Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
File:                     bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft (raw, json)
Hash identifier:          ylRPZCuGLu6/vvSOjAoZWuAh2ulLuVQc/A33AJq1bEY=
Subject key identifier:   87:2D:57:81:B7:17:49:C7:7E:BF:07:AA:45:93:38:6B:E4:D5:83:3C
Authority key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Certificate issuer:       /CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Certificate serial:       05EC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
Manifest number:          05EA
Signing time:             Tue 12 Aug 2025 02:28:49 +0000
Manifest this update:     Tue 12 Aug 2025 02:28:48 +0000
Manifest next update:     Thu 14 Aug 2025 02:28:48 +0000
Files and hashes:         1: bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl (hash: pLGkOnWsNKJs5mAAsIekKLpN1iRRVNpusYJiyAuFXEo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
                          rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 Aug 2025 00:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C95F1AR, serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
        Validity
            Not Before: Aug 12 02:28:48 2025 GMT
            Not After : Aug 14 02:28:48 2025 GMT
        Subject: CN=689aa6e1-b07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:66:22:71:65:46:65:51:7e:d7:8f:8c:a2:de:
                    46:ca:97:ca:7e:0f:79:21:09:bb:4a:db:3c:8b:94:
                    06:9b:76:4d:96:c1:bb:f3:df:32:21:24:5b:7b:db:
                    be:19:03:87:de:f4:7a:9b:0c:2e:07:58:26:b1:a6:
                    76:ab:a6:af:e4:17:74:8d:70:70:e3:3f:61:66:89:
                    c8:28:fd:c9:f9:6c:de:f1:69:b9:ed:e8:de:4e:50:
                    cf:cc:80:10:c6:ca:3d:d7:2b:ba:1f:1b:69:3b:9e:
                    b3:b6:de:ab:e5:4b:f4:89:ab:8f:61:14:78:f3:eb:
                    f3:ce:f3:b4:e9:fc:d6:31:ee:a0:46:b8:d1:44:16:
                    8d:49:25:d3:42:85:20:5b:f8:2f:bf:db:92:1a:56:
                    73:60:4a:c1:b3:09:f2:24:11:8b:cf:fc:66:61:a3:
                    d9:80:c6:3a:f6:1a:d1:04:a7:d4:96:24:f7:9b:6e:
                    8b:49:58:a8:c3:09:d4:77:95:8b:74:fa:cd:a1:82:
                    9f:c5:17:e0:53:6e:be:39:5a:76:f0:67:c0:ee:90:
                    67:63:9e:c0:dc:76:da:10:85:38:2a:ed:55:16:f2:
                    90:b7:44:2d:54:8c:46:14:e8:36:16:98:1b:07:68:
                    67:f0:b8:d5:61:a4:ea:4c:16:9c:7c:96:7e:8a:a1:
                    db:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2D:57:81:B7:17:49:C7:7E:BF:07:AA:45:93:38:6B:E4:D5:83:3C
            X509v3 Authority Key Identifier:
                keyid:6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0d:47:bd:d5:98:12:ee:4d:fc:50:f1:33:de:06:02:be:f2:
         6e:2e:6e:97:ba:b2:32:e6:80:2e:ca:fa:eb:99:c1:20:86:9d:
         9f:68:24:0e:84:4e:16:ef:2f:33:1e:93:f3:0a:3f:34:0c:67:
         a2:b4:1b:b2:99:be:ca:f5:0e:dd:24:76:a6:e8:03:02:b7:ae:
         77:bd:fa:99:a2:a6:42:75:42:48:b1:1a:38:85:d2:1c:e7:59:
         96:1b:29:2e:72:6e:96:69:e0:e0:f5:0a:70:2e:4d:23:ed:bf:
         9d:3d:77:4e:d4:7d:b7:dd:40:8e:65:e1:03:c8:ea:4d:63:e2:
         88:8b:2c:fc:cb:49:15:4e:33:d1:03:5a:42:af:d3:0e:b8:d6:
         b9:d3:8f:17:6d:31:d1:c9:60:17:da:13:e7:70:28:7f:36:6f:
         93:c2:6e:d2:48:51:f3:7c:d1:86:11:f4:87:50:e9:52:39:6d:
         f5:a3:af:ea:82:b7:66:b9:1f:e3:19:16:f5:a2:cb:3e:79:b8:
         2e:09:38:f6:17:33:f9:10:2c:a6:e2:e3:e0:d0:12:47:bc:ad:
         f4:39:a7:d7:05:10:10:b8:cf:f3:3f:65:21:d6:eb:cf:3f:b4:
         16:c0:6a:05:f6:5b:94:f2:a4:2c:65:6a:ef:da:25:99:e5:cb:
         03:7f:ce:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:37:04 2025 by rpki-client