Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
File:                     6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft (raw, json)
Hash identifier:          5DLfixnYE0fSKVYinXjWUo5r6UfgttXJ2SU9OvyeXfI=
Subject key identifier:   CE:9C:D1:B7:38:9F:8E:95:05:32:0D:00:39:14:C1:8A:95:6A:9F:DB
Authority key identifier: E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C
Certificate issuer:       /CN=F36150C1AR/serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
Certificate serial:       0D44
Authority info access:    rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
Manifest number:          0D44
Signing time:             Tue 04 Nov 2025 01:12:40 +0000
Manifest this update:     Tue 04 Nov 2025 01:12:39 +0000
Manifest next update:     Thu 06 Nov 2025 01:12:39 +0000
Files and hashes:         1: 6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl (hash: wku4SmfGBWEpg+1e7ARO+MafnYPt0zC9SuyfW8jsaXA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                          rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3396 (0xd44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36150C1AR, serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
        Validity
            Not Before: Nov  4 01:12:39 2025 GMT
            Not After : Nov  6 01:12:39 2025 GMT
        Subject: CN=69095308-269b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:62:e6:88:97:b5:a5:4c:db:09:af:e2:7e:8b:
                    d6:bd:37:72:10:90:f7:f3:dc:93:8e:9d:42:88:1b:
                    81:ba:dc:d4:90:2d:5d:57:22:d5:1f:82:3d:7e:c4:
                    93:fd:d3:33:5d:18:7c:0b:6e:73:7d:61:23:3d:f0:
                    63:e0:25:43:36:40:c9:00:8c:4d:9d:42:11:81:05:
                    20:9c:07:73:83:04:a5:49:9f:9e:91:f7:2a:ea:de:
                    40:5b:b1:3f:ba:98:54:c8:7f:49:29:4c:18:0d:6e:
                    39:19:8d:b7:e6:10:9d:c3:1f:a0:55:f0:c1:f9:bd:
                    02:fa:70:2d:b6:bd:fa:88:cf:e9:2c:a5:d4:80:d2:
                    ec:77:f2:c6:7e:20:70:42:a2:11:32:db:16:43:1b:
                    48:3c:47:78:4c:15:15:31:33:9b:da:32:d6:e2:e2:
                    7b:f5:b4:c5:2e:79:bb:7c:a6:7b:c7:ce:f7:06:63:
                    0c:89:8c:4c:de:6f:5d:d0:23:af:cf:fd:d0:17:cb:
                    14:86:e8:35:96:2e:11:69:3a:f4:5e:ae:34:6e:53:
                    c9:4b:6e:7a:2d:5b:b3:d2:bc:32:3c:e0:90:53:8e:
                    3e:11:e4:b5:11:d7:b1:5e:40:ad:c0:38:fe:e5:f4:
                    ac:80:9d:cc:d1:73:d5:d7:a9:8a:3e:50:34:a5:f4:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9C:D1:B7:38:9F:8E:95:05:32:0D:00:39:14:C1:8A:95:6A:9F:DB
            X509v3 Authority Key Identifier:
                keyid:E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4b:ee:55:90:8a:b1:37:cd:92:3d:59:86:da:9c:73:5a:95:
         2d:89:b6:0c:d2:aa:18:83:ba:40:94:a8:59:2f:af:ec:88:fa:
         0e:6a:db:5a:37:30:42:0b:93:03:0d:98:59:13:25:67:b2:b1:
         b8:75:d8:70:f2:d0:02:6a:80:84:7c:f9:4d:9d:ba:54:1c:16:
         c0:63:6f:4d:73:b5:7f:75:dc:a8:f7:65:fb:a6:65:a6:16:78:
         ec:66:e4:f5:6a:3e:aa:67:f6:f2:c3:70:d0:4b:8f:21:af:a8:
         b8:c4:fe:0d:80:6d:ba:09:68:61:0d:13:eb:54:c7:89:5a:db:
         4b:70:0a:a5:a7:f3:f8:b5:16:d9:cf:79:87:19:a2:20:89:93:
         f0:77:0f:25:a2:e8:c4:38:1c:10:0c:ab:17:41:30:55:38:35:
         6d:4b:76:ad:52:58:62:09:35:f3:87:8d:3e:03:a1:c0:d4:4c:
         f5:76:8e:ef:f5:bc:78:60:19:21:1f:b5:b0:71:a2:6b:32:76:
         2a:4c:d3:7d:90:cd:53:68:f0:4c:b5:33:ac:de:e6:1d:08:3d:
         df:c3:4e:2b:a0:35:30:af:12:6a:7a:08:2d:89:74:05:01:83:
         50:ad:cb:6b:b2:e3:1f:fe:16:6a:22:45:91:1b:be:2e:d6:27:
         9f:be:f7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:33:33 2025 by rpki-client