Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
File:                     5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft (raw, json)
Hash identifier:          WYWQ2KvwpHqVA1STfr3tCF96urfi+ll/9Y64f66monQ=
Subject key identifier:   3B:59:2F:45:34:3C:AC:D2:F6:E9:E7:74:DF:71:CD:97:FA:7B:92:9C
Authority key identifier: E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
Certificate issuer:       /CN=F36AA888AR/serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Certificate serial:       0911
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
Manifest number:          0910
Signing time:             Mon 11 Aug 2025 01:33:53 +0000
Manifest this update:     Mon 11 Aug 2025 01:33:52 +0000
Manifest next update:     Wed 13 Aug 2025 01:33:52 +0000
Files and hashes:         1: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl (hash: b62J83gW9ivIxZYjVoO3/4e/eBu1ltoKfUg4wjSW0UQ=)
                          2: 58B26BA4886211E99B31DD63F8AEA228.roa (hash: nvT/Y3DEz1TX+5D/zLT7HQfvvtuHBy4pd0aYSFdPAvg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                          rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2321 (0x911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA888AR, serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
        Validity
            Not Before: Aug 11 01:33:52 2025 GMT
            Not After : Aug 13 01:33:52 2025 GMT
        Subject: CN=68994881-0456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1f:bb:e6:ad:46:c7:87:10:24:98:52:57:6a:
                    6d:f4:cb:f2:d9:6f:b5:f8:90:be:d0:f2:24:b4:3b:
                    a3:81:d1:df:b8:1e:99:10:8a:b2:d3:4b:36:4e:a1:
                    f0:ed:df:9f:13:dc:c6:9f:0b:34:7a:8a:bd:6c:ca:
                    41:85:4e:5e:e3:a3:9e:67:b0:24:3c:3a:a3:20:f1:
                    ec:71:f1:04:43:b1:06:39:0d:2b:83:90:5b:8a:22:
                    e5:99:da:f3:a9:e0:7a:b1:6f:73:44:37:60:d8:1f:
                    6f:8c:36:03:e5:e1:6c:68:61:4c:86:7a:2e:b3:7f:
                    5a:9d:35:14:c3:59:ed:e2:25:8d:5b:7e:6e:ae:2c:
                    33:af:f7:be:77:9d:31:6f:c1:1a:54:d5:92:e0:6c:
                    fc:f6:df:53:16:fc:cc:41:6a:0e:a5:ce:29:69:7b:
                    e0:0c:a5:2c:1a:a2:2a:59:ad:82:3c:3e:e7:f5:8c:
                    2a:3b:03:4b:8f:26:1f:65:b0:b8:67:ed:2c:49:24:
                    d4:27:92:28:69:c5:0a:af:41:be:78:6c:19:ea:38:
                    f7:8f:ab:aa:e4:fb:dd:13:59:4c:c6:02:a5:a7:09:
                    0a:53:b6:ba:0d:ce:9a:00:1b:44:69:76:b5:19:cc:
                    6f:9b:d2:03:3b:d7:c8:bf:40:24:ad:92:ee:09:c1:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:59:2F:45:34:3C:AC:D2:F6:E9:E7:74:DF:71:CD:97:FA:7B:92:9C
            X509v3 Authority Key Identifier:
                keyid:E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d0:12:ef:51:f7:bc:f2:57:5a:83:21:0c:d8:fd:e7:7a:08:
         0f:71:85:73:57:cc:c0:1b:d0:90:43:ab:f0:16:b3:14:80:a6:
         cf:80:4e:81:02:9b:ae:d9:3e:39:a3:a5:3a:55:ce:7c:21:c8:
         f9:ca:06:ad:2d:6b:5b:db:f7:20:af:9c:f4:e8:31:36:bb:a4:
         bc:3f:1e:ee:fa:2b:22:d1:1e:4f:28:41:7d:3e:45:ab:9e:b0:
         f1:f3:0f:d3:2d:1f:97:7f:31:d1:09:04:a5:b3:f5:80:1a:10:
         64:f6:c7:9b:a4:e4:c7:49:4d:0f:3a:c8:5c:82:2a:af:02:f3:
         4a:86:ae:04:18:f5:01:8b:45:0e:d1:9e:a9:7e:55:a5:75:49:
         e0:ad:96:a7:fe:03:1c:5a:a1:a4:6a:5e:89:e6:cc:fe:f6:57:
         0c:11:f5:64:8e:c7:48:a8:d9:c6:df:5a:bb:79:71:f2:f9:a6:
         a0:ee:08:00:40:2c:4c:2d:c8:1d:50:82:58:03:94:80:b9:f0:
         9b:fb:8d:c4:b3:4d:20:e3:f8:bf:3a:1a:32:4a:93:da:1f:cd:
         d1:9f:e7:09:7d:83:e4:38:da:9a:eb:d6:e5:bc:56:2b:4b:13:
         12:1f:b5:fd:9b:97:52:0f:dd:d7:ec:0c:35:dc:18:55:f6:86:
         73:cf:d9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:15:23 2025 by rpki-client