b:98:d3:7b:c8:bd:a7:64:c5:ea:ee:
                    84:50:df:c4:96:cf:a5:36:7b:f6:05:b2:5a:bd:82:
                    5a:83:59:3b:39:b9:6f:14:5e:65:7a:53:86:34:e0:
                    69:8c:f2:36:d0:6f:5d:fe:d7:63:82:d0:91:ec:3c:
                    05:14:87:11:9e:67:48:f9:4c:38:b3:2e:3e:0c:54:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:87:68:AE:E1:C0:DB:7C:51:6B:F3:32:77:1F:75:FE:43:0C:33:5E
            X509v3 Authority Key Identifier:
                keyid:DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b5:36:01:ee:eb:70:fb:09:27:fa:42:8f:66:e8:0d:85:46:
         88:97:21:56:13:8e:36:c1:e3:b6:e8:df:13:bb:77:6f:a7:f0:
         de:ea:ec:57:80:ea:b5:e1:11:4d:e7:91:c3:ef:03:bc:82:b5:
         27:69:3e:84:f7:58:62:9a:d6:c7:7f:23:81:12:b3:cb:16:77:
         4c:fd:6b:4b:91:e0:59:85:93:da:0e:b1:26:05:d6:24:bf:55:
         60:ce:c5:9b:0c:e4:a1:3d:e2:9b:15:5f:89:00:1e:17:8e:bd:
         c0:db:f9:d0:c8:f8:54:72:c4:dd:ab:66:0d:82:ee:fb:59:c8:
         2e:bf:3f:e1:00:66:44:ba:cf:b7:87:3b:e9:a7:7f:ae:36:5f:
         9c:8a:fa:77:af:10:e5:19:a0:db:62:12:66:b4:22:58:9f:d9:
         71:c4:2d:e3:c7:39:56:29:29:0f:c6:97:c9:64:49:3b:b6:db:
         97:a4:f2:f9:2a:33:c9:90:12:9e:e9:16:bb:4d:59:1f:bc:55:
         58:88:36:2e:91:c7:19:0a:80:d0:cf:ef:73:fc:84:dc:c4:df:
         4f:1e:9c:6c:a0:bd:73:67:82:83:1d:81:0a:96:eb:04:a7:8f:
         9d:ed:c7:b0:b8:d9:ce:8c:27:62:12:be:6d:ec:8f:9f:00:d6:
         f6:ea:d2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:45:47 2025 by rpki-client