Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File:                     xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier:          H6jCoq6+KTXjpjpERw24OAKZBf1ZLo3QRrizJDgC+uo=
Subject key identifier:   F8:D3:6E:17:16:7A:8E:80:48:1B:84:EE:59:55:25:72:12:FC:99:CC
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer:       /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial:       02F4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number:          02F2
Signing time:             Sun 10 Aug 2025 04:04:13 +0000
Manifest this update:     Sun 10 Aug 2025 04:04:13 +0000
Manifest next update:     Tue 12 Aug 2025 04:04:13 +0000
Files and hashes:         1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: O7gisdpaYyhWgoVh2cigJ66T68sg+GFT9JxHQIEbCM4=)
                          2: 046CF67872E311F0A86CB7A7DAE4EC9C.roa (hash: RxZ6zJwwPB1hMFI2/FMmvPsAjrVlDL8yDDweU2BNpDw=)
                          3: 308911DA72E111F086A6389EDAE4EC9C.roa (hash: tYlSqnPCB7Kv8awS73OBDNcKa9Ut1iPvCF4nylTCo2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                          rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756 (0x2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
        Validity
            Not Before: Aug 10 04:04:13 2025 GMT
            Not After : Aug 12 04:04:13 2025 GMT
        Subject: CN=68981a3d-e05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5b:95:8f:73:30:1c:46:21:4f:a5:67:b5:af:
                    4e:41:40:b1:4a:a7:5a:7b:74:1b:07:6d:9a:73:7c:
                    e5:b6:49:e5:8b:a3:92:1f:f5:b6:46:ca:1d:c1:ae:
                    97:4b:93:ba:c0:c1:23:d7:09:9b:93:ac:41:8b:91:
                    f4:13:6a:79:44:29:3d:44:b5:f0:28:23:2a:05:bf:
                    c0:20:64:c6:e0:56:0f:77:69:6b:ac:5e:b9:c2:1c:
                    90:58:b8:19:fb:ca:fd:ba:a7:e4:83:2c:da:2f:3c:
                    91:71:1e:de:68:7b:78:2b:fb:80:95:d7:be:ff:2b:
                    18:dc:1e:66:9e:b6:bd:3e:23:ee:21:33:f8:2d:8d:
                    6d:49:7b:eb:2d:f8:1e:0f:46:fd:eb:31:6e:59:fe:
                    94:38:a5:f0:ba:d4:82:bb:22:13:a4:8b:1c:98:d4:
                    43:16:2e:c7:2e:e5:94:0c:4f:9f:a0:69:1d:de:9e:
                    67:93:fc:f2:fb:ea:ad:eb:21:82:83:93:42:ab:e7:
                    d2:d9:07:ba:6e:46:c4:f0:63:8d:2e:06:b1:a5:cd:
                    4c:7b:d5:fc:89:c1:8c:39:aa:91:83:9d:d5:63:6d:
                    85:bf:a9:fd:19:76:f5:79:9c:3a:0f:62:df:0c:e6:
                    7c:b6:22:42:6d:84:b8:f7:3f:e3:6d:ef:cd:28:f7:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D3:6E:17:16:7A:8E:80:48:1B:84:EE:59:55:25:72:12:FC:99:CC
            X509v3 Authority Key Identifier:
                keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:cb:d7:a3:0e:33:26:f2:0f:8c:53:21:5e:ac:2a:9e:32:27:
         77:73:bd:7c:19:e6:6f:28:37:1f:5b:1e:3e:d9:3e:a8:2a:87:
         ea:57:f9:0c:34:33:83:c0:7b:47:b3:3d:47:69:a4:46:10:6e:
         d4:2a:89:34:69:f0:ba:93:c3:57:98:1d:55:36:e4:27:54:da:
         02:2d:44:a9:1e:48:2f:87:14:f8:03:c3:15:02:bb:a9:d5:c3:
         bb:38:6a:72:27:69:8d:98:05:01:aa:5b:36:d4:d1:98:6f:38:
         9c:c2:9b:4a:17:ad:98:e2:79:fb:51:0d:bb:c0:2d:ba:3f:ff:
         3d:4b:b5:87:14:65:08:3d:75:8b:59:3c:5c:bf:7f:89:57:2a:
         9f:71:65:59:61:ee:38:da:ab:e9:4d:48:11:49:91:36:da:3b:
         8d:f1:29:54:66:47:49:b4:e6:23:f7:48:2f:52:9b:90:a7:34:
         b1:d9:19:2d:7b:b6:92:c7:a6:13:2e:3f:14:7e:fb:1a:7b:14:
         0f:21:8f:e3:f1:e3:ac:e6:6d:bf:eb:6c:a4:ad:cc:9f:76:c1:
         e8:ac:1a:ac:21:6d:46:6d:67:94:e4:9c:58:b8:19:49:9a:6e:
         4f:7b:39:56:bb:6f:d6:21:d9:69:dc:26:70:91:bb:b9:42:e0:
         52:a7:e0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:33:40 2025 by rpki-client