Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File:                     pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier:          2u7fVDQ4ZuJUyT4mTa3E8em7f7aCE96U1ESRMZZgXkA=
Subject key identifier:   E5:B1:CD:E1:D3:5E:B0:DB:5B:32:26:6D:18:6E:E1:CE:EA:5B:5D:BF
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer:       /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial:       01FC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number:          01FC
Signing time:             Tue 04 Nov 2025 05:38:19 +0000
Manifest this update:     Tue 04 Nov 2025 05:38:18 +0000
Manifest next update:     Thu 06 Nov 2025 05:38:18 +0000
Files and hashes:         1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: 97kzLrcz+P/XGSxOvBOEUSAavcP683E3TGnBwoA8VFk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                          rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 05:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
        Validity
            Not Before: Nov  4 05:38:18 2025 GMT
            Not After : Nov  6 05:38:18 2025 GMT
        Subject: CN=6909914b-ad8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:83:a6:dd:da:42:f7:66:22:11:f2:79:af:13:
                    86:cd:1d:06:2e:57:45:24:37:1a:00:ab:ef:f9:9f:
                    3b:88:6a:7c:4d:e9:30:06:97:80:57:7d:9c:5d:4f:
                    f8:51:fb:59:e8:80:71:2a:6a:5c:7b:df:1d:09:e9:
                    e8:e0:77:14:02:f3:d1:27:3e:67:3b:2a:e4:46:6d:
                    65:d4:34:b0:e2:04:06:47:65:58:a9:67:32:ba:7c:
                    8c:03:d2:09:f6:cb:5f:8c:c3:4c:a1:f5:c7:56:e9:
                    63:91:c9:8c:64:0c:2e:4d:64:98:fa:cd:60:36:fe:
                    4d:71:01:12:a9:41:d9:e4:61:10:40:12:1b:32:99:
                    1c:90:cb:ca:6f:e3:99:f8:12:ba:8a:1c:a3:96:e0:
                    5a:f6:4e:fb:28:db:3c:9f:1f:1f:d0:2d:85:05:38:
                    71:f7:c6:50:9b:66:22:2a:17:3e:6c:a5:6b:8b:21:
                    73:19:6a:bd:8a:bf:63:8c:be:47:d8:40:b7:6e:f3:
                    2a:0e:14:91:33:fe:8e:80:59:e1:a7:16:65:e0:f1:
                    e9:b1:45:4c:2d:ef:84:74:f2:72:4e:19:ac:1e:62:
                    57:a8:6c:fc:7c:1d:f4:c6:a5:14:cf:72:a4:f9:c3:
                    0a:57:03:8a:02:eb:b5:58:5d:d4:6a:7a:2a:b1:16:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B1:CD:E1:D3:5E:B0:DB:5B:32:26:6D:18:6E:E1:CE:EA:5B:5D:BF
            X509v3 Authority Key Identifier:
                keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:5e:75:29:06:8a:ea:31:c9:66:7f:f4:80:05:83:1a:d0:2f:
         20:3b:8f:aa:8c:11:f2:05:47:09:81:6f:7a:41:49:d1:8e:57:
         be:8a:cb:9b:10:c4:af:a6:df:09:48:5d:b6:e0:da:dc:67:03:
         f9:10:98:d9:fa:7e:f4:bd:8f:88:41:a3:5b:ee:be:54:d7:6c:
         8b:d4:78:97:a1:7f:ce:80:92:74:0b:0d:84:eb:e2:1e:27:93:
         56:85:f5:be:53:b9:f4:94:46:e0:b6:70:3f:be:27:de:86:65:
         9c:d7:b5:1c:22:3e:33:a4:f8:70:4c:79:e1:3c:34:6e:94:93:
         74:2a:1a:3d:36:b3:a3:5f:5f:ba:68:bc:a7:bf:a7:0a:db:b9:
         dc:b2:e1:38:77:17:f7:91:d5:ba:57:41:ec:a2:75:7e:c6:f8:
         ec:a1:2f:bf:02:3b:dc:00:29:1c:d3:59:c3:7c:e2:f3:99:ce:
         29:50:b4:61:30:4a:ca:64:b0:00:57:66:3b:ed:dd:13:75:f4:
         6a:53:18:a5:09:61:5a:1e:1a:39:e5:97:68:86:fe:26:cc:fa:
         fb:a4:7b:e9:4c:b5:ca:d4:8e:83:7f:ff:94:d1:1a:7a:2c:52:
         bb:6b:0c:26:3f:c3:ac:95:27:48:f0:2e:bd:21:de:34:32:f8:
         cc:37:29:82
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDJDQjFBUjExMC8GA1UEBRMoQTZBMzQzQjI3RjlGNzYyQUU0MUNGN0M1QkM2QjUx
MTRDMjg4NUE3NzAeFw0yNTExMDQwNTM4MThaFw0yNTExMDYwNTM4MThaMBgxFjAU
BgNVBAMTDTY5MDk5MTRiLWFkOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDig6bd2kL3ZiIR8nmvE4bNHQYuV0UkNxoAq+/5nzuIanxN6TAGl4BXfZxd
T/hR+1nogHEqalx73x0J6ejgdxQC89EnPmc7KuRGbWXUNLDiBAZHZVipZzK6fIwD
0gn2y1+Mw0yh9cdW6WORyYxkDC5NZJj6zWA2/k1xARKpQdnkYRBAEhsymRyQy8pv
45n4ErqKHKOW4Fr2Tvso2zyfHx/QLYUFOHH3xlCbZiIqFz5spWuLIXMZar2Kv2OM
vkfYQLdu8yoOFJEz/o6AWeGnFmXg8emxRUwt74R08nJOGaweYleobPx8HfTGpRTP
cqT5wwpXA4oC67VYXdRqeiqxFvTDAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU5bHN
4dNesNtbMiZtGG7hzupbXb8wHwYDVR0jBBgwFoAUpqNDsn+fdirkHPfFvGtRFMKI
WncwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyQ0IxLzQyODBDRTYwMzQ4OTExRUZBQTE4NjZBMjc2MkU5NTFBL3BxTkRz
bi1mZGlya0hQZkZ2R3RSRk1LSVduYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3BxTkRzbi1mZGlya0hQZkZ2R3RSRk1LSVduYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDJDQjEvNDI4MENFNjAzNDg5MTFFRkFBMTg2NkEyNzYyRTk1
MUEvcHFORHNuLWZkaXJrSFBmRnZHdFJGTUtJV25jLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqXnUpBorqMclmf/SABYMa0C8gO4+qjBHy
BUcJgW96QUnRjle+isubEMSvpt8JSF224NrcZwP5EJjZ+n70vY+IQaNb7r5U12yL
1HiXoX/OgJJ0Cw2E6+IeJ5NWhfW+U7n0lEbgtnA/vifehmWc17UcIj4zpPhwTHnh
PDRulJN0Kho9NrOjX1+6aLynv6cK27ncsuE4dxf3kdW6V0HsonV+xvjsoS+/Ajvc
ACkc01nDfOLzmc4pULRhMErKZLAAV2Y77d0TdfRqUxilCWFaHho55Zdohv4mzPr7
pHvpTLXK1I6Df/+U0Rp6LFK7awwmP8OslSdI8C69Id40MvjMNymC
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:59:36 2025 by rpki-client