Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File:                     xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier:          7Z5rke10hyiac2khx1U3XoUd/FD/udAk3K8AOf+6prU=
Subject key identifier:   1D:CC:66:BD:B8:34:FC:63:19:61:00:61:94:36:C0:09:7B:2C:0D:44
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer:       /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial:       0363
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number:          0363
Signing time:             Tue 04 Nov 2025 04:55:07 +0000
Manifest this update:     Tue 04 Nov 2025 04:55:06 +0000
Manifest next update:     Thu 06 Nov 2025 04:55:06 +0000
Files and hashes:         1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: TAphZpRBOTAqyywleBM1n6FYFSDmkkiWZG3EdkrPZcY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                          rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 04:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867 (0x363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
        Validity
            Not Before: Nov  4 04:55:06 2025 GMT
            Not After : Nov  6 04:55:06 2025 GMT
        Subject: CN=6909872b-b4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:2a:f7:7e:95:0e:02:cf:0e:d7:57:52:9d:
                    d3:e2:5e:d5:89:60:3d:79:71:57:94:10:1f:3a:9b:
                    7b:f8:11:3a:f9:4d:6d:c2:f5:8e:28:89:8e:15:b1:
                    03:18:0f:c5:ee:df:65:f0:09:b3:ca:27:a6:bc:10:
                    85:e1:83:9d:ec:27:7a:47:f5:2f:b0:76:33:1c:0f:
                    a3:6c:ba:3a:5c:a8:58:0c:4e:56:95:c0:46:b3:e4:
                    a8:5f:e5:56:d8:96:84:53:89:5f:a9:b6:a7:7a:25:
                    ad:95:a7:a1:51:eb:3f:cb:b5:63:0f:c8:a0:03:1f:
                    ee:4b:02:46:a3:f3:6d:e5:2d:e2:46:bd:ab:05:dd:
                    60:8e:5c:c7:cd:78:41:e8:fb:96:29:0d:92:c8:5c:
                    3d:4b:e5:ed:57:9d:df:3c:81:c2:9d:aa:57:71:b4:
                    f8:3a:0a:ca:8e:a9:66:c1:33:a8:1e:91:50:3f:65:
                    e1:36:79:45:64:38:a9:8a:04:95:9d:4e:c9:94:bf:
                    74:aa:13:ec:ec:5a:b3:94:78:ab:41:cf:31:ae:b0:
                    ce:6d:6f:15:d0:8e:44:53:99:02:f4:5d:24:a6:87:
                    44:5f:87:98:56:ae:5e:e3:c6:1b:ff:87:d3:44:29:
                    cc:22:d0:39:e9:ba:32:74:0e:06:fa:4d:2b:19:e5:
                    f9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CC:66:BD:B8:34:FC:63:19:61:00:61:94:36:C0:09:7B:2C:0D:44
            X509v3 Authority Key Identifier:
                keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ec:20:01:49:c2:e5:56:e3:8d:95:f0:f4:5f:e8:2d:f2:4d:
         67:7d:31:8a:6a:ed:6b:5e:a2:30:08:c7:04:82:45:0c:0c:17:
         59:ff:23:17:8c:c1:51:11:65:c7:93:0e:c4:1d:fa:07:15:1c:
         1c:5f:fd:3c:fd:ac:24:07:a7:80:9f:ae:fa:c1:1f:e1:d1:57:
         c0:01:ae:ff:56:c9:66:90:b8:1a:4e:b7:56:1d:16:02:71:73:
         c6:4d:01:3e:d1:69:79:13:64:dd:07:af:6e:bc:e4:1b:4b:ee:
         e0:a3:c8:86:0a:22:35:55:da:9d:ed:ca:14:d3:99:2f:b3:8d:
         57:fe:63:4f:e3:3d:00:70:60:4f:d7:b5:92:fd:03:fb:0e:66:
         42:3c:15:39:d1:7b:4a:93:1c:2c:81:84:ac:3f:1a:e5:62:b2:
         c5:87:04:2c:c9:fe:bf:6d:5e:36:b3:e9:fa:91:80:a1:64:07:
         74:59:ed:36:db:19:fb:e8:a0:d0:86:90:31:0d:eb:82:7d:89:
         c8:8b:e2:7c:61:e1:9d:49:0c:25:d4:78:bf:05:7b:64:db:40:
         06:5c:72:3b:53:f1:9e:b8:c1:39:6f:36:2e:35:1d:17:01:8b:
         f3:eb:20:13:b7:96:57:33:dd:0e:62:7a:0a:59:28:e6:de:ce:
         e3:3f:eb:9d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA2MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0I4RDFBUjExMC8GA1UEBRMoQzREMDE0QUQ2ODc1MEU3NUU5MTA0Q0VBNUMyOUIz
QjcxOTU4RkREQTAeFw0yNTExMDQwNDU1MDZaFw0yNTExMDYwNDU1MDZaMBgxFjAU
BgNVBAMTDTY5MDk4NzJiLWI0ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbMyr3fpUOAs8O11dSndPiXtWJYD15cVeUEB86m3v4ETr5TW3C9Y4oiY4V
sQMYD8Xu32XwCbPKJ6a8EIXhg53sJ3pH9S+wdjMcD6NsujpcqFgMTlaVwEaz5Khf
5VbYloRTiV+ptqd6Ja2Vp6FR6z/LtWMPyKADH+5LAkaj823lLeJGvasF3WCOXMfN
eEHo+5YpDZLIXD1L5e1Xnd88gcKdqldxtPg6CsqOqWbBM6gekVA/ZeE2eUVkOKmK
BJWdTsmUv3SqE+zsWrOUeKtBzzGusM5tbxXQjkRTmQL0XSSmh0Rfh5hWrl7jxhv/
h9NEKcwi0DnpujJ0Dgb6TSsZ5fnhAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUHcxm
vbg0/GMZYQBhlDbACXssDUQwHwYDVR0jBBgwFoAUxNAUrWh1DnXpEEzqXCmztxlY
/dowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCOEQxLzQyNzNFMDRFMjFGMDExRUVBM0EyQkMwRjRBRDlFNkZDL3hOQVVy
V2gxRG5YcEVFenFYQ216dHhsWV9kby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hOQVVyV2gxRG5YcEVFenFYQ216dHhsWV9kby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0I4RDEvNDI3M0UwNEUyMUYwMTFFRUEzQTJCQzBGNEFEOUU2
RkMveE5BVXJXaDFEblhwRUV6cVhDbXp0eGxZX2RvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBv7CABScLlVuONlfD0X+gt8k1nfTGKau1r
XqIwCMcEgkUMDBdZ/yMXjMFREWXHkw7EHfoHFRwcX/08/awkB6eAn676wR/h0VfA
Aa7/VslmkLgaTrdWHRYCcXPGTQE+0Wl5E2TdB69uvOQbS+7go8iGCiI1Vdqd7coU
05kvs41X/mNP4z0AcGBP17WS/QP7DmZCPBU50XtKkxwsgYSsPxrlYrLFhwQsyf6/
bV42s+n6kYChZAd0We022xn76KDQhpAxDeuCfYnIi+J8YeGdSQwl1Hi/BXtk20AG
XHI7U/GeuME5bzYuNR0XAYvz6yATt5ZXM90OYnoKWSjm3s7jP+ud
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:11 2025 by rpki-client