Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
File:                     ogtTm8eSX3rsKacM9qGEeJGpsxI.mft (raw, json)
Hash identifier:          HF3A807e8NVCCaQqx5bTgdWHxNaYCRaAGFOABHmaWCk=
Subject key identifier:   87:14:49:77:1C:B9:74:E2:03:2E:67:95:3C:AB:30:E0:F8:64:AF:68
Authority key identifier: A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12
Certificate issuer:       /CN=F3642C0FAR/serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
Certificate serial:       0535
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
Manifest number:          0534
Signing time:             Wed 05 Nov 2025 02:54:37 +0000
Manifest this update:     Wed 05 Nov 2025 02:54:36 +0000
Manifest next update:     Fri 07 Nov 2025 02:54:36 +0000
Files and hashes:         1: ogtTm8eSX3rsKacM9qGEeJGpsxI.crl (hash: 4UcBKRtkypaPirsiifJl6V9jNwkjM1tve745ChHwv2I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1333 (0x535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAR, serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
        Validity
            Not Before: Nov  5 02:54:36 2025 GMT
            Not After : Nov  7 02:54:36 2025 GMT
        Subject: CN=690abc6d-62a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c7:6a:0b:de:8e:bd:1f:79:18:82:ce:e3:ad:
                    b4:a8:ff:1c:1d:2b:cb:a6:ca:a7:7c:74:2b:82:2e:
                    81:f8:f4:45:cb:f0:bb:29:08:88:d9:09:b0:d9:67:
                    56:d7:7d:47:26:5f:b7:db:1c:1c:bd:b7:6e:5b:16:
                    b9:86:43:61:6f:35:00:7e:b3:05:1b:c6:50:8d:23:
                    c6:73:79:76:d8:a3:78:4f:5a:d4:35:6d:6c:b7:ec:
                    85:66:93:66:b6:5d:fc:32:a7:86:8b:62:42:90:c2:
                    5b:42:86:ad:e6:68:35:13:f4:d5:6f:c8:33:05:25:
                    5a:75:82:4f:1f:77:c5:46:44:53:0a:3d:39:7f:4d:
                    c9:29:07:f3:bb:7a:8e:c2:46:0e:d0:ba:8d:f9:40:
                    c1:5d:93:44:ee:aa:98:4b:f4:c8:11:33:f4:a5:91:
                    fa:a1:ed:41:97:f1:d5:a0:a6:32:b2:48:c7:c0:7a:
                    2b:5a:bf:5b:68:b4:e4:21:e1:da:09:a6:fa:cb:d7:
                    c1:a7:aa:7d:0c:a0:63:5c:7e:fc:66:f9:fc:9e:95:
                    62:9d:62:c1:88:d7:c1:95:fe:98:89:13:89:ca:31:
                    2f:1e:e8:4d:70:98:b3:05:f6:dd:0f:6c:7c:23:47:
                    d7:19:e6:4f:83:c8:09:06:67:70:ea:e3:7b:de:c0:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:14:49:77:1C:B9:74:E2:03:2E:67:95:3C:AB:30:E0:F8:64:AF:68
            X509v3 Authority Key Identifier:
                keyid:A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:0b:ee:45:13:c8:40:38:02:75:d1:55:65:9e:f1:c5:98:7d:
         8c:ff:79:a5:cf:91:c7:2e:25:ce:76:d1:d0:3f:3c:dc:2a:ba:
         8b:49:a3:c8:6e:fd:a8:e6:a9:75:94:71:29:6d:79:9d:4e:94:
         9e:dd:f9:56:be:fb:43:1d:8c:17:b8:dd:b2:b8:99:ee:5f:44:
         20:27:9d:fa:f6:24:06:60:10:88:68:2a:95:67:2a:18:86:9e:
         16:af:9b:92:e3:3d:e7:b8:a5:ee:a0:e8:0f:0d:d3:a9:a2:14:
         2a:cb:21:da:ef:e8:37:82:13:d6:73:4e:a4:79:7c:25:5b:b7:
         0f:bc:b1:31:0b:84:40:f7:16:9d:01:4e:6a:22:48:c7:19:bb:
         93:07:74:4f:08:bc:8e:b5:d1:37:1e:24:78:13:28:a2:ad:74:
         ab:f1:c0:82:8b:09:0e:29:8e:93:ca:d5:79:3c:a3:53:a2:46:
         e9:f4:d7:ad:61:49:8b:fe:c4:ad:07:59:78:61:3c:61:91:06:
         c2:d5:1b:5e:5c:11:69:47:cd:31:6d:6b:8b:8b:db:23:af:55:
         0c:06:b6:98:0c:71:95:bd:0a:b8:6c:85:63:2d:1c:58:49:92:
         f4:be:d3:92:82:4e:fe:d4:52:8d:49:78:28:db:ed:f0:ed:de:
         28:6e:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:17:57 2025 by rpki-client