Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
File:                     DjU23jQviMVeSslMS36nCgwn6aE.mft (raw, json)
Hash identifier:          l7CbeGoB0PuLS8RGxf67M9G84i6JlEoP+gGWr5NiAOo=
Subject key identifier:   70:39:C5:4A:6C:87:3F:21:E0:5C:D6:FD:22:FD:5C:E3:19:C5:CA:0B
Authority key identifier: 0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1
Certificate issuer:       /CN=F36A1CEFAR/serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
Certificate serial:       05F4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
Manifest number:          05F2
Signing time:             Sun 10 Aug 2025 02:32:05 +0000
Manifest this update:     Sun 10 Aug 2025 02:32:04 +0000
Manifest next update:     Tue 12 Aug 2025 02:32:04 +0000
Files and hashes:         1: DjU23jQviMVeSslMS36nCgwn6aE.crl (hash: iAi5kkvhX9KcYdg7rmDgkzDf6XG0qC52AO5zo8gSNFI=)
                          2: A6E483ACF13D11EBB28E971FD8A014CE.roa (hash: tXqfjeHuKCyrjlrfXizxneaHbdNneJ3cppKugGAFdHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
                          rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1524 (0x5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAR, serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
        Validity
            Not Before: Aug 10 02:32:04 2025 GMT
            Not After : Aug 12 02:32:04 2025 GMT
        Subject: CN=689804a5-a30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:fe:b5:88:07:45:be:16:70:26:5e:ea:75:
                    e9:4a:c7:86:ef:78:e4:64:03:70:b0:2b:39:f9:e1:
                    0d:c5:07:ab:3d:29:6b:e4:c3:77:79:e2:b2:17:ab:
                    be:5a:92:2c:45:cf:23:3b:be:99:a9:33:34:64:09:
                    05:d2:70:7f:30:45:56:b0:98:53:39:40:e7:89:37:
                    3e:ef:78:2f:2b:a7:76:06:90:66:63:5e:d7:42:b5:
                    9c:72:6d:c8:b9:b4:69:11:6c:0d:90:ed:75:10:7d:
                    43:39:35:45:fe:92:96:ae:44:b7:d4:2d:97:ed:13:
                    d8:3d:86:78:c4:d0:d6:f2:64:03:2f:29:2c:d1:b5:
                    27:73:fc:50:a9:0f:43:31:fc:e2:d2:85:22:b1:1b:
                    dc:da:ae:fc:64:5b:ab:41:bf:a3:c0:c0:8e:7e:28:
                    75:61:87:f3:af:1c:73:59:05:c2:d3:52:ae:36:6f:
                    e9:0d:6a:a3:3d:f4:4f:13:7b:b4:92:43:62:bf:c1:
                    96:5f:17:9d:61:23:07:cd:5f:74:90:4d:00:c0:4a:
                    65:da:7e:c9:ad:c3:2d:11:60:1b:fd:b5:66:8e:67:
                    e5:2f:9d:bb:18:4b:dd:e8:2c:c0:b7:f7:63:2f:ec:
                    96:b5:28:a5:fb:9a:45:99:fa:c2:59:25:d8:eb:d0:
                    40:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:39:C5:4A:6C:87:3F:21:E0:5C:D6:FD:22:FD:5C:E3:19:C5:CA:0B
            X509v3 Authority Key Identifier:
                keyid:0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:57:41:87:d4:a2:fe:48:b4:bd:f7:7b:ca:b6:64:9b:1a:0a:
         a6:13:07:35:2c:8b:a5:73:c1:f4:e3:83:3e:73:d2:bb:27:f9:
         3b:44:93:20:6a:66:7b:a8:b5:b4:fb:fb:ca:47:48:8f:9e:47:
         c1:3c:e3:99:89:be:41:20:3d:07:fb:4d:83:ed:9e:6b:05:8c:
         93:77:ca:6d:c9:47:78:f4:c2:75:32:66:f9:4a:94:26:a6:ff:
         04:55:9f:08:6e:f8:fc:c0:1c:87:a6:ef:2a:aa:78:c3:5e:78:
         6a:fc:f9:47:25:93:39:6f:cf:3f:8a:d9:84:16:0b:bf:60:c0:
         76:e1:ef:49:10:f8:fb:86:44:00:02:5c:10:80:32:ad:65:d3:
         a2:de:d5:cb:3a:59:c4:4a:b7:d7:2d:34:d6:a1:3d:5e:bd:ee:
         24:b5:22:17:ea:10:10:14:85:c6:9c:d2:e9:c9:f0:f1:08:81:
         a9:d1:8e:9b:6e:ce:b1:7a:9d:06:1f:73:04:54:41:38:02:cc:
         c5:82:cc:c2:ca:73:f5:2a:07:16:93:56:5a:93:b8:5d:c5:fd:
         65:a8:4c:50:bb:e3:d4:49:94:27:fc:5f:32:70:ce:06:0c:6a:
         b6:6d:91:4b:52:ed:a5:2a:9c:07:1e:c6:99:f9:6c:82:da:91:
         a4:02:fe:db
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTFDRUZBUjExMC8GA1UEBRMoMEUzNTM2REUzNDJGODhDNTVFNEFDOTRDNEI3RUE3
MEEwQzI3RTlBMTAeFw0yNTA4MTAwMjMyMDRaFw0yNTA4MTIwMjMyMDRaMBgxFjAU
BgNVBAMTDTY4OTgwNGE1LWEzMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDN0/61iAdFvhZwJl7qdelKx4bveORkA3CwKzn54Q3FB6s9KWvkw3d54rIX
q75akixFzyM7vpmpMzRkCQXScH8wRVawmFM5QOeJNz7veC8rp3YGkGZjXtdCtZxy
bci5tGkRbA2Q7XUQfUM5NUX+kpauRLfULZftE9g9hnjE0NbyZAMvKSzRtSdz/FCp
D0Mx/OLShSKxG9zarvxkW6tBv6PAwI5+KHVhh/OvHHNZBcLTUq42b+kNaqM99E8T
e7SSQ2K/wZZfF51hIwfNX3SQTQDASmXafsmtwy0RYBv9tWaOZ+UvnbsYS93oLMC3
92Mv7Ja1KKX7mkWZ+sJZJdjr0EAlAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUcDnF
SmyHPyHgXNb9Iv1c4xnFygswHwYDVR0jBBgwFoAUDjU23jQviMVeSslMS36nCgwn
6aEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzczRDQyOEZBRjEzODExRUJBNThDQkYxN0Q4QTAxNENFL0RqVTIz
alF2aU1WZVNzbE1TMzZuQ2d3bjZhRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0RqVTIzalF2aU1WZVNzbE1TMzZuQ2d3bjZhRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTFDRUYvNzNENDI4RkFGMTM4MTFFQkE1OENCRjE3RDhBMDE0
Q0UvRGpVMjNqUXZpTVZlU3NsTVMzNm5DZ3duNmFFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDV0GH1KL+SLS993vKtmSbGgqmEwc1LIul
c8H044M+c9K7J/k7RJMgamZ7qLW0+/vKR0iPnkfBPOOZib5BID0H+02D7Z5rBYyT
d8ptyUd49MJ1Mmb5SpQmpv8EVZ8Ibvj8wByHpu8qqnjDXnhq/PlHJZM5b88/itmE
Fgu/YMB24e9JEPj7hkQAAlwQgDKtZdOi3tXLOlnESrfXLTTWoT1eve4ktSIX6hAQ
FIXGnNLpyfDxCIGp0Y6bbs6xep0GH3MEVEE4AszFgszCynP1KgcWk1Zak7hdxf1l
qExQu+PUSZQn/F8ycM4GDGq2bZFLUu2lKpwHHsaZ+WyC2pGkAv7b
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:06 2025 by rpki-client