Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
File:                     ARf_NlB776Kb324d58jVMKSepOM.mft (raw, json)
Hash identifier:          sWTuK5/9Z0hFhd2HoaitddT+ABoj6/zwbrKDDKIuRLA=
Subject key identifier:   C7:A9:C2:11:56:91:D1:D2:5E:2A:18:4A:F9:BB:DD:96:74:6C:0E:31
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Certificate issuer:       /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial:       0D4C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
Manifest number:          0D4A
Signing time:             Tue 04 Nov 2025 01:12:02 +0000
Manifest this update:     Tue 04 Nov 2025 01:12:02 +0000
Manifest next update:     Thu 06 Nov 2025 01:12:02 +0000
Files and hashes:         1: ARf_NlB776Kb324d58jVMKSepOM.crl (hash: 2Ws5DAfptwLeoZ0FuS6tzIKGNPMKChSOb7SjWNnBO7M=)
                          2: B638C7E6C8C711E997C29757F8AEA228.roa (hash: EisbOpC1Y+D87WQCpz01JdeRv1C7VPmD55bEQs7AK5Y=)
                          3: 7DB93F0EC8C711E9BC304257F8AEA228.roa (hash: UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3404 (0xd4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AF, serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
        Validity
            Not Before: Nov  4 01:12:02 2025 GMT
            Not After : Nov  6 01:12:02 2025 GMT
        Subject: CN=690952e2-f457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:b2:27:ab:41:ec:b6:aa:d3:f9:ee:50:e6:
                    23:e2:5f:75:cc:4b:90:8c:98:08:5a:ea:f6:89:6a:
                    61:49:9f:5f:36:9c:7f:60:f5:79:81:85:65:e1:28:
                    be:db:54:1b:42:93:ca:51:fb:55:91:2b:31:00:72:
                    55:f5:30:57:d4:f6:1b:25:6c:0b:dd:19:5e:22:6e:
                    ea:ae:e3:33:f7:b0:a4:50:78:df:c8:ac:12:f4:ba:
                    11:c0:88:ba:6c:b1:14:d5:5b:f7:37:0f:dd:87:fc:
                    55:96:8e:5d:80:51:80:52:d0:85:cc:0a:aa:a9:57:
                    eb:13:c8:31:3a:3e:62:62:8a:93:8b:ac:3c:62:58:
                    3a:42:33:0b:fc:fb:3b:b5:71:6e:34:00:5f:f1:e5:
                    61:94:7d:ff:c8:18:66:92:e0:de:94:72:81:39:93:
                    dd:01:01:da:68:3a:02:6d:ea:47:80:e8:a4:ff:0c:
                    27:31:ab:ee:1d:57:26:f5:b9:83:47:db:b2:77:17:
                    1e:1d:10:96:c8:27:70:28:85:4a:74:8f:62:fb:81:
                    3b:39:92:5e:db:79:94:3a:71:53:a1:12:4a:2d:7e:
                    81:82:92:12:7f:aa:29:08:d2:30:f7:77:37:a3:83:
                    45:23:0e:2f:49:3b:61:9c:34:f2:b9:15:34:05:e5:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A9:C2:11:56:91:D1:D2:5E:2A:18:4A:F9:BB:DD:96:74:6C:0E:31
            X509v3 Authority Key Identifier:
                keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f9:24:a8:f1:26:13:38:76:f8:54:44:0f:61:61:da:af:6c:
         d1:25:40:e9:8d:1f:86:b7:3c:b7:7e:99:fa:38:87:66:42:42:
         86:41:42:61:8a:2f:c1:cd:c8:25:c2:9d:68:72:75:20:e3:34:
         50:dc:60:1a:88:1a:ad:72:cc:a7:ac:35:36:99:e0:64:84:b6:
         2b:20:b4:fe:69:b3:96:c9:44:5e:92:a3:e1:b9:b5:bf:bc:98:
         8d:1e:53:17:5f:38:fb:ee:c1:32:8a:b2:06:79:4d:ed:12:04:
         00:13:94:ab:e4:5a:db:12:f7:fb:92:fe:14:4d:83:4e:40:ef:
         9d:6b:f1:0d:47:8b:5c:ad:67:9e:07:44:44:22:f3:3c:66:ba:
         b2:c2:14:60:af:84:a5:25:fa:4f:18:eb:33:d5:51:da:52:90:
         65:b8:47:da:e3:69:16:e6:74:f7:31:1c:40:6a:95:42:56:cf:
         2d:61:5c:3a:a5:1c:59:e9:70:01:5a:c6:f5:e9:9a:77:a4:73:
         f0:98:e5:ab:5b:7b:ee:65:d3:1b:c7:1a:91:92:d0:1b:9e:cf:
         d1:87:0e:21:fb:34:11:4b:40:fd:70:14:8d:e0:5d:b8:00:9c:
         b6:5f:a6:1f:11:0e:08:b0:cb:db:e6:ec:ef:7c:c9:ac:18:99:
         c4:85:6a:47
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDUwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTYxNzdBRjExMC8GA1UEBRMoMDExN0ZGMzY1MDdCRUZBMjlCREY2RTFERTdDOEQ1
MzBBNDlFQTRFMzAeFw0yNTExMDQwMTEyMDJaFw0yNTExMDYwMTEyMDJaMBgxFjAU
BgNVBAMTDTY5MDk1MmUyLWY0NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIArInq0HstqrT+e5Q5iPiX3XMS5CMmAha6vaJamFJn182nH9g9XmBhWXh
KL7bVBtCk8pR+1WRKzEAclX1MFfU9hslbAvdGV4ibuqu4zP3sKRQeN/IrBL0uhHA
iLpssRTVW/c3D92H/FWWjl2AUYBS0IXMCqqpV+sTyDE6PmJiipOLrDxiWDpCMwv8
+zu1cW40AF/x5WGUff/IGGaS4N6UcoE5k90BAdpoOgJt6keA6KT/DCcxq+4dVyb1
uYNH27J3Fx4dEJbIJ3AohUp0j2L7gTs5kl7beZQ6cVOhEkotfoGCkhJ/qikI0jD3
dzejg0UjDi9JO2GcNPK5FTQF5ZLXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUx6nC
EVaR0dJeKhhK+bvdlnRsDjEwHwYDVR0jBBgwFoAUARf/NlB776Kb324d58jVMKSe
pOMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU2MTc3LzhGNTFBQjhFODNCRjExRTY4MUFCRUMzN0Y4QUVBMjI4L0FSZl9O
bEI3NzZLYjMyNGQ1OGpWTUtTZXBPTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FSZl9ObEI3NzZLYjMyNGQ1OGpWTUtTZXBPTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTYxNzcvOEY1MUFCOEU4M0JGMTFFNjgxQUJFQzM3RjhB
RUEyMjgvQVJmX05sQjc3NktiMzI0ZDU4alZNS1NlcE9NLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAu+SSo8SYTOHb4VEQPYWHar2zRJUDp
jR+Gtzy3fpn6OIdmQkKGQUJhii/Bzcglwp1ocnUg4zRQ3GAaiBqtcsynrDU2meBk
hLYrILT+abOWyURekqPhubW/vJiNHlMXXzj77sEyirIGeU3tEgQAE5Sr5FrbEvf7
kv4UTYNOQO+da/ENR4tcrWeeB0REIvM8ZrqywhRgr4SlJfpPGOsz1VHaUpBluEfa
42kW5nT3MRxAapVCVs8tYVw6pRxZ6XABWsb16Zp3pHPwmOWrW3vuZdMbxxqRktAb
ns/Rhw4h+zQRS0D9cBSN4F24AJy2X6YfEQ4IsMvb5uzvfMmsGJnEhWpH
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:51:53 2025 by rpki-client