Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
File:                     QVvN73HfdO_cZVY4QJM9lPIraRM.mft (raw, json)
Hash identifier:          naNhgD8qClEVpqo9UWdEuU8Uc4NisyDWMTphTPA3p7U=
Subject key identifier:   2D:A6:8F:D3:86:6F:FF:23:08:68:72:92:4B:1B:7A:B4:07:5F:91:94
Authority key identifier: 41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13
Certificate issuer:       /CN=F36374C9AR/serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
Certificate serial:       0D2B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
Manifest number:          0D2A
Signing time:             Sun 10 Aug 2025 01:04:23 +0000
Manifest this update:     Sun 10 Aug 2025 01:04:22 +0000
Manifest next update:     Tue 12 Aug 2025 01:04:22 +0000
Files and hashes:         1: QVvN73HfdO_cZVY4QJM9lPIraRM.crl (hash: geuFwocp5EL82YzCC4rkn8AU5qFgpc/4GIszJpnTmh8=)
                          2: A3321ED8542E11E6BE4E521EF8AEA228.roa (hash: sJ9cmmKEMJXtaW4GTF37G3rJicRaTpT/POSsPQBapsQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                          rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3371 (0xd2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36374C9AR, serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
        Validity
            Not Before: Aug 10 01:04:22 2025 GMT
            Not After : Aug 12 01:04:22 2025 GMT
        Subject: CN=6897f017-5f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:78:34:62:21:de:5c:7d:20:35:51:2d:59:
                    5f:41:48:c2:42:c1:fe:e4:75:24:0f:e2:b3:98:a0:
                    0f:1c:3e:ec:7b:25:78:4e:0f:06:f9:af:cc:98:43:
                    e2:5d:fe:9d:cd:e3:b7:a5:8c:91:7a:c2:78:43:90:
                    c2:cf:b8:19:78:77:88:a7:79:9a:42:f8:d7:cd:89:
                    1e:27:20:d0:01:d2:fb:9e:5e:31:ea:7b:ff:57:7b:
                    76:f7:9f:09:3b:15:f8:9a:65:ca:8a:ac:2b:c2:ba:
                    3b:cf:77:a9:27:3d:c6:85:1a:9b:af:08:b8:bd:48:
                    75:bd:8c:b9:c2:f6:19:a3:d7:f1:53:d4:06:41:62:
                    28:d7:cc:e5:94:27:65:b7:b4:d2:50:e3:8e:4d:e2:
                    5c:b7:70:86:e7:26:45:ee:fa:6a:09:a5:04:99:2c:
                    cc:1a:b0:31:9c:b7:a9:83:19:a4:33:fa:af:c5:92:
                    f3:42:01:70:94:01:cc:7e:75:c6:65:75:ab:f7:03:
                    a6:89:a9:fa:d3:28:f1:34:4b:8a:23:9c:a5:07:c6:
                    57:7e:da:a1:a4:ce:bf:df:6a:4e:99:88:45:5b:fb:
                    73:54:77:b1:02:88:ac:d0:7a:25:d7:7f:50:c3:a7:
                    67:fe:5a:fb:24:81:4a:19:ad:65:54:f9:86:12:ee:
                    3b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A6:8F:D3:86:6F:FF:23:08:68:72:92:4B:1B:7A:B4:07:5F:91:94
            X509v3 Authority Key Identifier:
                keyid:41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:21:d3:d6:b0:e3:67:0e:9e:7d:6b:f5:ab:56:6b:90:bb:21:
         35:19:d0:f1:3e:21:7e:e6:dd:0e:6b:0d:f1:f2:a9:68:48:d0:
         e9:c6:4d:9a:22:93:70:a4:11:29:6b:93:84:0a:0f:06:49:36:
         d1:76:b1:0a:5d:5a:7e:a6:29:79:45:3b:bf:ca:26:b2:e9:77:
         e6:20:e7:73:1d:a0:17:45:c7:0c:b0:14:ef:d5:44:e8:8e:96:
         f8:51:81:af:76:a7:63:e7:b0:ad:ea:37:3d:f6:64:99:7b:b4:
         2c:7b:4e:c1:da:62:a0:5c:55:72:70:4b:96:54:ff:82:de:03:
         ad:38:51:7a:dc:a6:c4:d9:1b:52:c8:fa:8c:a5:5c:b0:6d:3e:
         f5:df:7e:aa:d7:8a:99:47:9f:d2:d8:eb:ef:97:85:ff:48:96:
         16:e2:8a:8c:b6:c8:79:d5:4b:86:1e:a5:0a:36:18:76:49:ee:
         db:e3:a2:d6:ff:86:c0:87:64:c5:06:c6:43:f1:de:78:b2:4a:
         86:fe:2b:03:db:30:7a:19:90:e2:83:18:23:6c:be:77:06:22:
         ab:6c:f9:dd:81:4b:42:b3:32:01:01:35:80:81:c6:01:35:63:
         1d:e5:9a:4e:05:26:17:a2:7b:23:32:fc:6b:ba:84:df:1d:4d:
         c0:b9:c2:20
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDSswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Mzc0QzlBUjExMC8GA1UEBRMoNDE1QkNERUY3MURGNzRFRkRDNjU1NjM4NDA5MzNE
OTRGMjJCNjkxMzAeFw0yNTA4MTAwMTA0MjJaFw0yNTA4MTIwMTA0MjJaMBgxFjAU
BgNVBAMTDTY4OTdmMDE3LTVmODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7/Xg0YiHeXH0gNVEtWV9BSMJCwf7kdSQP4rOYoA8cPux7JXhODwb5r8yY
Q+Jd/p3N47eljJF6wnhDkMLPuBl4d4ineZpC+NfNiR4nINAB0vueXjHqe/9Xe3b3
nwk7FfiaZcqKrCvCujvPd6knPcaFGpuvCLi9SHW9jLnC9hmj1/FT1AZBYijXzOWU
J2W3tNJQ445N4ly3cIbnJkXu+moJpQSZLMwasDGct6mDGaQz+q/FkvNCAXCUAcx+
dcZldav3A6aJqfrTKPE0S4ojnKUHxld+2qGkzr/fak6ZiEVb+3NUd7ECiKzQeiXX
f1DDp2f+WvskgUoZrWVU+YYS7jt/AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQULaaP
04Zv/yMIaHKSSxt6tAdfkZQwHwYDVR0jBBgwFoAUQVvN73HfdO/cZVY4QJM9lPIr
aRMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM3NEM5LzUwMjRERTQyNTQyRTExRTZCOEJFMDcxRUY4QUVBMjI4L1FWdk43
M0hmZE9fY1pWWTRRSk05bFBJcmFSTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1FWdk43M0hmZE9fY1pWWTRRSk05bFBJcmFSTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Mzc0QzkvNTAyNERFNDI1NDJFMTFFNkI4QkUwNzFFRjhBRUEy
MjgvUVZ2TjczSGZkT19jWlZZNFFKTTlsUElyYVJNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2IdPWsONnDp59a/WrVmuQuyE1GdDxPiF+
5t0Oaw3x8qloSNDpxk2aIpNwpBEpa5OECg8GSTbRdrEKXVp+pil5RTu/yiay6Xfm
IOdzHaAXRccMsBTv1UTojpb4UYGvdqdj57Ct6jc99mSZe7Qse07B2mKgXFVycEuW
VP+C3gOtOFF63KbE2RtSyPqMpVywbT71336q14qZR5/S2Ovvl4X/SJYW4oqMtsh5
1UuGHqUKNhh2Se7b46LW/4bAh2TFBsZD8d54skqG/isD2zB6GZDigxgjbL53BiKr
bPndgUtCszIBATWAgcYBNWMd5ZpOBSYXonsjMvxruoTfHU3AucIg
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:21 2025 by rpki-client