Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.mft
File:                     MYeD1rvyaijZSE9ZIMr6tOs2TJo.mft (raw, json)
Hash identifier:          vot7INkaBhUsL+f4hI8AcmqaD33Dvv7eYPuXjKJwTsA=
Subject key identifier:   06:66:0F:F3:5E:5A:8E:67:DA:5A:22:91:E0:4B:64:3E:F3:D7:AA:B9
Authority key identifier: 31:87:83:D6:BB:F2:6A:28:D9:48:4F:59:20:CA:FA:B4:EB:36:4C:9A
Certificate issuer:       /CN=F36E1839AR/serialNumber=318783D6BBF26A28D9484F5920CAFAB4EB364C9A
Certificate serial:       0AD9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MYeD1rvyaijZSE9ZIMr6tOs2TJo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.mft
Manifest number:          0AD8
Signing time:             Tue 29 Apr 2025 01:12:06 +0000
Manifest this update:     Tue 29 Apr 2025 01:12:05 +0000
Manifest next update:     Thu 01 May 2025 01:12:05 +0000
Files and hashes:         1: MYeD1rvyaijZSE9ZIMr6tOs2TJo.crl (hash: QlPDT258fcUe4yfWS3KKKJzwZBMfdoFcE1xz+ebQnvM=)
                          2: 02637176DDC211E88D286E4DF8AEA228.roa (hash: r18K2LBKR3Ve2lxrI/U2/pWyaLJWaOZ135cghXKJBpc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.mft
                          rsync://rpki.afrinic.net/repository/arin/MYeD1rvyaijZSE9ZIMr6tOs2TJo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 May 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2777 (0xad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1839AR, serialNumber=318783D6BBF26A28D9484F5920CAFAB4EB364C9A
        Validity
            Not Before: Apr 29 01:12:05 2025 GMT
            Not After : May  1 01:12:05 2025 GMT
        Subject: CN=68102766-3b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:3c:d5:ce:d2:40:6e:b7:2a:ef:52:1f:83:
                    ed:c5:6b:06:83:4b:cb:e4:58:f6:31:0b:45:4c:34:
                    d3:f6:bc:15:3c:4d:35:73:c5:ee:94:97:b0:3a:e3:
                    33:07:d2:0b:9a:a9:68:7f:e6:8c:65:02:60:21:e8:
                    e6:df:ad:b5:d1:7e:7e:8a:62:62:31:bb:d2:e9:cd:
                    54:ab:65:83:36:26:69:a1:e8:d7:07:d3:13:c3:e6:
                    0b:bd:bb:cc:67:54:c0:d6:2a:23:0e:57:0d:36:33:
                    00:12:8c:62:31:bb:1d:94:8d:35:54:02:82:79:0b:
                    62:0b:4e:4f:52:7c:4b:8a:69:ea:24:ed:30:f1:10:
                    bf:1d:7f:bf:fe:5d:f9:e6:be:74:d9:ee:13:a4:29:
                    36:a4:6b:e6:b3:11:f9:05:67:ea:47:57:f7:82:1b:
                    17:62:53:d3:4a:32:01:a0:1a:35:2a:55:80:ff:a3:
                    63:44:cc:5c:e6:eb:b6:4b:3c:70:d2:d2:e3:07:aa:
                    d0:a6:7e:49:52:67:9e:36:0e:78:bd:09:4d:b7:ef:
                    55:54:d0:dc:f8:c8:4f:d5:a1:1c:1d:95:90:d9:6c:
                    40:70:09:01:4b:c2:24:e3:09:01:82:e5:dc:21:f2:
                    28:af:b2:4f:0d:70:e7:33:22:23:bf:1d:a1:ef:94:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:66:0F:F3:5E:5A:8E:67:DA:5A:22:91:E0:4B:64:3E:F3:D7:AA:B9
            X509v3 Authority Key Identifier:
                keyid:31:87:83:D6:BB:F2:6A:28:D9:48:4F:59:20:CA:FA:B4:EB:36:4C:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MYeD1rvyaijZSE9ZIMr6tOs2TJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/F9440C06D06411E7B4C14B49F8AEA228/MYeD1rvyaijZSE9ZIMr6tOs2TJo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:45:c1:5b:df:61:72:7e:27:16:70:f3:5a:51:0f:06:25:20:
         69:da:e3:ae:84:2f:1f:5c:b2:48:9f:36:b6:c8:c2:fe:a6:60:
         28:ac:04:19:fd:22:0a:8d:c9:2a:25:4b:f2:68:e6:df:a9:e4:
         d4:2e:4b:58:f7:0f:97:25:32:ee:59:63:02:6b:e4:04:fe:27:
         b8:2d:c7:66:99:92:99:fc:89:01:fd:81:8f:de:43:06:ee:a6:
         86:04:3d:c2:08:a6:41:11:59:19:f5:71:ee:b6:9f:8d:6e:28:
         eb:7f:e4:24:8b:6a:7a:d3:a8:6d:68:96:f5:bf:cc:76:34:fe:
         90:04:b7:ac:31:41:93:11:87:95:0f:68:15:9c:4c:2d:34:0b:
         ce:37:26:72:3b:a8:b7:6c:bb:39:99:99:28:3f:9a:f3:6a:bd:
         d2:69:e0:ba:3e:32:87:28:73:ab:89:3d:1e:2c:92:06:54:a8:
         b3:cb:5f:44:f9:aa:5a:81:7f:e5:cc:e4:54:38:dc:b0:80:09:
         35:f5:dd:8d:b7:ff:4f:45:d8:62:35:58:bb:9a:35:38:cb:14:
         4c:76:03:ce:28:5a:8f:bc:42:40:88:6b:9d:fc:d0:b7:d2:7a:
         16:02:8d:39:58:d3:9f:74:cb:13:d3:be:e3:c6:f4:ea:65:fb:
         41:76:b4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:23 2025 by rpki-client