Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
File:                     rlEpNifxvXqfU3iOKmXqBBNGpwI.mft (raw, json)
Hash identifier:          Tok6bPBNTL29XRTa9/oD/1bE3qdLiKkbPzcQ6j0uQAw=
Subject key identifier:   79:B5:0C:B7:8D:02:2F:23:73:6F:65:C6:E6:D0:E3:93:93:5E:12:CF
Authority key identifier: AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02
Certificate issuer:       /CN=F3620C16AR/serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
Certificate serial:       034B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
Manifest number:          033F
Signing time:             Mon 11 Aug 2025 03:51:52 +0000
Manifest this update:     Mon 11 Aug 2025 03:51:51 +0000
Manifest next update:     Wed 13 Aug 2025 03:51:51 +0000
Files and hashes:         1: rlEpNifxvXqfU3iOKmXqBBNGpwI.crl (hash: vH/vC/oCjGlJcVzGfaoo4jf9m+pfKcToc1Y49CChMg4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                          rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620C16AR, serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
        Validity
            Not Before: Aug 11 03:51:51 2025 GMT
            Not After : Aug 13 03:51:51 2025 GMT
        Subject: CN=689968d8-b3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:10:99:88:32:a1:ee:f9:de:9e:04:49:b4:
                    fc:04:09:e7:1c:e6:2c:a9:b3:78:78:6e:7b:67:2a:
                    0f:3d:d1:7c:6a:95:5e:d1:34:ef:86:09:52:72:7a:
                    97:87:c9:18:b6:af:ba:14:8f:a2:7a:47:f9:51:cc:
                    eb:cc:86:0d:3f:6f:e6:12:e5:29:a1:e6:72:a7:7c:
                    12:4f:2f:1b:d2:08:38:00:49:f0:b8:26:c3:90:0c:
                    ba:e5:81:27:12:52:df:15:1e:c8:a8:4d:3a:c7:c7:
                    eb:5b:e2:0b:e6:30:44:b2:a8:cc:0b:2a:a0:0d:e8:
                    50:69:28:6c:16:e0:3d:2f:85:62:f8:52:0f:93:52:
                    2e:1c:a2:e4:02:42:51:17:f5:60:e3:31:61:b6:3b:
                    3e:54:87:66:ab:73:ac:41:20:06:03:3d:20:4c:39:
                    9d:3e:53:05:5f:1b:ee:11:6b:f9:64:54:db:de:13:
                    27:a1:ea:e5:59:d5:8f:fb:55:45:d5:72:b5:63:d0:
                    0c:ce:79:9b:79:c6:5f:73:a3:69:74:37:8d:22:d6:
                    8d:81:71:bc:f7:49:09:5a:d0:5b:db:2e:f1:95:9b:
                    3d:e4:78:fb:51:d5:54:7a:24:b9:8d:35:fd:c1:38:
                    5c:02:5c:17:ed:f5:2c:dc:01:2f:f5:a9:04:5e:e6:
                    6e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B5:0C:B7:8D:02:2F:23:73:6F:65:C6:E6:D0:E3:93:93:5E:12:CF
            X509v3 Authority Key Identifier:
                keyid:AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:dd:fb:53:5a:76:df:6a:0b:37:a2:6e:26:5e:21:54:a7:af:
         4c:da:bc:24:b7:c8:db:b0:51:34:de:12:9f:fe:f4:b8:7a:e6:
         8c:3f:5c:4d:0a:18:cf:0c:92:b2:18:9a:76:aa:06:48:3b:63:
         7a:6b:b5:a9:7a:0d:02:7f:51:25:20:38:70:c3:5b:83:c6:0e:
         19:bd:cc:83:65:3f:5a:b2:2d:29:c9:17:d2:d8:d6:a1:a0:5e:
         e8:47:12:89:02:92:17:b4:09:8b:49:fb:5d:30:33:c4:e4:43:
         77:af:ee:13:6d:63:e5:97:1f:a5:49:0b:0f:82:ab:64:fc:a0:
         17:32:86:86:45:c0:5d:fe:94:04:1e:70:67:19:8c:68:3c:90:
         ec:8b:6c:40:b6:31:04:70:7d:dc:36:48:61:0b:94:03:9a:41:
         a5:86:2f:d7:36:64:38:9e:b0:e3:cf:7a:4d:00:47:8b:55:39:
         12:22:67:30:c6:3b:46:8e:2f:a3:8a:41:33:ad:88:c9:a4:b7:
         55:8f:31:24:b9:46:6a:33:1f:8c:77:1c:f9:c7:2b:2c:7d:db:
         be:f3:f9:2c:01:e8:0c:c8:c7:88:f1:2b:73:1a:b2:ed:a2:fd:
         81:fa:42:6c:28:66:20:29:fa:ec:a7:a7:58:03:6b:ce:a2:16:
         f7:ff:f9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:52:10 2025 by rpki-client