Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
File:                     1qTOslDhuJgjxaxDmHTTUfkMQuY.mft (raw, json)
Hash identifier:          EHQ/Ea69TdmhmmCWPH8JdOqoteH8m/GtjzZxMVsSu1c=
Subject key identifier:   27:53:12:CB:D7:25:A5:C2:47:54:E9:B5:70:2F:29:37:71:22:A1:81
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Certificate issuer:       /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial:       0A83
Authority info access:    rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
Manifest number:          0A7D
Signing time:             Wed 05 Nov 2025 01:15:07 +0000
Manifest this update:     Wed 05 Nov 2025 01:15:06 +0000
Manifest next update:     Fri 07 Nov 2025 01:15:06 +0000
Files and hashes:         1: 1qTOslDhuJgjxaxDmHTTUfkMQuY.crl (hash: x23OO5HvG8Z/+1HVQXJGtJ3KSTc5KGhjbTV0SUW270k=)
                          2: 673C61B4A88611ED9FE7EDD4F1222468.roa (hash: m91FhF+zJneUBb3UfLyzUzRvHvpK/0b7/Z5lBS15Q2I=)
                          3: B03DD41482B211ED9ACDF2D8F1222468.roa (hash: p4erYRKk741+pc1GTQOQg0ZDNMWUeJrKmmr5PjLZGWc=)
                          4: 9C57BBCA514411E9819FB57FF8AEA228.roa (hash: a2EFqum38j7M+ZpqwnpRi/IEA/fqXEm99Nf0ZysxusA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                          rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2691 (0xa83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A02AR, serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
        Validity
            Not Before: Nov  5 01:15:06 2025 GMT
            Not After : Nov  7 01:15:06 2025 GMT
        Subject: CN=690aa51b-6470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:71:7e:31:3b:f4:62:7d:93:1c:16:68:44:52:
                    a8:1e:25:10:13:7f:b8:56:ff:c2:ef:cc:f2:d7:56:
                    60:64:10:0c:75:ba:d6:9a:04:b7:bf:2a:e0:e2:37:
                    21:f7:4d:40:88:f5:a5:6a:35:82:18:44:fe:a0:eb:
                    ab:d0:b4:44:57:a5:f0:c3:e5:29:e3:7e:88:ca:00:
                    5c:58:9f:88:56:8a:cf:6b:ab:cd:bc:29:5c:e3:9f:
                    ff:5b:87:b4:4e:21:16:b1:be:ef:07:d2:c0:35:7a:
                    da:9e:68:7d:54:0e:d2:5b:b6:b4:ba:1c:cd:fa:4e:
                    6f:fc:f8:bf:d6:3a:cd:71:59:38:eb:82:15:28:4e:
                    84:75:44:ed:57:4a:83:c5:c5:cd:39:c1:6a:ea:4b:
                    a3:9a:7c:79:5c:25:b9:3c:e8:36:2e:f7:32:3c:1d:
                    26:22:4d:31:d9:ea:ca:86:30:ff:85:3b:1b:c6:fd:
                    1f:5c:91:df:bc:a6:cf:6b:dd:14:9e:b7:59:ab:4b:
                    b6:9a:07:89:8c:c2:fe:67:4f:12:df:e6:f4:9a:fd:
                    24:12:39:c5:a8:f7:28:b9:2c:49:7e:64:53:cf:1f:
                    74:a4:15:41:fa:73:5f:60:39:e0:c0:ca:be:49:9c:
                    6d:58:a8:6e:d9:3b:a9:70:88:cb:6c:6a:86:a1:79:
                    5c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:53:12:CB:D7:25:A5:C2:47:54:E9:B5:70:2F:29:37:71:22:A1:81
            X509v3 Authority Key Identifier:
                keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3e:38:8b:2b:d4:bd:73:06:8b:21:d3:aa:d3:74:61:6c:54:
         b5:86:2d:ed:83:74:2f:69:ff:b6:04:95:c0:d8:56:db:6f:11:
         6c:bf:6c:85:29:ed:e0:47:d9:f7:7b:62:52:4b:1b:7b:8d:62:
         e7:ab:be:8b:3b:38:3c:68:fb:15:18:34:9a:b4:9b:14:ab:0c:
         72:8b:5c:28:53:93:64:17:3e:6d:76:cc:3b:1c:1e:aa:57:aa:
         bf:ad:63:5f:c7:a8:fd:4e:15:3c:7a:b5:68:f3:0c:78:fd:44:
         9a:67:24:d3:ff:60:97:1e:26:59:09:b4:e9:ef:8a:36:bd:60:
         56:00:d0:89:c5:d8:8d:59:f5:77:d9:7e:3e:20:08:86:07:5f:
         41:32:b9:9d:8d:53:c3:68:25:b6:00:5d:fe:0d:a9:e6:df:b9:
         b3:6b:7c:de:1c:02:96:68:f4:a7:f9:01:a0:cb:a1:3a:8d:cf:
         13:c3:a8:0e:89:9d:1d:3c:2f:3f:1c:a8:49:07:08:75:c7:a2:
         dc:5e:38:ac:2b:47:75:30:33:a0:10:f0:9b:2a:12:aa:6d:1e:
         d3:6d:18:b8:f9:cb:13:9c:65:12:6e:b1:c5:b4:2b:bd:02:b1:
         47:0c:52:da:8b:4b:6f:d6:53:38:74:d9:e6:b6:fb:e9:7e:2a:
         8a:73:4f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:17:53 2025 by rpki-client