Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
File:                     kiiCgOPYgt7EFfWIHAFch2WdaEo.mft (raw, json)
Hash identifier:          5cWkV13AKMtB1K2C0+vT4unBL9uCxzhm9lHEYMASCYI=
Subject key identifier:   92:B2:DB:A6:D7:17:86:6E:34:FB:92:84:D8:9B:2A:59:B8:EE:F5:92
Authority key identifier: 92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A
Certificate issuer:       /CN=F365F7E8AR/serialNumber=92288280E3D882DEC415F5881C015C87659D684A
Certificate serial:       02CF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
Manifest number:          02CE
Signing time:             Tue 04 Nov 2025 05:14:34 +0000
Manifest this update:     Tue 04 Nov 2025 05:14:33 +0000
Manifest next update:     Thu 06 Nov 2025 05:14:33 +0000
Files and hashes:         1: kiiCgOPYgt7EFfWIHAFch2WdaEo.crl (hash: RD9YWYeYTI5nbJXzvO2t10IWFSyAOlKTQXEiIGfRSTU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                          rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 05:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AR, serialNumber=92288280E3D882DEC415F5881C015C87659D684A
        Validity
            Not Before: Nov  4 05:14:33 2025 GMT
            Not After : Nov  6 05:14:33 2025 GMT
        Subject: CN=69098bba-93bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:15:70:e3:bc:50:cb:a0:6e:8d:d5:d6:26:
                    c6:14:6a:51:62:63:b5:b6:6a:22:2c:e5:38:b9:80:
                    f8:50:9e:ec:21:84:73:0f:42:f8:03:8b:d3:90:88:
                    d7:59:9c:de:1b:4d:8f:3c:c8:b4:1a:57:22:df:91:
                    7a:d1:56:ce:5c:b8:d5:19:33:d3:16:a4:00:19:2c:
                    b2:de:31:0a:79:04:36:18:89:fd:f2:2c:33:7e:c6:
                    08:2e:ff:30:66:01:c9:29:89:35:14:c5:31:95:60:
                    84:21:72:7c:ac:f3:17:2f:ad:d8:01:07:ce:b6:50:
                    f1:82:44:dd:2d:58:7b:51:31:64:6c:17:46:1f:66:
                    3c:bf:7f:28:5a:8f:16:99:59:97:fd:53:8c:8a:f5:
                    bd:ad:83:12:54:ad:bf:0d:ca:91:aa:51:a6:f2:f1:
                    4d:31:0f:72:74:10:a2:70:9e:32:fd:94:74:cd:c6:
                    13:96:e7:45:62:0a:45:5d:c8:0c:d4:2a:dd:19:42:
                    ac:a0:15:23:82:b2:85:56:35:e1:2c:5d:10:62:1c:
                    cd:e0:d3:b8:0b:35:23:5a:01:cb:bb:dd:85:a4:73:
                    b5:89:13:71:52:84:93:17:c8:68:8f:28:d5:6a:76:
                    25:f0:9d:8e:f0:99:ee:41:1d:ca:88:10:3f:35:38:
                    98:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B2:DB:A6:D7:17:86:6E:34:FB:92:84:D8:9B:2A:59:B8:EE:F5:92
            X509v3 Authority Key Identifier:
                keyid:92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:96:35:f8:79:b0:9b:13:97:1c:93:2d:63:4b:5b:9e:27:65:
         2b:3d:bd:59:c9:2b:b1:07:30:18:a2:9b:fc:2b:f4:df:1b:6e:
         12:64:29:24:06:f1:3e:24:d8:e2:9a:6a:1c:29:a5:40:37:b9:
         18:25:0d:fd:35:d2:a6:ae:0f:6d:06:ff:f5:61:2c:f9:93:04:
         b0:a9:d5:72:72:ea:d4:b1:b0:46:57:a6:94:db:1d:82:6d:6b:
         56:16:76:fd:ba:28:d0:fa:46:89:a5:6c:ab:1d:dc:57:0f:95:
         b2:21:dd:a6:69:ab:76:b1:3b:66:47:de:d9:7c:24:3e:7b:3a:
         80:3d:87:90:9b:95:d5:8d:b7:b9:74:29:19:e1:92:2f:e4:43:
         2d:ec:0f:31:ad:e4:ac:30:78:02:44:21:d4:34:09:23:d1:f6:
         5a:ae:c6:e8:ff:ba:8c:a3:5f:8f:0f:be:cf:5c:7f:4f:98:28:
         7e:1f:ea:f3:b3:23:9b:5b:4b:08:4d:88:d8:39:73:6c:77:0a:
         b7:15:ea:53:ad:5a:42:9c:b2:a1:d9:2b:d8:d3:0d:90:3a:48:
         e1:83:20:9d:8c:10:e2:1d:2b:f3:7e:de:c8:f6:f3:9c:af:11:
         13:ae:40:54:0f:12:e4:7d:40:97:0d:fe:d6:ba:34:bc:65:5c:
         bf:26:ed:d1
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUY3RThBUjExMC8GA1UEBRMoOTIyODgyODBFM0Q4ODJERUM0MTVGNTg4MUMwMTVD
ODc2NTlENjg0QTAeFw0yNTExMDQwNTE0MzNaFw0yNTExMDYwNTE0MzNaMBgxFjAU
BgNVBAMTDTY5MDk4YmJhLTkzYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHDRVw47xQy6BujdXWJsYUalFiY7W2aiIs5Ti5gPhQnuwhhHMPQvgDi9OQ
iNdZnN4bTY88yLQaVyLfkXrRVs5cuNUZM9MWpAAZLLLeMQp5BDYYif3yLDN+xggu
/zBmAckpiTUUxTGVYIQhcnys8xcvrdgBB862UPGCRN0tWHtRMWRsF0YfZjy/fyha
jxaZWZf9U4yK9b2tgxJUrb8NypGqUaby8U0xD3J0EKJwnjL9lHTNxhOW50ViCkVd
yAzUKt0ZQqygFSOCsoVWNeEsXRBiHM3g07gLNSNaAcu73YWkc7WJE3FShJMXyGiP
KNVqdiXwnY7wme5BHcqIED81OJiLAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUkrLb
ptcXhm40+5KE2JsqWbju9ZIwHwYDVR0jBBgwFoAUkiiCgOPYgt7EFfWIHAFch2Wd
aEowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVGN0U4L0I4N0JDMjc2OTZDQTExRUVCRkQ1QUM3M0QyNUJFNDY1L2tpaUNn
T1BZZ3Q3RUZmV0lIQUZjaDJXZGFFby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2tpaUNnT1BZZ3Q3RUZmV0lIQUZjaDJXZGFFby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NUY3RTgvQjg3QkMyNzY5NkNBMTFFRUJGRDVBQzczRDI1QkU0
NjUva2lpQ2dPUFlndDdFRmZXSUhBRmNoMldkYUVvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbljX4ebCbE5ccky1jS1ueJ2UrPb1ZySux
BzAYopv8K/TfG24SZCkkBvE+JNjimmocKaVAN7kYJQ39NdKmrg9tBv/1YSz5kwSw
qdVycurUsbBGV6aU2x2CbWtWFnb9uijQ+kaJpWyrHdxXD5WyId2maat2sTtmR97Z
fCQ+ezqAPYeQm5XVjbe5dCkZ4ZIv5EMt7A8xreSsMHgCRCHUNAkj0fZarsbo/7qM
o1+PD77PXH9PmCh+H+rzsyObW0sITYjYOXNsdwq3FepTrVpCnLKh2SvY0w2QOkjh
gyCdjBDiHSvzft7I9vOcrxETrkBUDxLkfUCXDf7WujS8ZVy/Ju3R
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:40:35 2025 by rpki-client