Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
File:                     JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft (raw, json)
Hash identifier:          m7EMklybEU7CRciYKSumTIN9eIvpAPNBlBzbmwa9TPs=
Subject key identifier:   25:05:32:91:C5:79:CE:48:DC:A0:7F:8F:B4:31:2C:02:A4:94:51:CE
Authority key identifier: 25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
Certificate issuer:       /CN=F3646FFEAR/serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
Certificate serial:       0549
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
Manifest number:          0548
Signing time:             Wed 05 Nov 2025 02:50:42 +0000
Manifest this update:     Wed 05 Nov 2025 02:50:41 +0000
Manifest next update:     Fri 07 Nov 2025 02:50:41 +0000
Files and hashes:         1: JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl (hash: vUEi8OL04oMcTHlvR9RT+gX6DlTdrWH50/EnK7qabaQ=)
                          2: 5C5FD3B8B1B811ECBE7762D35A40D577.roa (hash: vGmD4pROB8VFUopnGf6To3GzFkP29HGjp5Gl6MpnPn0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                          rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAR, serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
        Validity
            Not Before: Nov  5 02:50:41 2025 GMT
            Not After : Nov  7 02:50:41 2025 GMT
        Subject: CN=690abb81-82f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f3:1a:51:7c:6d:95:6e:3b:ee:d1:b0:a7:4d:
                    75:e1:f1:4b:66:df:bd:1a:70:5f:a9:98:49:70:54:
                    fb:ea:d3:49:41:19:db:ab:47:28:26:25:12:95:96:
                    d6:28:11:2e:d6:10:d1:89:f4:d8:7e:a8:de:cf:b0:
                    85:f4:00:46:2e:66:57:0b:58:e9:9c:e7:ef:14:3f:
                    3c:58:7f:7a:32:1f:20:95:11:d5:f9:72:a2:e7:ce:
                    1b:bb:20:48:a7:69:9b:08:2e:5d:95:ec:89:bb:75:
                    89:c2:18:ac:9a:56:90:6e:3a:2f:61:88:16:c4:79:
                    b2:e1:b7:d8:0b:1b:ae:43:2c:a7:0f:de:1f:f1:c0:
                    5f:28:31:e3:f6:a5:76:73:8a:a3:d7:2c:19:88:f9:
                    2c:99:2c:9c:d2:bb:f7:6a:bb:1a:04:6e:44:64:09:
                    ba:45:34:a3:b4:db:72:71:a8:ea:9c:8c:2e:a6:68:
                    2a:8e:6b:9c:e1:37:b6:4d:dd:38:ba:ee:91:14:19:
                    07:b9:69:d7:6a:c1:6e:69:19:35:8b:9e:91:ee:34:
                    a4:b8:38:58:fa:50:ea:74:b2:a8:e6:48:66:21:17:
                    a5:bd:8e:7d:6e:35:c8:d0:1c:b6:64:6c:ee:38:d7:
                    a2:01:dc:50:70:d8:85:a4:dc:60:6d:69:28:b9:27:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:05:32:91:C5:79:CE:48:DC:A0:7F:8F:B4:31:2C:02:A4:94:51:CE
            X509v3 Authority Key Identifier:
                keyid:25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5d:f1:92:a0:56:cd:b9:b6:f0:da:36:db:3f:c6:37:fa:ce:
         d4:6c:ae:66:45:af:00:2d:a3:44:f6:dc:14:12:e5:df:8b:87:
         cc:e6:1e:8d:ab:b1:b3:50:85:66:be:71:c5:a2:c2:17:43:71:
         32:ce:22:c4:10:e7:2a:39:13:0b:7c:c3:13:16:0d:d2:f6:18:
         7c:a5:a7:a1:e2:ae:49:c4:87:7f:73:12:b8:f4:22:be:5f:6b:
         79:e8:53:57:22:82:61:d8:96:c7:73:a3:58:fc:af:b3:98:1a:
         5c:ec:6b:f1:f7:0f:27:9d:55:c0:c9:4f:55:e7:5a:64:f8:d8:
         c5:6c:4d:54:75:c1:15:2f:d7:b1:91:52:0e:b3:93:1f:7f:4f:
         6a:ae:84:36:1f:93:29:d4:49:62:6c:8c:68:98:60:c9:f5:7c:
         67:5e:aa:49:53:d2:5b:ee:13:e4:9a:08:cc:6d:f2:1d:24:41:
         9f:b0:b7:17:4b:6e:64:35:40:f9:24:91:2d:ee:01:41:45:bf:
         02:49:34:3d:d8:73:3d:b3:87:43:17:72:f3:ae:24:46:c4:b6:
         5e:60:9b:71:94:1e:6e:db:11:5b:cb:d5:1e:a7:c6:58:82:48:
         66:82:f3:4f:6d:52:7d:35:2d:01:90:4c:c1:71:f5:82:54:85:
         dd:9f:d8:43
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDZGRkVBUjExMC8GA1UEBRMoMjUzRjFBNjg3NzE1MTBBNjY1NkQ3RDY2MEY1MDNE
NTVCMDZCOTAwNDAeFw0yNTExMDUwMjUwNDFaFw0yNTExMDcwMjUwNDFaMBgxFjAU
BgNVBAMTDTY5MGFiYjgxLTgyZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDa8xpRfG2Vbjvu0bCnTXXh8Utm370acF+pmElwVPvq00lBGdurRygmJRKV
ltYoES7WENGJ9Nh+qN7PsIX0AEYuZlcLWOmc5+8UPzxYf3oyHyCVEdX5cqLnzhu7
IEinaZsILl2V7Im7dYnCGKyaVpBuOi9hiBbEebLht9gLG65DLKcP3h/xwF8oMeP2
pXZziqPXLBmI+SyZLJzSu/dquxoEbkRkCbpFNKO023JxqOqcjC6maCqOa5zhN7ZN
3Ti67pEUGQe5addqwW5pGTWLnpHuNKS4OFj6UOp0sqjmSGYhF6W9jn1uNcjQHLZk
bO4416IB3FBw2IWk3GBtaSi5J/IrAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUJQUy
kcV5zkjcoH+PtDEsAqSUUc4wHwYDVR0jBBgwFoAUJT8aaHcVEKZlbX1mD1A9VbBr
kAQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ2RkZFL0FGMTdDOURFQjAyOTExRUNBQkRGMkZDMDVBNDBENTc3L0pUOGFh
SGNWRUtabGJYMW1EMUE5VmJCcmtBUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0pUOGFhSGNWRUtabGJYMW1EMUE5VmJCcmtBUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDZGRkUvQUYxN0M5REVCMDI5MTFFQ0FCREYyRkMwNUE0MEQ1
NzcvSlQ4YWFIY1ZFS1psYlgxbUQxQTlWYkJya0FRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0XfGSoFbNubbw2jbbP8Y3+s7UbK5mRa8A
LaNE9twUEuXfi4fM5h6Nq7GzUIVmvnHFosIXQ3EyziLEEOcqORMLfMMTFg3S9hh8
paeh4q5JxId/cxK49CK+X2t56FNXIoJh2JbHc6NY/K+zmBpc7Gvx9w8nnVXAyU9V
51pk+NjFbE1UdcEVL9exkVIOs5Mff09qroQ2H5Mp1ElibIxomGDJ9XxnXqpJU9Jb
7hPkmgjMbfIdJEGfsLcXS25kNUD5JJEt7gFBRb8CSTQ92HM9s4dDF3LzriRGxLZe
YJtxlB5u2xFby9Uep8ZYgkhmgvNPbVJ9NS0BkEzBcfWCVIXdn9hD
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:28:39 2025 by rpki-client