Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
File:                     nLoUINchzAMCPFAG0iUcILr0yII.mft (raw, json)
Hash identifier:          pCMis8ehRTl4XG689bmAoIVMIzekL7RMR/olObDFkbs=
Subject key identifier:   3A:87:F7:09:55:2E:7B:89:3B:39:78:03:C2:8E:9D:32:1E:AA:AB:77
Authority key identifier: 9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82
Certificate issuer:       /CN=F3651E73AR/serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
Certificate serial:       0D72
Authority info access:    rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
Manifest number:          0D6C
Signing time:             Tue 04 Nov 2025 01:10:48 +0000
Manifest this update:     Tue 04 Nov 2025 01:10:47 +0000
Manifest next update:     Thu 06 Nov 2025 01:10:47 +0000
Files and hashes:         1: nLoUINchzAMCPFAG0iUcILr0yII.crl (hash: 2+dShPrStDoXaaZRy1UzVBfGSy9ius2ezWv7ZyA3J8g=)
                          2: D365A0ACF80D11EFBEB14452762E951A.roa (hash: Am6JfmXKv4DHhKvXRKWcitTRJPjjXl+0+2dzYYkuDLU=)
                          3: 35AAF9269B8511EC9C57BEA05A40D577.roa (hash: IkRiEA4+pjihvXLHrg2ngxaBC/GnITy6qHEusBSCBlo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                          rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 01:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3442 (0xd72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AR, serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
        Validity
            Not Before: Nov  4 01:10:47 2025 GMT
            Not After : Nov  6 01:10:47 2025 GMT
        Subject: CN=69095298-467e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:20:05:c7:2f:32:58:ab:65:96:35:41:18:
                    a8:b1:05:9d:03:12:98:aa:c0:dc:51:55:83:dd:b4:
                    68:70:ac:98:f1:b9:a6:8a:f9:07:ec:ec:ce:da:ad:
                    15:fe:f3:27:62:4a:52:7a:87:0a:9c:52:4d:f2:f5:
                    c2:eb:5c:8f:a1:1e:c0:94:33:d6:9f:77:e6:a1:2a:
                    56:1f:0f:a7:d7:d6:3e:0c:b9:f5:2f:77:e9:2b:49:
                    e7:f1:b0:b7:df:97:0b:f6:04:d2:80:9d:9a:89:20:
                    b2:61:ca:e7:9f:b2:f1:7b:81:8f:05:7e:b8:fb:2b:
                    8d:d0:a6:d9:15:75:43:f4:57:b5:4b:b5:5c:42:18:
                    14:e0:5f:f0:69:54:b1:f9:d6:d5:71:0d:99:28:c7:
                    0a:4b:ef:7d:22:03:c8:d7:a9:da:4d:99:02:e8:2f:
                    1f:46:8d:53:39:6b:0e:f6:8d:b6:16:f0:8c:1e:8e:
                    8b:e0:5f:69:42:bb:aa:59:4e:da:b1:2b:d1:0e:64:
                    04:80:d3:24:ba:16:06:48:23:31:c6:26:5b:d8:0f:
                    93:08:54:a8:8d:84:d7:ca:fb:c3:d5:fe:f1:42:c5:
                    66:b2:83:98:fe:4b:1c:ef:19:89:55:6a:77:d9:97:
                    4f:50:04:d5:c0:84:35:54:e9:23:43:4b:26:74:f1:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:87:F7:09:55:2E:7B:89:3B:39:78:03:C2:8E:9D:32:1E:AA:AB:77
            X509v3 Authority Key Identifier:
                keyid:9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:65:88:e6:3a:ac:97:ee:43:69:56:c7:57:6e:16:19:6f:b0:
         45:55:61:6e:0a:95:41:12:00:06:a3:27:2a:bf:f9:07:f2:9e:
         5d:c3:6a:b2:8d:31:96:39:9c:c4:c3:4b:ca:d4:b1:32:cf:20:
         6f:cb:40:a4:ce:85:4a:74:2a:4e:06:aa:6f:52:75:42:ff:b8:
         d4:3e:cb:ed:f8:0c:b1:6f:a8:0e:dc:5f:42:43:02:d2:7c:ce:
         ac:83:cd:b5:17:0b:6d:a4:52:99:c4:46:d8:7c:85:8d:b8:fe:
         47:16:01:58:45:f3:6b:72:7a:30:e8:4b:71:ac:37:39:43:18:
         d7:4d:ec:a6:cb:53:4e:d8:6b:39:ea:9b:ab:a4:36:ba:7e:1f:
         7f:f7:24:96:1f:9d:e7:33:23:75:15:97:77:b8:95:2e:1f:4b:
         f0:e4:01:0b:95:d5:d8:f2:fa:a0:15:ad:96:82:b2:2f:15:1b:
         a5:2f:90:9d:1b:ee:aa:e9:53:5b:3a:ea:cc:d8:52:4e:50:6c:
         c2:88:e3:25:d5:66:c5:68:ed:d8:e6:7e:b4:22:a1:f7:5a:a1:
         e0:21:cc:61:74:8f:5c:c9:06:5e:cf:8c:4c:05:2c:51:3a:70:
         ad:ee:e4:19:c3:d9:76:f3:84:b0:58:62:be:00:f1:66:c6:e2:
         6a:ff:8b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:04:00 2025 by rpki-client