Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
File:                     tIDko6bVxyRdD2BorIVLj3CuxU0.mft (raw, json)
Hash identifier:          00o9ks26Sq3zlM9K60+kTx9JkXBePzkYF8YxJRdBKnk=
Subject key identifier:   96:48:B1:28:9A:7B:2F:08:EA:51:22:C0:1D:5F:ED:D5:63:E3:A5:FC
Authority key identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D
Certificate issuer:       /CN=F3619C8CAR/serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
Certificate serial:       01CA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
Manifest number:          01C9
Signing time:             Tue 04 Nov 2025 05:48:27 +0000
Manifest this update:     Tue 04 Nov 2025 05:48:26 +0000
Manifest next update:     Thu 06 Nov 2025 05:48:26 +0000
Files and hashes:         1: tIDko6bVxyRdD2BorIVLj3CuxU0.crl (hash: /ci0bov5qNkVVYGYF4HqXrKlWymC95wCR9Y1v+ncboo=)
                          2: 58AECC145FEA11EFAFEC128A762E951A.roa (hash: jcK/gU7qGSgzHysiBsZbtsCedDHATQtaNVIo0wEs3Ro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                          rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAR, serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
        Validity
            Not Before: Nov  4 05:48:26 2025 GMT
            Not After : Nov  6 05:48:26 2025 GMT
        Subject: CN=690993ab-e55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:27:03:58:af:8e:a8:80:31:ac:38:29:ce:
                    51:0d:c3:6a:31:85:b1:f0:a4:73:40:74:dd:35:1e:
                    5d:17:f8:92:4b:b6:7f:72:c9:73:50:21:bd:46:e7:
                    df:7f:bb:f3:89:17:dc:bc:e5:cd:ef:28:21:02:0f:
                    55:61:69:ec:a8:4d:cc:f4:55:ba:e5:8d:fd:77:6d:
                    56:18:dd:b6:e3:0d:7c:44:a5:2f:ac:10:18:03:76:
                    aa:4b:e9:0c:a8:a5:cb:6b:2e:a0:5a:8b:78:10:fd:
                    b4:f6:0e:7a:74:e6:e5:47:19:d3:58:c4:67:4e:96:
                    d6:7a:55:65:b7:a6:97:95:8f:9e:46:ac:03:bc:60:
                    97:51:c9:67:18:90:4a:e6:43:f5:3c:a0:df:93:98:
                    0b:5f:24:43:74:1c:23:2d:3f:a4:c3:59:e5:13:70:
                    2a:95:93:ca:45:16:eb:00:0d:f7:3c:e3:31:b6:e5:
                    9f:ce:96:7c:b8:3d:de:cc:b2:e6:7b:00:0e:47:2e:
                    5d:6b:61:49:41:f7:bd:58:a4:f1:56:10:56:33:83:
                    83:e7:4d:c5:f2:76:47:90:d1:d3:a5:51:a8:f5:87:
                    85:cd:da:d1:a4:f0:20:4c:f0:09:a2:37:12:e9:f6:
                    2b:b3:0b:c3:ca:52:cf:ab:05:b3:5f:bc:3d:16:d5:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:48:B1:28:9A:7B:2F:08:EA:51:22:C0:1D:5F:ED:D5:63:E3:A5:FC
            X509v3 Authority Key Identifier:
                keyid:B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ca:29:96:2c:e7:c7:67:7d:14:3a:10:19:fb:56:d0:7e:31:
         f4:f4:bd:5a:67:35:e2:69:d5:b0:ff:89:c9:bb:d7:20:17:c6:
         76:96:b7:16:34:cf:54:c6:10:9b:60:ac:0a:08:f9:c2:12:31:
         db:ce:fd:4c:87:30:6a:28:85:5b:78:c8:15:f4:40:e1:47:bf:
         bb:8d:62:13:dc:3c:f1:f9:57:98:7e:d8:2b:3b:23:28:25:70:
         a3:bd:b8:f3:23:29:3d:75:00:a4:9b:48:51:04:1b:e9:2b:21:
         3f:9f:7d:1a:56:04:3a:07:aa:32:f9:96:af:2f:86:5e:cd:32:
         c7:3d:bf:9e:3d:33:e1:e4:11:34:35:a3:41:1a:b2:33:c8:2d:
         c5:cb:69:a7:69:dc:be:83:e8:f6:49:bb:a1:64:84:09:65:ab:
         fb:42:c7:9a:dd:12:6d:65:6a:03:01:17:3e:19:74:cd:61:ff:
         6a:50:59:f7:5b:ea:52:70:be:7a:ba:76:c9:27:8f:f4:ff:7e:
         9b:6c:20:b1:11:61:14:85:53:0b:eb:8e:79:60:d9:0b:fa:6d:
         c7:6c:70:9c:fe:f3:d4:51:d5:06:40:1a:e7:b3:27:ac:42:c2:
         22:3a:76:3f:5d:33:28:8d:33:b3:00:80:36:ee:35:c4:d5:44:
         06:3d:39:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:56:28 2025 by rpki-client