Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
File:                     QVvN73HfdO_cZVY4QJM9lPIraRM.mft (raw, json)
Hash identifier:          J/KDDukUICsP9lnQLgX4jm8yANu6+1FNydhcum+feq0=
Subject key identifier:   09:CF:1B:B2:DA:E9:CB:C8:25:BA:35:06:B0:0F:E2:E8:67:4D:E7:C9
Authority key identifier: 41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13
Certificate issuer:       /CN=F36374C9AR/serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
Certificate serial:       0D82
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
Manifest number:          0D81
Signing time:             Tue 04 Nov 2025 01:09:03 +0000
Manifest this update:     Tue 04 Nov 2025 01:09:02 +0000
Manifest next update:     Thu 06 Nov 2025 01:09:02 +0000
Files and hashes:         1: QVvN73HfdO_cZVY4QJM9lPIraRM.crl (hash: 4fa0OJszZCAmRGvfSwa6fx6tDuPOzBanQ5xkapa3fJk=)
                          2: A3321ED8542E11E6BE4E521EF8AEA228.roa (hash: sJ9cmmKEMJXtaW4GTF37G3rJicRaTpT/POSsPQBapsQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                          rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3458 (0xd82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36374C9AR, serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
        Validity
            Not Before: Nov  4 01:09:02 2025 GMT
            Not After : Nov  6 01:09:02 2025 GMT
        Subject: CN=6909522f-b62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:9b:f2:e8:e4:67:07:6f:c5:a0:a3:aa:22:
                    55:28:23:22:2a:9f:25:d5:f3:30:38:bb:7c:6e:62:
                    2c:01:b5:64:0e:ef:83:65:02:01:2c:55:bb:5e:82:
                    fb:b6:e8:74:b1:9f:d4:5e:04:06:b6:43:83:84:8a:
                    96:c5:8a:25:4f:32:f0:ae:4c:aa:46:4c:72:2c:bf:
                    c2:17:19:38:be:cb:2d:bb:b6:42:97:0d:05:24:c4:
                    dd:d3:45:6d:56:13:70:09:a7:9f:c8:21:77:bb:af:
                    44:77:e5:57:b8:70:d1:cc:79:88:52:8b:f9:63:4b:
                    94:9f:25:82:7d:5c:5a:b3:e6:29:fc:d7:4e:aa:ab:
                    dc:c5:58:47:8c:cf:e8:d0:54:d6:a1:3a:28:29:c1:
                    67:c7:6c:fc:4a:7d:d3:38:80:3f:05:4d:87:61:72:
                    a6:a3:1f:06:ea:76:07:8d:52:92:4b:e1:18:69:87:
                    08:fe:ef:70:b9:6f:28:cf:1b:f1:7f:52:d2:12:23:
                    cb:a5:7c:85:45:28:17:19:26:fd:22:56:e8:bc:45:
                    52:ac:b2:03:bf:2e:7c:56:af:85:e0:3d:fd:a7:bc:
                    ec:63:8b:ad:ae:93:71:00:4f:e7:f5:11:f7:21:16:
                    a1:ae:7e:de:da:63:09:16:86:dc:1b:27:82:31:0e:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CF:1B:B2:DA:E9:CB:C8:25:BA:35:06:B0:0F:E2:E8:67:4D:E7:C9
            X509v3 Authority Key Identifier:
                keyid:41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:72:26:11:f8:b8:98:38:c5:22:7d:d7:b1:02:65:5a:78:66:
         86:7f:c7:c6:97:65:3c:da:fe:6b:95:33:a9:62:cc:25:f4:5b:
         73:ef:d3:f2:bc:7d:31:30:2d:73:6b:98:0e:e2:28:87:ed:02:
         d2:d9:1e:15:a3:32:0f:0e:21:b1:82:69:b5:e5:d9:0e:69:87:
         b5:d7:ec:0c:ff:8a:9c:40:3c:d5:56:99:a4:c0:01:ea:54:31:
         3b:8d:ef:88:7d:11:59:c1:76:b2:fa:3f:75:86:1e:3a:bd:51:
         48:04:94:1f:66:b6:37:e3:ee:a5:28:c7:89:18:3b:38:87:91:
         df:63:72:cb:c2:39:a9:e2:b7:dc:7a:1d:77:d6:0b:14:81:dc:
         a1:21:f8:9d:6b:47:47:90:bd:2f:72:b1:90:08:bd:87:4d:b2:
         ed:cd:aa:1e:c4:39:4d:32:90:b4:8c:2b:1c:db:8d:83:1f:f7:
         aa:f0:55:51:4f:cf:4e:05:2f:1f:11:e8:7f:c5:f9:44:e6:0d:
         01:3a:55:e8:87:a3:be:5f:c3:9a:35:c0:42:54:96:ad:32:56:
         d8:d5:9e:93:99:2c:5a:82:b3:6b:93:74:de:0d:ca:b8:60:38:
         f4:63:a2:fd:fe:ad:df:81:3f:da:4b:d9:e2:21:3a:e9:ab:56:
         a4:41:8b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:11:27 2025 by rpki-client