Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
File:                     xPPi6r3p45Aa27wxyfJTXN47HG8.mft (raw, json)
Hash identifier:          P1FdgmM37uy0ZgZfxQwJ45XwHVyvVJ7qp+Mqu4s7VjQ=
Subject key identifier:   7A:21:39:99:77:63:01:FF:C7:6B:AC:A4:70:1C:B6:4A:73:89:58:22
Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Certificate issuer:       /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Certificate serial:       0D70
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
Manifest number:          0D70
Signing time:             Mon 11 Aug 2025 01:04:14 +0000
Manifest this update:     Mon 11 Aug 2025 01:04:13 +0000
Manifest next update:     Wed 13 Aug 2025 01:04:13 +0000
Files and hashes:         1: xPPi6r3p45Aa27wxyfJTXN47HG8.crl (hash: CV9LEZ49Ukb3Mw8qHqU3548PStMpTkqpUMyDKJTKZ64=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                          rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3440 (0xd70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAR, serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
        Validity
            Not Before: Aug 11 01:04:13 2025 GMT
            Not After : Aug 13 01:04:13 2025 GMT
        Subject: CN=6899418e-4ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:90:86:7d:3d:e6:80:f9:5f:b6:09:ad:1b:
                    52:fd:3a:d6:cf:a3:8c:27:01:d5:7d:8d:6b:c4:28:
                    37:a5:a8:ac:c7:49:f3:cb:73:d7:41:a1:f4:96:07:
                    b5:0e:59:de:aa:c0:86:35:b9:e3:8c:36:13:a0:11:
                    12:25:b6:58:b1:08:4a:3d:fc:14:f6:c1:cc:2a:38:
                    da:d8:16:e2:b2:35:5d:b9:58:a9:d2:54:f5:01:b2:
                    fe:8e:a6:d6:4c:8b:b5:92:2e:73:54:f4:aa:7e:10:
                    bc:86:00:91:db:1f:70:32:06:f9:a5:d9:69:2d:fd:
                    92:89:02:9e:73:9a:41:05:d7:ff:23:6e:2c:32:3c:
                    0c:09:04:4f:29:4f:9f:4c:33:6d:17:eb:f8:7f:90:
                    f9:6e:f7:f1:a2:4f:c9:42:7f:3c:5f:b4:fe:80:c8:
                    ac:8f:33:74:78:20:9b:6f:29:73:a7:07:ce:d8:9d:
                    e8:21:ae:54:73:79:8b:02:37:57:6c:b7:28:2a:3c:
                    fb:f2:76:67:f5:ca:fc:05:83:3f:cf:d2:6f:82:0a:
                    62:78:ae:0d:34:57:6c:ad:43:39:3a:93:dc:78:90:
                    b6:9b:5d:a0:ba:bd:17:c2:06:a1:11:31:1d:1f:4d:
                    a3:23:bb:d2:2f:d1:97:84:f0:93:0b:ad:57:5c:b2:
                    b8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:21:39:99:77:63:01:FF:C7:6B:AC:A4:70:1C:B6:4A:73:89:58:22
            X509v3 Authority Key Identifier:
                keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:27:9d:06:94:38:16:c4:4e:5e:18:06:97:dd:85:c5:32:54:
         da:e0:72:0d:49:46:dd:c8:8f:33:c4:83:59:e3:f4:d3:59:b8:
         e6:86:82:a3:fd:da:bf:f7:e2:2c:2f:8b:75:db:66:6f:58:94:
         12:0d:ad:05:dd:0c:2b:1b:0f:a6:c1:8b:6d:08:82:ce:bd:77:
         9a:c5:ed:e3:2c:8f:25:b3:be:a9:e3:ad:f5:6c:f7:0d:72:32:
         8a:e7:5b:7e:57:b6:f2:47:16:f4:bf:86:3e:0f:1a:8c:f0:66:
         b9:05:07:26:6f:e9:13:a1:1e:5f:dc:c6:a2:41:8b:be:cc:ba:
         ac:f7:6d:bb:01:70:a4:ca:de:79:24:24:8b:e6:69:a6:d1:73:
         6d:58:3b:94:e4:71:09:06:68:93:53:68:4b:9c:17:8f:11:82:
         1f:d9:11:85:b0:31:f8:90:94:f2:68:25:56:d7:0e:d7:c9:06:
         fe:49:e2:96:bc:82:da:fb:8d:c5:ee:84:e1:92:17:de:1e:bc:
         19:15:24:61:e6:f7:37:b6:0b:1a:ce:d9:2d:ff:2c:b9:1c:cf:
         85:5e:4f:e5:09:72:0d:11:10:a4:21:68:12:53:bf:b2:20:de:
         d5:c7:58:af:b4:74:01:fd:60:07:86:35:20:f0:2d:bf:41:61:
         9a:5b:c1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:15:23 2025 by rpki-client