Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
File:                     BoarqsOL5_GqLSv8WD8tN9iLpEI.mft (raw, json)
Hash identifier:          zUB4j3BrxxrkVu4sifS2yXCJ25RBqZLiOZRcz6gEMis=
Subject key identifier:   E8:85:60:18:9F:90:92:28:95:56:17:E3:B8:13:55:7B:9E:C1:4E:49
Authority key identifier: 06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42
Certificate issuer:       /CN=F3660C14AR/serialNumber=0686ABAAC38BE7F1AA2D2BFC583F2D37D88BA442
Certificate serial:       0948
Authority info access:    rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
Manifest number:          0948
Signing time:             Tue 04 Nov 2025 01:39:09 +0000
Manifest this update:     Tue 04 Nov 2025 01:39:01 +0000
Manifest next update:     Thu 06 Nov 2025 01:39:01 +0000
Files and hashes:         1: BoarqsOL5_GqLSv8WD8tN9iLpEI.crl (hash: 6Qq7NBR+fL2wUHpHdF65ZvOSDWnJ/3zxLxTikqGOjsw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
                          rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2376 (0x948)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AR, serialNumber=0686ABAAC38BE7F1AA2D2BFC583F2D37D88BA442
        Validity
            Not Before: Nov  4 01:39:01 2025 GMT
            Not After : Nov  6 01:39:01 2025 GMT
        Subject: CN=6909593d-21a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:2d:39:f3:0b:ca:b3:1b:a8:2f:e5:59:ed:
                    df:0c:6a:90:b5:10:a7:cd:d6:5d:b3:3f:c6:a8:d2:
                    8d:3e:37:15:b9:8c:46:ab:ef:60:f3:ee:40:99:ac:
                    db:92:e4:c4:12:fd:21:19:7a:c7:ee:25:9b:4f:24:
                    ab:0b:d2:2d:ec:69:1b:1e:b6:bf:35:1d:84:cf:e9:
                    08:c2:60:19:1b:1c:bb:a7:a9:6c:ee:92:d9:1d:e4:
                    9d:22:55:26:93:a8:ca:e2:84:d4:9a:db:b0:ac:44:
                    a5:45:48:3e:1f:30:50:92:bb:5d:7c:98:75:3b:1e:
                    06:20:b8:4c:5c:83:b8:aa:39:1b:55:7d:d0:f6:4b:
                    ca:09:ff:50:2e:98:8d:bf:8c:6b:8a:2f:bc:ed:61:
                    27:f3:38:2d:aa:05:76:a9:68:f2:57:07:58:be:76:
                    95:5f:a9:88:23:3b:5a:7b:ae:19:67:53:1d:be:d3:
                    5b:28:26:4f:bf:6a:8b:ea:40:73:26:94:80:41:02:
                    f4:fc:11:53:35:47:16:a4:67:5d:61:7b:30:02:b7:
                    d5:af:9e:41:dc:00:d5:72:74:d6:87:47:c2:33:02:
                    8a:57:16:ea:c1:08:8b:59:67:35:ed:98:b0:81:f8:
                    72:33:af:eb:0b:7b:31:c6:bb:82:d2:f7:74:1a:58:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:85:60:18:9F:90:92:28:95:56:17:E3:B8:13:55:7B:9E:C1:4E:49
            X509v3 Authority Key Identifier:
                keyid:06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c0:2c:37:cb:38:5b:e3:aa:ee:47:f4:73:5e:57:40:9b:38:
         19:93:bf:ba:37:f8:d9:b3:1f:14:d0:7c:1a:cd:82:74:c2:d4:
         08:eb:0a:85:5f:5c:cd:05:96:f6:ef:bc:ca:97:e7:35:91:c1:
         6d:21:53:e4:a7:7c:a3:a4:10:b7:61:d8:35:7d:38:7d:35:6e:
         32:9f:6a:7f:2b:31:21:13:35:84:33:36:32:72:6f:f6:a1:d3:
         4a:8a:1d:84:77:50:94:3b:e7:58:8d:9f:98:69:48:d4:25:3e:
         55:59:f8:90:03:6d:5c:c5:25:48:13:f8:8e:34:37:d1:ac:2c:
         4a:21:c5:d9:66:92:0e:50:f6:7e:4b:b4:0c:d0:e8:96:43:26:
         a5:6a:fe:60:9b:9e:24:48:a7:65:4e:6a:6a:f1:29:bb:e4:35:
         d6:53:79:65:52:37:c8:6f:c7:4a:6d:a2:93:1d:8b:c5:46:a5:
         f4:d2:57:f0:33:5a:36:f3:58:8e:0c:0f:e5:cc:d7:63:a7:48:
         b1:85:08:ae:fd:2f:17:99:0f:65:ec:4d:a6:5c:12:78:9b:22:
         66:77:68:11:24:cc:da:9a:c0:64:51:28:b5:44:48:9a:f2:8e:
         11:97:28:8e:c5:d5:dc:92:f7:29:3c:be:6d:4d:c7:ff:bf:51:
         d1:06:ff:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:59:09 2025 by rpki-client