Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
File:                     TFQzRWcaPQxAiChKkfx3-2zGsGg.mft (raw, json)
Hash identifier:          +yOZmbUVdSAWk553usHGPDF+eGDZlOJBMUcmOz4LM8o=
Subject key identifier:   EC:93:DD:74:D3:51:46:DC:60:6C:B2:0C:59:D4:AA:67:70:51:F3:58
Authority key identifier: 4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68
Certificate issuer:       /CN=F3668231AR/serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
Certificate serial:       0C1B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
Manifest number:          0C1A
Signing time:             Wed 05 Nov 2025 01:09:37 +0000
Manifest this update:     Wed 05 Nov 2025 01:09:37 +0000
Manifest next update:     Fri 07 Nov 2025 01:09:37 +0000
Files and hashes:         1: TFQzRWcaPQxAiChKkfx3-2zGsGg.crl (hash: Z1dQ30nuujR88nkFPh+8eb/18K5Px0mvsk9amYg2uV0=)
                          2: DA08B89A6B8E11E7952D2166F8AEA228.roa (hash: rve7QOec9FqmRJKLI6WNqhqnq4CSIGF+XgPlE64aa9A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
                          rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3099 (0xc1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AR, serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
        Validity
            Not Before: Nov  5 01:09:37 2025 GMT
            Not After : Nov  7 01:09:37 2025 GMT
        Subject: CN=690aa3d1-f6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:9d:aa:aa:37:a3:79:55:88:66:59:40:c2:
                    1c:4d:d3:e6:24:86:cd:ae:58:3c:c1:ab:40:73:16:
                    e0:21:c6:d7:48:9f:41:55:c2:a4:02:69:bd:ec:2f:
                    06:73:f2:58:f6:19:40:44:f0:4e:f2:e0:e7:e8:72:
                    c5:29:ed:c9:c7:90:94:fe:74:55:0c:2c:92:eb:3b:
                    e8:f3:ef:a2:e3:ff:04:37:82:cc:66:ea:e1:b5:00:
                    e1:1a:2f:fa:6c:35:2d:30:2c:b0:23:75:5f:28:7e:
                    24:59:2e:3a:d7:9b:8d:7d:1a:c1:7f:94:bf:f4:d9:
                    7f:a4:a4:f9:7c:41:04:c2:3a:57:85:7a:e1:f9:d7:
                    32:b9:5d:d5:f8:0a:01:d0:3f:d9:58:a4:b6:b8:e2:
                    e6:e2:92:27:69:c3:f3:64:43:49:ce:cb:e2:0d:db:
                    77:5a:bc:1f:46:6a:06:ef:53:15:a6:ef:35:e2:a6:
                    8b:cd:94:38:6e:2c:64:33:ae:6f:bb:91:92:b7:da:
                    6f:86:fb:22:54:e5:83:83:49:d5:7f:72:fa:92:3e:
                    5c:16:e2:8f:6e:15:00:8c:63:a5:34:70:69:12:f0:
                    e1:10:42:35:c2:8d:8a:4a:e6:4e:58:b4:8b:92:98:
                    23:62:2c:9a:26:09:70:5f:9a:0f:b9:48:26:a3:58:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:93:DD:74:D3:51:46:DC:60:6C:B2:0C:59:D4:AA:67:70:51:F3:58
            X509v3 Authority Key Identifier:
                keyid:4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9d:34:8a:e9:a2:45:67:66:0d:78:e8:5f:b0:b6:de:13:81:
         26:b5:42:c6:bb:91:25:93:f4:48:27:ab:17:74:ff:de:96:1c:
         2b:97:6d:1f:c7:6e:f2:80:26:ad:ce:5c:62:e2:28:1e:14:de:
         9d:18:fc:78:23:fa:85:3c:05:af:39:79:ea:d0:21:1c:6e:8e:
         f5:22:ef:17:70:d4:f7:44:72:23:a5:47:49:c5:29:52:64:67:
         33:be:84:f1:66:bd:90:6d:b8:83:29:3d:db:fa:41:02:ac:ac:
         27:f8:f4:58:8d:fe:c5:03:5c:bc:66:a8:f9:e2:0b:8f:24:b9:
         5e:c9:ef:d3:a3:25:4b:bd:5e:7e:7d:f0:32:15:ce:07:d9:ff:
         78:39:72:23:00:6a:b9:de:00:d2:b4:95:39:3f:c7:bf:b4:7f:
         f2:66:db:ee:b7:53:33:3b:96:9f:51:28:e5:87:a5:0e:80:ee:
         03:13:f6:9d:3b:04:7e:54:4e:40:90:b3:55:0f:60:4d:e0:04:
         1b:95:e7:e9:af:09:4f:a8:60:88:57:f1:63:be:8d:49:6e:85:
         2e:f1:1e:73:4d:68:f7:14:d3:74:b7:af:6d:28:76:ba:c9:ea:
         ac:fe:9b:a9:86:3b:5b:e7:2e:66:e3:b3:f6:7e:af:3f:e4:7b:
         fc:bb:2e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:21:43 2025 by rpki-client