Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
File:                     qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft (raw, json)
Hash identifier:          0ji7M3NrKpvT7dPojzDDwYv2/+DK6wr658iO5utnkpE=
Subject key identifier:   FF:5D:9C:42:82:3D:92:65:AF:17:11:05:64:3D:C5:F7:B7:1D:EC:42
Authority key identifier: AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A
Certificate issuer:       /CN=F3676EF0AR/serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
Certificate serial:       0129
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
Manifest number:          0128
Signing time:             Mon 16 Jun 2025 04:54:09 +0000
Manifest this update:     Mon 16 Jun 2025 04:54:08 +0000
Manifest next update:     Wed 18 Jun 2025 04:54:08 +0000
Files and hashes:         1: qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl (hash: gtTaFYAQBB/RlHFVZj2yDAMwY5EiR9/hRw1qQyiVvkI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                          rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676EF0AR, serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
        Validity
            Not Before: Jun 16 04:54:08 2025 GMT
            Not After : Jun 18 04:54:08 2025 GMT
        Subject: CN=684fa371-2757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:89:45:63:81:ec:59:e6:93:2b:48:96:38:
                    07:75:11:cd:46:0f:71:9f:bd:7d:22:b5:e9:ae:21:
                    ac:db:57:fd:a5:88:37:d4:c1:28:02:ba:20:45:12:
                    b9:5c:d0:c2:48:2a:13:0f:5f:03:82:cc:2a:7d:4c:
                    e8:7a:11:c2:9a:c9:11:cf:c6:2a:6f:44:34:27:8e:
                    2f:0c:03:b1:4c:c3:68:b0:f0:73:60:08:93:3a:55:
                    72:45:30:a7:ec:7b:4f:06:e0:78:7e:4e:6c:3a:c2:
                    e1:98:11:c1:a0:37:a9:03:23:2a:72:f7:c3:38:15:
                    6a:5e:27:2f:ec:6d:50:40:61:87:ba:f4:37:26:93:
                    a0:bd:0e:33:a6:dd:99:54:ee:2f:9e:74:2d:3b:cd:
                    73:e5:bf:b3:4d:4c:1b:86:a3:70:03:06:db:b7:70:
                    ad:a0:00:86:9e:59:62:e5:3b:46:bc:87:62:4a:e2:
                    eb:b1:39:9d:02:d0:16:75:6d:9b:58:61:cf:e3:9d:
                    48:90:da:f1:8f:0a:bc:a6:f2:f3:fd:d2:3a:ff:88:
                    00:99:59:f6:e4:01:64:8d:6d:1a:10:0a:ff:da:a6:
                    1c:cf:a0:c6:03:6f:d3:9b:f5:a4:d5:3a:ea:f3:3f:
                    54:25:dd:33:0f:da:cb:8a:de:8f:5f:80:98:e2:e6:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5D:9C:42:82:3D:92:65:AF:17:11:05:64:3D:C5:F7:B7:1D:EC:42
            X509v3 Authority Key Identifier:
                keyid:AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:a6:27:e8:ff:c6:d3:38:70:0d:d4:32:23:b2:0d:48:28:
         4c:8f:ae:ef:5b:92:d3:c2:bd:f5:11:d7:d0:95:92:c1:e4:78:
         3f:99:ef:a3:ed:75:7c:98:c8:4b:ad:ef:14:97:cd:a8:7f:e0:
         f9:18:27:b4:49:fa:4c:e1:b0:9c:cd:29:10:bf:cb:a7:a8:d1:
         2a:61:e5:6e:76:07:a8:97:87:e8:55:2b:23:1c:90:df:77:e6:
         98:a1:76:a7:bd:04:25:39:ed:cf:bc:6a:93:1e:5d:80:e2:0f:
         e2:30:04:8d:d7:63:4c:5d:e4:bd:b6:03:8e:b6:22:03:3b:a1:
         2d:3b:21:ec:04:c3:97:0c:01:6c:72:70:6a:f8:9f:69:e1:42:
         f8:17:df:4c:ac:52:79:7e:ea:96:62:0e:11:ad:a0:de:90:da:
         50:ec:01:62:b1:4b:94:a0:33:d9:e3:62:10:5c:aa:81:36:95:
         1d:69:bc:e1:45:be:4e:7e:c7:87:a3:a3:ca:7a:7f:f2:f6:fd:
         8a:2c:2f:12:bb:ce:85:97:05:65:10:9a:27:c0:91:c3:d1:bb:
         86:9b:7c:68:8c:ed:60:c2:22:bd:08:d4:4e:44:22:38:2f:62:
         6b:dd:a1:f4:52:8e:22:82:9e:5f:e3:aa:b3:fc:2c:32:15:31:
         c6:e0:9c:be
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICASkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzZFRjBBUjExMC8GA1UEBRMoQUE0QThGRkYxQjE4MDYyNEQ3NTEwMDNEMjE2NUFD
QUZBRTkwNDM2QTAeFw0yNTA2MTYwNDU0MDhaFw0yNTA2MTgwNDU0MDhaMBgxFjAU
BgNVBAMTDTY4NGZhMzcxLTI3NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1q4lFY4HsWeaTK0iWOAd1Ec1GD3GfvX0itemuIazbV/2liDfUwSgCuiBF
Erlc0MJIKhMPXwOCzCp9TOh6EcKayRHPxipvRDQnji8MA7FMw2iw8HNgCJM6VXJF
MKfse08G4Hh+Tmw6wuGYEcGgN6kDIypy98M4FWpeJy/sbVBAYYe69Dcmk6C9DjOm
3ZlU7i+edC07zXPlv7NNTBuGo3ADBtu3cK2gAIaeWWLlO0a8h2JK4uuxOZ0C0BZ1
bZtYYc/jnUiQ2vGPCrym8vP90jr/iACZWfbkAWSNbRoQCv/aphzPoMYDb9Ob9aTV
OurzP1Ql3TMP2suK3o9fgJji5jijAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU/12c
QoI9kmWvFxEFZD3F97cd7EIwHwYDVR0jBBgwFoAUqkqP/xsYBiTXUQA9IWWsr66Q
Q2owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc2RUYwLzg3OTg3NzQ0NkFBQTExRUY4NDk2NjFBNzc2MkU5NTFBL3FrcVBf
eHNZQmlUWFVRQTlJV1dzcjY2UVEyby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3FrcVBfeHNZQmlUWFVRQTlJV1dzcjY2UVEyby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzZFRjAvODc5ODc3NDQ2QUFBMTFFRjg0OTY2MUE3NzYyRTk1
MUEvcWtxUF94c1lCaVRYVVFBOUlXV3NyNjZRUTJvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLwaYn6P/G0zhwDdQyI7INSChMj67vW5LT
wr31EdfQlZLB5Hg/me+j7XV8mMhLre8Ul82of+D5GCe0SfpM4bCczSkQv8unqNEq
YeVudgeol4foVSsjHJDfd+aYoXanvQQlOe3PvGqTHl2A4g/iMASN12NMXeS9tgOO
tiIDO6EtOyHsBMOXDAFscnBq+J9p4UL4F99MrFJ5fuqWYg4RraDekNpQ7AFisUuU
oDPZ42IQXKqBNpUdabzhRb5OfseHo6PKen/y9v2KLC8Su86FlwVlEJonwJHD0buG
m3xojO1gwiK9CNRORCI4L2Jr3aH0Uo4igp5f46qz/CwyFTHG4Jy+
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:13:43 2025 by rpki-client