Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
File:                     fitobmq6qC0Tpu6fS-fmmmuN_3k.mft (raw, json)
Hash identifier:          sfqHhJeyawUCRrA3bepnxoZnapA1BDMSnaaOHF3V4s0=
Subject key identifier:   1D:1C:36:65:5A:84:B0:DB:FD:21:CD:C4:8D:EF:5E:23:3C:41:75:01
Authority key identifier: 7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79
Certificate issuer:       /CN=F366AE59AR/serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
Certificate serial:       01FB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
Manifest number:          01FA
Signing time:             Tue 12 Aug 2025 04:27:48 +0000
Manifest this update:     Tue 12 Aug 2025 04:27:47 +0000
Manifest next update:     Thu 14 Aug 2025 04:27:47 +0000
Files and hashes:         1: fitobmq6qC0Tpu6fS-fmmmuN_3k.crl (hash: df7e9gFK7eA4xwWiRqcn9+45mp30OM+R7PkBUjWQOC8=)
                          2: D55071E2F57711EE9C79B75F775412E6.roa (hash: JwIZwppDkh7nSLuQ5FmIaDKSeTXhtwFxqvQi4jhkWJQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                          rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 Aug 2025 04:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AR, serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
        Validity
            Not Before: Aug 12 04:27:47 2025 GMT
            Not After : Aug 14 04:27:47 2025 GMT
        Subject: CN=689ac2c3-87de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:72:74:cd:72:35:38:34:1b:45:79:1b:bd:9f:
                    40:db:7c:c5:b3:9b:7f:75:2f:15:8b:23:e9:78:c1:
                    7f:99:db:03:ec:6f:f8:41:c9:af:e5:b7:d8:15:da:
                    d9:58:7d:ff:6f:81:3f:45:94:71:90:00:03:42:59:
                    42:75:94:a7:1f:e4:21:33:1c:8a:59:63:32:81:6f:
                    d4:20:f5:5b:66:f5:3a:42:39:bb:ff:0d:62:be:be:
                    6d:6c:42:5c:14:a5:b8:78:23:3f:a1:ea:0c:e5:c8:
                    d8:38:93:5a:0c:4e:cd:09:ba:1e:57:e6:86:b2:ae:
                    4e:38:0d:f4:5c:06:47:e5:18:1d:e1:f7:1e:40:b3:
                    76:74:be:66:9d:f5:03:eb:b6:e9:34:d3:50:31:0a:
                    11:62:61:15:fb:29:0b:1e:79:2b:1c:c2:d2:36:d2:
                    b2:4c:71:fe:4c:1f:51:bd:e6:44:fe:0d:8e:60:e0:
                    c0:c6:51:08:c1:a5:4e:e3:72:92:3c:ce:e7:ed:ef:
                    8a:a4:28:86:34:b4:12:de:22:f7:dc:53:e0:35:bc:
                    1e:e0:8d:a1:d7:7a:86:86:10:e2:d3:2f:a5:6a:f9:
                    bf:6d:63:58:d1:1c:1f:b0:8b:90:4f:ce:23:b4:0b:
                    0c:37:76:53:f2:a2:ff:d1:34:27:42:45:54:ab:58:
                    e6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1C:36:65:5A:84:B0:DB:FD:21:CD:C4:8D:EF:5E:23:3C:41:75:01
            X509v3 Authority Key Identifier:
                keyid:7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b4:9f:32:67:9b:ef:84:de:b5:50:65:a8:6b:df:ba:8d:ba:
         82:a6:54:67:55:53:3d:cc:e4:41:60:f5:a7:34:01:4a:83:b3:
         ff:c4:0d:10:c3:ad:c5:0b:2a:62:ef:eb:85:25:01:e7:94:46:
         ca:f7:0e:80:d1:44:b0:08:08:9a:bc:c3:ed:77:08:05:e0:96:
         31:f1:5c:8b:41:10:b5:44:3b:40:2d:0d:ae:34:15:c5:20:7a:
         a6:b1:de:c3:e2:47:ef:4c:e1:30:6f:09:ab:8f:7a:05:b3:6e:
         4b:39:e8:d9:93:39:2d:77:fa:6e:81:c8:dc:4a:f4:4c:56:91:
         2e:a3:bb:77:f0:79:38:cf:ff:ca:10:31:7a:87:ec:bd:35:0f:
         0d:5f:3e:c3:20:92:c2:3e:1a:7a:dd:30:f5:7e:ae:e9:5a:1e:
         c5:41:64:32:e3:13:c5:71:e5:47:82:e7:7b:e5:81:6f:87:2c:
         c3:a7:db:4d:3b:a6:46:1b:e6:d5:cc:d2:eb:1d:7c:09:9b:e5:
         e3:7e:90:7c:36:82:70:3b:87:ec:ed:35:7e:f7:82:47:d6:1d:
         db:6a:4a:45:fc:9f:33:28:79:90:67:d1:23:96:c9:b5:52:fa:
         2c:eb:52:ed:17:e2:be:62:31:c1:9d:47:e0:07:ad:e1:e7:10:
         9c:23:4a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:23:29 2025 by rpki-client