Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
File:                     BWiAuMNgRKWRJvERqjVFvCDBKGI.mft (raw, json)
Hash identifier:          xeR//AcnVb/fASXkkVc4v6eYZ/cJ/GcbnzefeiKuM+U=
Subject key identifier:   7B:04:CC:0F:6B:0B:6A:CE:9A:68:3A:89:36:4C:1E:49:18:FB:9C:1F
Authority key identifier: 05:68:80:B8:C3:60:44:A5:91:26:F1:11:AA:35:45:BC:20:C1:28:62
Certificate issuer:       /CN=F36FC328AR/serialNumber=056880B8C36044A59126F111AA3545BC20C12862
Certificate serial:       0590
Authority info access:    rsync://rpki.afrinic.net/repository/arin/BWiAuMNgRKWRJvERqjVFvCDBKGI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
Manifest number:          058F
Signing time:             Tue 16 Sep 2025 02:32:44 +0000
Manifest this update:     Tue 16 Sep 2025 02:32:43 +0000
Manifest next update:     Thu 18 Sep 2025 02:32:43 +0000
Files and hashes:         1: BWiAuMNgRKWRJvERqjVFvCDBKGI.crl (hash: mKT6IYzfuVKociLzAdeJtR51WNRYH12WKdGLVNlDjbg=)
                          2: 55887142513411EC89072F3CD8A014CE.roa (hash: 91dP+eWBXdfxjb40Gl2fUEl4O+W0qFvbAbBEH4kmyjk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
                          rsync://rpki.afrinic.net/repository/arin/BWiAuMNgRKWRJvERqjVFvCDBKGI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1424 (0x590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC328AR, serialNumber=056880B8C36044A59126F111AA3545BC20C12862
        Validity
            Not Before: Sep 16 02:32:43 2025 GMT
            Not After : Sep 18 02:32:43 2025 GMT
        Subject: CN=68c8cc4c-c944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e3:70:7d:2b:88:9b:bb:58:c4:2e:e4:ba:21:
                    8f:55:6f:6b:06:e3:ec:32:46:67:d4:f9:63:62:9d:
                    5b:39:3b:e9:30:91:be:c6:c1:a3:d4:e4:f5:3c:01:
                    fc:29:d7:4e:50:4f:21:7c:58:66:eb:5f:1d:62:46:
                    75:33:30:d4:74:0b:2b:94:cd:a1:f6:33:70:4c:be:
                    d1:54:a2:cf:d0:8e:4c:7d:6c:f5:1e:4c:68:41:47:
                    de:09:c0:98:50:6d:82:f5:e3:2f:34:47:ab:8f:92:
                    1f:a1:30:ed:c2:e8:c2:2b:53:ee:da:8b:ed:fe:7c:
                    2d:70:46:28:7d:2a:f4:b3:58:e5:34:60:2d:4c:ac:
                    e9:b2:2c:33:45:48:da:ae:31:6b:84:8a:27:a4:fd:
                    82:58:14:89:f6:87:87:0a:41:e0:9b:e1:a2:58:b4:
                    45:d5:df:b9:8b:00:d4:2f:79:59:fe:11:fc:27:b0:
                    a2:25:37:e0:70:b7:7c:c4:79:89:43:6b:31:49:2d:
                    c3:71:f3:6b:b3:55:dd:10:89:6c:59:6d:85:d9:fc:
                    8a:fb:e9:91:f3:6c:a1:7b:99:3a:1b:65:8d:76:8a:
                    80:97:8b:6d:55:5f:da:85:35:d1:4c:92:5a:d4:28:
                    76:f0:0b:01:f2:95:16:03:9a:84:48:71:95:a8:61:
                    2c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:04:CC:0F:6B:0B:6A:CE:9A:68:3A:89:36:4C:1E:49:18:FB:9C:1F
            X509v3 Authority Key Identifier:
                keyid:05:68:80:B8:C3:60:44:A5:91:26:F1:11:AA:35:45:BC:20:C1:28:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/BWiAuMNgRKWRJvERqjVFvCDBKGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8b:76:34:e6:7e:ff:0a:4d:a6:57:51:46:93:a1:02:0a:a4:
         b8:39:9e:40:8e:b5:2a:02:4a:19:21:f9:34:61:d7:7c:49:c1:
         ff:6f:78:40:3f:04:a3:df:28:08:51:1c:a1:36:92:63:5e:22:
         35:49:39:e7:5e:6e:fa:31:ab:cd:35:f6:25:ea:32:44:ce:08:
         b3:1d:fe:a5:a5:66:4d:f0:1d:29:f8:5b:7b:32:e1:b5:ea:57:
         09:a1:39:91:2a:66:23:19:d3:97:e5:db:a4:56:52:27:8c:e3:
         cc:84:c2:5c:23:4c:2c:19:bd:38:d2:a7:71:b8:f5:e2:5f:c9:
         d5:dc:af:a6:d7:3c:9c:1d:85:9b:68:84:28:7c:e8:a6:68:f9:
         38:51:cb:74:ea:d5:68:98:4a:7a:9d:98:20:16:65:c6:92:7a:
         4e:a5:9e:8a:dd:f7:03:0c:71:0a:21:b3:14:ca:7c:60:85:d1:
         0e:16:12:8e:f0:2f:6a:2d:0d:65:93:4c:5e:76:e8:2e:98:ae:
         3e:20:a7:a0:ef:b5:6d:9b:ef:4c:4b:7d:cc:64:d8:d0:d1:83:
         b2:59:1b:26:c8:32:db:0b:e1:9d:c4:35:5e:f7:68:80:a1:6f:
         7d:f1:42:35:78:f3:61:23:b7:ca:26:ae:49:fd:f1:c6:5a:41:
         9a:19:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:45:51 2025 by rpki-client