Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
File:                     q1UdEIRQYI699UDKEhmyuEf2Xr0.mft (raw, json)
Hash identifier:          h/RRuX4MvkeYMfZPBAe+e11r+DSDAPlkrAOY6ICCoZo=
Subject key identifier:   1D:B8:DD:13:8B:9E:C5:3E:D4:F8:0E:19:50:B0:30:6B:39:BD:B4:F6
Authority key identifier: AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD
Certificate issuer:       /CN=F36145DBAR/serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
Certificate serial:       03DC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
Manifest number:          03DA
Signing time:             Wed 05 Nov 2025 03:34:20 +0000
Manifest this update:     Wed 05 Nov 2025 03:34:19 +0000
Manifest next update:     Fri 07 Nov 2025 03:34:19 +0000
Files and hashes:         1: q1UdEIRQYI699UDKEhmyuEf2Xr0.crl (hash: tT3rftzT00pKZ8vBomCnv98LBV0T0dInRtQulY60E0Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
                          rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36145DBAR, serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
        Validity
            Not Before: Nov  5 03:34:19 2025 GMT
            Not After : Nov  7 03:34:19 2025 GMT
        Subject: CN=690ac5bb-692a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:ab:13:34:c1:8b:59:50:54:3d:82:76:92:
                    3e:88:89:96:87:8a:b3:41:7a:e2:e9:11:54:2e:35:
                    f8:2a:68:3d:c7:63:5a:0b:da:48:32:09:96:ea:77:
                    05:5d:41:da:6a:d6:38:c5:74:e6:33:5f:44:ff:26:
                    31:b9:02:96:fe:70:cb:6c:0b:6b:69:a6:a5:af:46:
                    93:74:e4:23:c3:4a:62:9f:f6:8a:5c:ee:61:a7:fc:
                    27:81:8b:fb:3c:13:a8:34:67:72:df:70:1d:dd:4b:
                    66:42:07:d8:92:49:94:21:52:1b:19:52:e7:02:76:
                    e4:62:29:ed:ed:be:9b:21:72:32:6b:97:8b:5b:8d:
                    c6:79:a2:d1:99:b6:3b:a7:14:4a:b6:e4:32:4f:d3:
                    e5:c1:a2:31:cb:05:4f:df:1a:57:0c:1b:45:93:4c:
                    54:0c:ae:79:00:93:71:a0:76:58:7f:f3:a3:5f:01:
                    2a:d5:86:6f:d8:17:25:2c:d2:de:a6:92:c8:c4:ec:
                    ec:ac:b7:f6:cc:35:06:a3:2b:5e:4b:fa:4d:4e:07:
                    1f:d2:9c:31:c2:eb:22:71:8c:d2:2e:4e:14:d6:93:
                    33:79:ec:07:30:a8:da:aa:36:75:0d:aa:cb:6c:70:
                    93:d9:2a:a0:33:e8:8e:65:c4:91:64:c8:61:dc:dc:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B8:DD:13:8B:9E:C5:3E:D4:F8:0E:19:50:B0:30:6B:39:BD:B4:F6
            X509v3 Authority Key Identifier:
                keyid:AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:50:08:7d:3d:6a:59:65:b2:8f:0b:1e:8d:09:60:78:2b:1e:
         40:e8:cd:9a:d4:13:65:76:de:18:4e:04:cc:7a:b9:57:a8:38:
         c7:98:44:52:cc:b0:40:75:17:7b:fb:df:51:61:4a:54:1b:7c:
         09:05:ce:37:87:b7:be:fa:27:7a:07:4b:f2:54:eb:5a:7c:b1:
         98:1b:25:9b:97:95:8e:cf:62:6e:2a:66:4a:42:91:d0:cb:b2:
         a1:8c:8e:d9:1a:10:d0:da:ba:4f:b4:51:33:94:02:34:fe:2d:
         05:c2:9c:f5:b4:ee:60:3c:24:25:f2:c4:4b:6f:14:e4:1a:d3:
         02:2f:5a:49:7d:61:c2:13:e4:c1:f8:1a:e9:23:ba:22:6d:60:
         6f:18:2d:18:75:9b:23:4e:d5:9a:f9:e1:1c:79:7e:29:20:1f:
         06:37:b4:c4:e1:7b:ad:6b:4f:4b:9b:03:a5:06:20:b3:b7:e5:
         aa:4c:95:b1:39:97:95:af:bc:28:fd:26:7d:43:16:7a:b0:4e:
         63:b1:f1:5e:55:a7:2a:d0:b9:a1:15:eb:8c:83:f0:cf:c7:d0:
         9c:de:8b:0d:c9:bf:c3:4e:48:e7:bc:bc:fb:69:2b:1e:b4:99:
         a9:49:57:3e:83:22:0f:aa:62:eb:91:cd:91:b6:d4:ed:27:25:
         16:54:78:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:26:01 2025 by rpki-client