Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          sbSKtaq+dQf1RxmucXtd0Szt5+224WRj+smRoWFchJc=
Subject key identifier:   24:A3:60:73:87:7C:C0:C3:09:A7:3D:28:2F:2C:83:14:B0:58:B0:5C
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0D27
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0D24
Signing time:             Sat 09 Aug 2025 01:04:52 +0000
Manifest this update:     Sat 09 Aug 2025 01:04:51 +0000
Manifest next update:     Mon 11 Aug 2025 01:04:51 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: wajcArjCIT9CkEIcEl6ND7zO8v5UL5T8PyazPwOLLX8=)
                          2: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
                          3: B72B3B7459DA11EC8F6187BD5A40D577.roa (hash: lX5w/V9IxiCR5OIdQ46QZvuvbFy5St8N0ELixEctQHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3367 (0xd27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Aug  9 01:04:51 2025 GMT
            Not After : Aug 11 01:04:51 2025 GMT
        Subject: CN=68969eb4-da29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3f:20:f9:42:e3:72:d8:58:83:b7:27:2e:1a:
                    f9:f5:91:bd:51:00:1f:6f:cc:fa:01:ff:09:68:f8:
                    75:12:fd:45:c4:97:b5:f0:c8:d4:45:6b:13:62:4d:
                    53:25:39:64:fa:d1:1e:b9:80:8e:1a:04:8d:9c:19:
                    2b:fd:88:db:43:9e:18:81:20:b4:b1:c8:72:af:f1:
                    3c:16:76:4f:7c:c4:53:99:52:de:dd:f8:15:90:16:
                    f0:c4:88:f4:80:6e:89:3a:7e:a0:f7:90:eb:5f:ed:
                    3c:8e:7f:09:29:ed:f2:7c:ab:15:63:6a:5e:a2:2b:
                    36:13:b2:b9:23:97:43:f7:72:62:1c:c9:53:9d:88:
                    bd:20:f5:76:40:88:7d:d8:d3:94:8d:56:cc:16:b0:
                    ca:1d:cb:4b:ee:bf:fa:58:3f:e9:61:b1:06:6c:1e:
                    dd:04:63:56:35:91:87:8c:fc:5a:c4:db:8d:5f:05:
                    57:81:a2:49:fd:36:fe:ce:f1:25:0e:9e:2c:7c:7e:
                    f6:f7:79:ad:df:f4:cf:60:17:c5:c2:49:fc:5c:03:
                    5f:83:f9:8a:b1:58:5e:36:6f:c9:38:97:12:f8:68:
                    0b:66:c7:99:6f:4a:03:78:b5:e8:cd:35:25:a1:b4:
                    39:97:28:7c:ba:c7:30:60:4e:a1:77:37:d2:8d:b0:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A3:60:73:87:7C:C0:C3:09:A7:3D:28:2F:2C:83:14:B0:58:B0:5C
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:93:a0:ed:e3:53:c0:50:48:92:b0:c1:85:12:78:2e:49:7a:
         a5:d7:2a:32:17:64:81:e3:34:81:4b:d2:dd:54:a3:9a:59:78:
         68:01:2c:c0:03:48:df:11:c8:18:35:2f:69:5f:a1:e9:25:aa:
         5c:19:4d:ca:ef:56:26:12:3a:cc:72:f2:26:9d:80:07:5b:3b:
         c9:34:4b:11:9f:c0:d2:2d:eb:a9:90:dc:53:d6:f0:37:37:4b:
         74:2c:84:e4:a9:b6:20:82:38:4d:84:5d:57:0c:24:ae:b5:c1:
         28:93:4f:38:35:9c:09:0b:ad:cf:ff:04:a2:fd:05:60:15:54:
         0a:14:9f:7f:d9:1d:12:8b:c5:39:61:af:3a:07:8f:38:5c:03:
         58:73:84:56:fb:f9:78:95:43:83:48:c5:2c:e0:c5:2a:71:fa:
         cf:14:ba:1e:33:11:41:a5:9f:29:b4:2b:de:5d:87:35:77:84:
         cf:ff:88:36:b7:d1:38:d6:0d:a6:7d:f6:22:ed:b1:20:af:2e:
         6e:12:71:ac:2c:d6:7a:21:8d:b3:42:ab:4e:e6:2a:62:74:e7:
         9d:9a:0b:1e:b7:fc:e1:32:fc:39:61:6b:69:2b:d2:fc:0b:a6:
         e1:88:16:fd:a2:e4:11:89:25:c9:1e:86:53:a1:e9:d1:13:91:
         f3:8e:2e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:36:57 2025 by rpki-client