Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
File:                     GDcf6QPvCG9cH_b2hAumd2cmdnA.mft (raw, json)
Hash identifier:          bx0fqPwlnmL4Q5D8vuDJH8ErFogvVuKipOKHKmGo7tY=
Subject key identifier:   58:44:EA:AE:14:C5:89:F3:E9:EA:AD:B3:AC:3F:9F:35:3D:93:4A:E3
Authority key identifier: 18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
Certificate issuer:       /CN=F3655EE4AR/serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
Certificate serial:       0850
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
Manifest number:          084D
Signing time:             Tue 05 Aug 2025 01:46:37 +0000
Manifest this update:     Tue 05 Aug 2025 01:46:37 +0000
Manifest next update:     Thu 07 Aug 2025 01:46:37 +0000
Files and hashes:         1: GDcf6QPvCG9cH_b2hAumd2cmdnA.crl (hash: nzuUDfQpPSOunVr9tJhfn2xqT3Q/xT5jyw1dAqPoUds=)
                          2: F31E6B76755711ED9B93B29DF1222468.roa (hash: NAQ4ruRr3CeKBEbG5bbYSwTINb1GDpCxoruFb42Xz/o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                          rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 Aug 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128 (0x850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AR, serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
        Validity
            Not Before: Aug  5 01:46:37 2025 GMT
            Not After : Aug  7 01:46:37 2025 GMT
        Subject: CN=6891627d-ed57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:c5:ed:c4:84:05:e5:fe:1e:45:c4:43:e2:
                    9d:ea:49:2b:04:ef:b4:86:ea:7d:a1:c3:0f:e0:29:
                    8a:d0:d6:a3:71:35:6f:94:65:9b:a1:11:d8:6a:62:
                    10:84:ed:45:f4:af:06:c6:17:c4:a5:a3:2f:40:b8:
                    bc:8e:54:08:87:c7:4b:f3:3b:b1:8c:77:01:d6:83:
                    2e:0e:b5:cc:38:61:bd:9c:66:ac:f0:ad:9a:b4:38:
                    0e:22:02:88:ef:77:77:ca:16:07:c4:18:f2:97:df:
                    40:e5:5e:b2:db:94:7b:1f:ea:42:92:48:41:7b:55:
                    84:d3:e5:75:d0:73:56:c0:58:75:82:b6:05:c4:47:
                    43:77:60:08:0f:df:31:ba:45:24:57:bc:5b:46:c7:
                    59:8d:81:da:54:fe:7b:2d:cb:b3:e0:91:84:0b:bd:
                    c7:75:ce:69:bc:f5:83:b7:f2:5a:1e:3b:ca:5c:03:
                    16:fb:05:cd:1b:30:3a:44:ae:1c:c9:63:3d:d9:be:
                    61:60:48:68:03:5b:8d:cf:f9:46:a5:2e:47:07:c9:
                    e6:b4:02:8a:ba:e9:a5:ea:ba:f3:03:aa:9a:5f:6b:
                    39:64:c4:65:8b:20:38:fe:fd:49:f1:83:71:76:57:
                    a0:1f:e1:e8:62:44:71:9e:49:ba:be:74:db:01:03:
                    78:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:44:EA:AE:14:C5:89:F3:E9:EA:AD:B3:AC:3F:9F:35:3D:93:4A:E3
            X509v3 Authority Key Identifier:
                keyid:18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a7:15:47:70:9f:82:d2:f2:bd:db:3f:23:93:d5:ce:66:a4:
         07:a9:79:07:fd:48:94:41:f4:94:51:98:fa:c6:d0:3d:d7:f9:
         a8:4a:5e:5f:96:48:37:bb:59:30:cd:05:98:50:52:ec:cb:0a:
         02:51:5a:0a:80:69:23:08:e9:2e:72:90:9b:1a:0a:c5:d9:57:
         95:0f:1b:7c:f5:78:d7:8c:c4:32:62:d8:18:11:71:2b:5b:61:
         ca:0f:0c:6a:19:62:bd:ff:44:14:57:b7:9f:67:8b:ce:8c:65:
         ae:da:71:60:48:e5:10:73:41:a4:bc:f5:54:db:90:84:fe:73:
         91:0f:21:dc:d4:37:77:e5:e7:5c:63:1e:c5:61:d4:d2:a6:40:
         77:c3:68:5f:99:14:fd:8d:b6:21:f1:59:8e:43:cc:62:85:89:
         25:54:cf:cd:c1:53:57:9c:2e:72:f7:cc:4b:33:db:30:a0:c5:
         79:2c:4f:9b:f3:b9:3a:0f:e8:9d:e6:2c:dd:8d:e7:05:c5:4c:
         0c:0d:d0:37:47:68:27:a3:ce:58:c6:ed:4b:6c:e0:49:35:c0:
         bb:9f:bd:7b:52:f1:27:9e:0c:6d:f8:57:2a:a8:e8:10:a8:0b:
         5b:d2:80:62:33:8b:7c:98:21:ad:be:59:97:0b:ac:5e:f7:de:
         6a:da:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:13:58 2025 by rpki-client