Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          8Zuby7j809fuHS1km6sXks3qLQN4V7HbY//nm1baEPo=
Subject key identifier:   92:22:00:28:87:71:02:EE:41:BB:F5:C1:D1:94:5A:5F:91:3C:47:6E
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       0593
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          058E
Signing time:             Tue 04 Nov 2025 03:54:25 +0000
Manifest this update:     Tue 04 Nov 2025 03:54:25 +0000
Manifest next update:     Thu 06 Nov 2025 03:54:25 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: e4SWJfrQNqCUuscQG7Hr1I/JPMKMWF2+G+QISaGfjLA=)
                          2: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          3: 01CC6C947E8D11EC89A79C885A40D577.roa (hash: qd/8XDFff1CiSxAQk1vmUsyny6ywpT4UycAJmKGe26U=)
                          4: D88002927E8C11EC95A915885A40D577.roa (hash: zp+bksguNWi/6Gwbfy/elTDlK43kW6UD+PYcX23ze0Y=)
                          5: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
                          6: 675DA8B27E8211ECAB19A1E75A40D577.roa (hash: TlKHAqm5F0asDSkR7ApdBCSJn77368RAQ3PQ3KzHit4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1427 (0x593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Nov  4 03:54:25 2025 GMT
            Not After : Nov  6 03:54:25 2025 GMT
        Subject: CN=690978f1-39c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:d6:a3:f3:0b:2a:5a:2c:7c:8d:7f:63:b2:
                    4c:60:ff:04:38:c4:00:16:a9:2e:70:2a:20:d0:a1:
                    ff:37:c2:c2:df:00:0c:fd:5c:f7:78:92:ba:e9:bf:
                    8f:c4:61:d2:f2:d9:bb:3a:c9:d6:d3:08:7e:4d:ac:
                    c8:b3:9e:59:5b:4a:fa:9a:14:52:f3:24:48:1d:5f:
                    da:f6:6a:9d:12:59:76:4f:37:80:0c:b6:51:9e:84:
                    e1:ef:61:48:98:43:c1:e7:4c:bd:8e:da:d4:fc:7a:
                    7a:63:3d:9f:d2:7e:c3:22:cb:b4:3e:92:4c:ee:b3:
                    06:a3:b7:27:a7:75:43:bd:1c:2d:09:c2:13:fb:2f:
                    9d:33:ca:11:5e:6b:14:03:7c:b9:5c:4c:19:79:23:
                    f5:09:53:d9:63:75:77:e3:b2:fd:20:98:6a:ea:21:
                    66:4f:d9:f0:4a:2e:3c:3a:d8:cf:86:4c:5d:4a:09:
                    74:9b:98:a7:bd:0d:4b:1a:70:e0:dd:ff:02:98:b1:
                    15:4e:33:21:87:af:79:bc:68:99:f6:44:6e:47:f1:
                    a8:54:1a:b7:3d:bf:46:4f:13:e4:69:31:73:ac:99:
                    da:02:80:9f:1b:c1:54:41:5e:2a:c3:1c:37:64:28:
                    92:07:93:dc:f7:2c:a2:5e:29:89:3d:42:14:c1:7a:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:22:00:28:87:71:02:EE:41:BB:F5:C1:D1:94:5A:5F:91:3C:47:6E
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ca:bc:d5:4f:fa:c8:51:7d:bf:54:ed:a0:85:6e:93:84:1d:
         f8:ac:c7:59:5b:c3:be:be:5b:a6:01:4e:45:df:ea:de:3e:21:
         a9:0a:06:c3:6d:f3:81:4a:8d:b8:61:15:a1:a3:1f:06:01:1a:
         63:3f:a9:67:c4:63:13:3f:18:35:58:7b:0b:9e:73:de:e1:74:
         a4:42:22:54:5e:4f:76:cf:5b:4f:70:af:96:fd:af:0e:c3:83:
         3e:2e:e1:38:75:92:91:4a:c1:fa:c0:99:0e:41:f0:02:7e:57:
         e6:a1:43:05:f6:ae:da:e2:26:1e:e6:c3:5b:36:2b:2a:e8:da:
         e1:f7:ae:c7:d7:fa:c6:a9:93:bb:84:cf:80:09:85:02:bf:49:
         e9:ff:2c:f0:6a:7e:68:5b:4e:e1:ec:eb:d7:c1:40:6e:13:54:
         f2:be:12:d0:b6:02:5b:0c:2e:1a:0f:bb:17:91:6b:b7:38:00:
         36:b8:22:e0:c0:ce:73:9b:ec:6b:04:ea:47:49:72:e3:56:7e:
         41:a5:97:2d:c0:c5:fa:d9:97:e3:a6:38:60:d4:67:c0:8c:e1:
         af:59:f4:fd:e3:49:da:90:7d:73:31:4d:9f:67:35:74:4e:56:
         50:07:74:74:9a:69:bf:a3:fa:c0:7e:22:2b:d3:8b:45:ff:e8:
         43:fd:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:58:41 2025 by rpki-client