Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
File:                     16R0hb-cpGerJ5HbX06JVar0dkA.mft (raw, json)
Hash identifier:          o2Edhm4e4xYYpN675umTIcFKk0Upmg4iujfOieQe6rU=
Subject key identifier:   3B:33:EE:49:BC:0B:3C:D0:AB:E6:D1:CB:15:BE:D4:A9:EF:55:A0:BF
Authority key identifier: D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
Certificate issuer:       /CN=F3614F54AR/serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
Certificate serial:       0658
Authority info access:    rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
Manifest number:          0657
Signing time:             Wed 05 Nov 2025 02:23:07 +0000
Manifest this update:     Wed 05 Nov 2025 02:23:06 +0000
Manifest next update:     Fri 07 Nov 2025 02:23:06 +0000
Files and hashes:         1: 16R0hb-cpGerJ5HbX06JVar0dkA.crl (hash: eXeFMyCqYw3bxuxwq9HGiQSSNUsjmN4OO8HkfqnSeq8=)
                          2: 115C93BAE16111EB96804153F8AEA228.roa (hash: vVJYRPavoXyCLCs90IUxYtns4SSgNRSaXSbPs6FZN1c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
                          rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1624 (0x658)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614F54AR, serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
        Validity
            Not Before: Nov  5 02:23:06 2025 GMT
            Not After : Nov  7 02:23:06 2025 GMT
        Subject: CN=690ab50b-889f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:69:6e:dd:b1:80:05:a4:c3:e0:5e:7b:67:
                    e3:5b:1f:ee:04:4b:c4:1c:b8:a3:62:c9:6c:94:90:
                    6c:5c:d0:69:ec:20:92:57:3c:d2:a1:59:ef:45:a2:
                    92:47:1f:b2:8f:36:0b:1e:aa:93:8b:7c:2c:27:ba:
                    0b:6d:d5:31:d2:3b:a7:19:40:c7:f3:4b:8a:fb:38:
                    25:e2:5a:a2:8a:8e:b7:0b:4c:ea:b5:76:65:db:84:
                    59:ea:3b:90:f2:45:1d:57:be:02:85:41:14:a1:b3:
                    d4:bc:ab:3a:fc:d9:f2:66:57:18:e3:25:16:b6:93:
                    09:ec:1b:f2:3e:01:ae:f5:0f:d7:d1:4b:eb:71:48:
                    33:f3:db:58:07:7d:2a:75:e3:b6:4e:89:ba:09:bc:
                    32:ec:c9:75:52:f1:9c:e7:69:cc:df:8e:9b:fa:6a:
                    23:58:02:03:7e:04:82:39:94:6d:ee:09:f0:42:26:
                    e3:6a:39:e1:07:0d:05:26:6d:51:01:c7:bb:47:66:
                    b1:98:31:b6:a7:b1:ac:14:62:34:bb:3f:8c:cc:40:
                    b1:e6:8d:8b:af:17:35:76:3a:66:5f:6f:ff:1d:8a:
                    35:ce:42:8a:f1:41:15:e7:bc:13:43:11:74:c7:ec:
                    82:1a:4e:6e:6e:6a:13:fe:15:c0:aa:27:df:f2:b6:
                    3e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:33:EE:49:BC:0B:3C:D0:AB:E6:D1:CB:15:BE:D4:A9:EF:55:A0:BF
            X509v3 Authority Key Identifier:
                keyid:D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:45:a5:d3:9a:2f:44:85:14:7d:c7:6d:3d:73:9b:9f:0f:1e:
         43:a3:29:a1:d4:9c:f6:6d:f6:48:5b:79:46:60:ff:79:45:5f:
         cc:d0:ba:e5:57:4e:b7:d7:66:c9:5c:53:b3:24:95:6f:c3:8f:
         c5:ea:74:b3:3c:ab:ac:df:cc:a2:52:dc:0a:21:a0:f0:25:7b:
         c8:66:9e:29:5b:7f:40:94:f1:04:7c:32:18:7c:4f:26:a0:fd:
         ee:06:09:93:b4:f8:62:6a:2d:9f:36:d8:19:00:fb:72:24:f9:
         52:0b:a8:47:cf:11:95:62:b1:e7:da:9b:44:84:46:72:14:1d:
         70:08:f1:1a:36:0e:08:55:1c:08:72:1a:99:3b:c8:b0:32:23:
         48:c7:39:33:ab:01:d0:c4:a9:07:4a:90:1a:d0:62:e4:97:0d:
         d4:8f:21:10:db:70:b4:dc:eb:60:78:57:f7:ea:9c:e8:23:e0:
         92:58:68:0a:f8:c9:12:5c:30:eb:65:ee:60:00:4e:dd:46:ea:
         07:22:51:89:af:b4:60:40:fb:92:7c:86:0b:5a:b7:df:ad:bb:
         eb:46:1b:3a:63:50:ca:3c:ce:69:56:34:9d:89:a7:cf:75:c1:
         33:01:83:03:79:70:86:5f:0e:36:67:c1:27:b2:38:d0:b3:03:
         fb:2c:ca:7a
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTRGNTRBUjExMC8GA1UEBRMoRDdBNDc0ODVCRjlDQTQ2N0FCMjc5MURCNUY0RTg5
NTVBQUY0NzY0MDAeFw0yNTExMDUwMjIzMDZaFw0yNTExMDcwMjIzMDZaMBgxFjAU
BgNVBAMTDTY5MGFiNTBiLTg4OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiHGlu3bGABaTD4F57Z+NbH+4ES8QcuKNiyWyUkGxc0GnsIJJXPNKhWe9F
opJHH7KPNgseqpOLfCwnugtt1THSO6cZQMfzS4r7OCXiWqKKjrcLTOq1dmXbhFnq
O5DyRR1XvgKFQRShs9S8qzr82fJmVxjjJRa2kwnsG/I+Aa71D9fRS+txSDPz21gH
fSp147ZOiboJvDLsyXVS8Zznaczfjpv6aiNYAgN+BII5lG3uCfBCJuNqOeEHDQUm
bVEBx7tHZrGYMbansawUYjS7P4zMQLHmjYuvFzV2OmZfb/8dijXOQorxQRXnvBND
EXTH7IIaTm5uahP+FcCqJ9/ytj6PAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUOzPu
SbwLPNCr5tHLFb7Uqe9VoL8wHwYDVR0jBBgwFoAU16R0hb+cpGerJ5HbX06JVar0
dkAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0RjU0L0ZBMDlGRTFBRTE1RjExRUI4OTJFQzY1MUY4QUVBMjI4LzE2UjBo
Yi1jcEdlcko1SGJYMDZKVmFyMGRrQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzE2UjBoYi1jcEdlcko1SGJYMDZKVmFyMGRrQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MTRGNTQvRkEwOUZFMUFFMTVGMTFFQjg5MkVDNjUxRjhBRUEy
MjgvMTZSMGhiLWNwR2VySjVIYlgwNkpWYXIwZGtBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiRaXTmi9EhRR9x209c5ufDx5Doymh1Jz2
bfZIW3lGYP95RV/M0LrlV06312bJXFOzJJVvw4/F6nSzPKus38yiUtwKIaDwJXvI
Zp4pW39AlPEEfDIYfE8moP3uBgmTtPhiai2fNtgZAPtyJPlSC6hHzxGVYrHn2ptE
hEZyFB1wCPEaNg4IVRwIchqZO8iwMiNIxzkzqwHQxKkHSpAa0GLklw3UjyEQ23C0
3OtgeFf36pzoI+CSWGgK+MkSXDDrZe5gAE7dRuoHIlGJr7RgQPuSfIYLWrffrbvr
Rhs6Y1DKPM5pVjSdiafPdcEzAYMDeXCGXw42Z8EnsjjQswP7LMp6
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:54:50 2025 by rpki-client