Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File:                     FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier:          /bVVgvGjhnaxoEGGJvf2DEGqm7K7uayM93dFURsyXAk=
Subject key identifier:   3F:59:77:22:D9:E6:33:4F:C8:45:9F:81:89:0B:D8:55:CE:63:AA:80
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer:       /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial:       041D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number:          041A
Signing time:             Wed 05 Nov 2025 03:25:50 +0000
Manifest this update:     Wed 05 Nov 2025 03:25:49 +0000
Manifest next update:     Fri 07 Nov 2025 03:25:49 +0000
Files and hashes:         1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: 3ghVR2tctgP+IAu6xzsxDBBoUT5C0Ip47LuEkfavlNk=)
                          2: CF8B10CE1DB711EFA609B0217DDC24C2.roa (hash: cUUrYIHHPxFgWnYQbOftBzdS94Gj26Vr5vz5884oWrA=)
                          3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                          rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
        Validity
            Not Before: Nov  5 03:25:49 2025 GMT
            Not After : Nov  7 03:25:49 2025 GMT
        Subject: CN=690ac3be-7bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:13:6c:ec:e5:fc:fc:dc:2f:d0:ac:56:3a:a9:
                    05:a7:aa:6a:24:25:34:0d:92:54:db:80:43:4c:a5:
                    87:5d:d6:f6:8c:3c:0b:8e:ee:a6:3e:57:f9:83:95:
                    95:ea:3c:a7:ae:c2:a5:52:6e:58:0c:89:a9:45:2d:
                    a4:cc:0d:10:33:21:2d:8f:6e:7f:b2:2d:46:3f:70:
                    90:eb:28:d8:a6:05:db:c9:00:ed:1b:e5:a8:07:9b:
                    92:bf:5a:92:b7:67:82:6e:31:09:f0:a0:33:59:df:
                    0f:1e:6b:48:7e:6b:7f:05:f2:28:68:a2:b8:fd:a9:
                    f4:4b:fd:2d:02:e6:69:56:79:0e:7f:04:1d:20:b5:
                    ce:7d:28:a5:3c:10:21:57:9a:cf:9b:e9:28:71:f8:
                    6c:49:65:2a:dc:63:27:eb:90:f1:72:d3:ad:88:e7:
                    cb:f0:41:54:83:5d:62:c6:4a:8c:9e:7a:72:25:61:
                    54:02:9c:c0:18:87:92:26:60:3c:14:0d:1c:69:b2:
                    df:16:29:d7:66:c1:7b:d1:d2:40:12:c6:0c:b0:33:
                    f5:2e:9d:99:ca:10:ac:57:ad:4e:33:0d:29:98:8a:
                    79:c5:5e:7c:67:68:09:52:1d:5b:35:04:52:86:0d:
                    77:e8:67:33:fa:39:4e:17:50:17:a9:ba:36:93:ba:
                    ea:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:59:77:22:D9:E6:33:4F:C8:45:9F:81:89:0B:D8:55:CE:63:AA:80
            X509v3 Authority Key Identifier:
                keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:7e:92:12:6c:d3:27:29:96:6c:b1:c6:74:d6:0a:d2:07:da:
         ac:c9:18:72:63:15:c2:9d:03:5d:7b:4e:ba:a8:41:c7:b2:a3:
         72:b9:78:49:51:04:32:d4:95:11:13:c6:c5:9a:de:75:c8:e4:
         0d:75:55:98:6f:7a:a6:27:34:c7:26:44:bd:c3:1c:1a:5c:2a:
         c9:93:37:b5:29:f6:a6:e7:12:3e:4e:92:77:0d:00:5d:e2:77:
         8b:23:d1:c5:9c:13:1e:2d:d7:9c:37:fd:2d:1a:e2:9d:cf:f8:
         63:55:e7:51:2c:30:37:64:5e:c6:d1:09:c9:59:ed:90:63:63:
         91:4f:a3:ec:0c:a5:85:4a:53:dd:b7:68:80:70:9f:e6:7c:76:
         59:ee:93:04:8f:27:96:25:da:f5:40:65:09:f1:50:6c:80:dd:
         bc:4a:e4:41:3c:5c:12:c5:70:4c:8d:0f:3c:96:6a:be:9d:9f:
         10:13:b7:45:0b:1a:c5:0e:0e:df:2d:1d:6d:06:2c:9f:4e:dc:
         07:6a:d7:75:e0:af:f7:56:cf:f2:0a:63:90:7e:70:b3:f7:da:
         ec:f3:bf:51:c2:48:c7:80:1c:cc:d7:83:58:d6:11:db:76:08:
         72:fc:8e:1a:86:80:e9:ad:2f:ac:7d:b8:e9:42:1e:0d:37:61:
         07:3f:6c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:17:15 2025 by rpki-client