Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          m6BtWTPaycHfsakFP7Vpg7CLC9AvIoOVgIwDPFuT1GU=
Subject key identifier:   24:54:98:E2:00:5D:85:3A:EF:17:AE:24:EA:97:76:4F:0B:7C:3B:1E
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0D83
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0D7F
Signing time:             Wed 05 Nov 2025 01:02:54 +0000
Manifest this update:     Wed 05 Nov 2025 01:02:53 +0000
Manifest next update:     Fri 07 Nov 2025 01:02:53 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: B+xMx9hg8+uu56xm3PnFDII7Xt+vo3ULxDpgwRrazYE=)
                          2: 4AC87CE0B11911F0830CDBDFDAE4EC9C.roa (hash: BbmEW7gIRevtuQq0qmlAx+V5iEy5gjhSfXPW6vQnAiw=)
                          3: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3459 (0xd83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Nov  5 01:02:53 2025 GMT
            Not After : Nov  7 01:02:53 2025 GMT
        Subject: CN=690aa23e-7334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:a3:ef:b8:16:94:7c:60:f2:73:95:74:37:
                    51:e8:06:90:01:e4:70:67:d9:78:5d:6c:32:2e:ec:
                    ab:35:26:28:56:da:a2:54:a8:fc:f7:25:8a:3d:4d:
                    14:c9:21:16:2f:80:14:06:43:37:96:29:cb:6e:82:
                    8c:3f:d1:6f:c6:49:2d:8a:25:9b:5a:49:e5:0a:00:
                    e8:06:9f:c6:bc:55:c8:2f:9c:aa:c7:32:47:25:cf:
                    81:1b:ab:6b:13:77:d3:08:c0:91:37:15:5b:d4:be:
                    6e:52:46:50:48:0c:97:94:53:8b:33:df:26:4f:6a:
                    87:25:b4:b5:ab:94:a5:33:a4:e3:eb:a8:a9:54:a0:
                    ce:42:c7:27:b4:92:ab:d5:b7:e3:13:d6:9c:4a:21:
                    db:de:7a:4d:aa:e4:cd:ab:96:b3:44:52:27:58:62:
                    a9:52:01:42:d8:eb:a3:2d:8c:1b:97:6e:e0:e2:1a:
                    d9:6d:75:b3:f6:27:d6:30:81:b4:d3:e2:2d:f6:b5:
                    b8:5b:a0:0e:5d:9b:60:28:32:94:bb:79:28:8e:85:
                    27:ee:a7:eb:2a:e8:8d:03:18:96:26:de:4d:57:44:
                    36:5c:32:cc:56:1d:64:6c:b7:fc:6d:36:b4:44:6e:
                    64:30:15:d2:2c:f6:93:13:0c:f4:bc:e3:ae:80:a6:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:54:98:E2:00:5D:85:3A:EF:17:AE:24:EA:97:76:4F:0B:7C:3B:1E
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:62:a7:b1:7a:01:33:17:56:90:63:1e:d5:f7:3b:8d:9d:07:
         0e:be:7b:22:33:d6:41:26:ee:c0:cd:b4:77:ec:87:f6:53:48:
         35:16:97:20:dc:26:6b:97:a4:86:7a:d6:04:33:c0:ec:41:3d:
         f6:55:c2:d3:c8:3a:f6:89:8c:a9:d1:c9:86:3c:4a:63:da:21:
         b5:57:b8:e9:eb:fb:8d:18:13:49:35:d8:0a:73:ee:df:9c:3b:
         97:23:c2:e6:8d:c7:82:6f:b5:e7:af:58:d8:6d:6e:d2:6d:de:
         4e:30:b8:bf:ca:50:0e:60:42:a9:11:5d:01:bd:51:70:fa:c4:
         e8:87:3e:43:0e:c7:ae:1f:c5:99:f0:8f:69:21:a7:03:47:18:
         b7:63:7b:53:e2:69:fb:67:11:13:f9:d7:7e:2c:c3:88:08:32:
         0d:1b:56:c6:35:4f:ce:0d:c3:fd:89:6a:39:23:f3:a3:a4:6b:
         ce:21:ef:a6:7c:c9:5d:a5:95:18:62:bb:32:da:fd:84:32:23:
         03:f5:94:1a:85:ba:46:88:65:da:d1:ac:bd:3d:8a:9a:a4:f6:
         45:e0:3f:a2:b1:85:bc:d8:fb:18:f9:c7:f3:30:a3:88:d6:d2:
         d9:65:dc:45:47:1d:24:22:94:09:6f:b9:9a:50:5b:1d:2e:b4:
         7b:c4:11:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:23:15 2025 by rpki-client