Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
File:                     xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft (raw, json)
Hash identifier:          1tbXxL648vM6wIjZR5eO0kkeNtxrJ3dEm1eRtgasHmk=
Subject key identifier:   C8:F7:49:01:3B:F0:07:CF:E4:76:18:8F:3E:2F:CB:49:47:05:63:06
Authority key identifier: C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4
Certificate issuer:       /CN=F3695A2AAR/serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
Certificate serial:       0293
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
Manifest number:          0291
Signing time:             Wed 05 Nov 2025 04:21:09 +0000
Manifest this update:     Wed 05 Nov 2025 04:21:08 +0000
Manifest next update:     Fri 07 Nov 2025 04:21:08 +0000
Files and hashes:         1: xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl (hash: M7x0xdoW7lX3z/PZosFo2WGSLG8OLuP25QA/sRI+n94=)
                          2: 6FFF2C08413411EFA7FB5A60762E951A.roa (hash: iN5LnQR83/zdvQSHnZNsxLnJVE/qt/FcoEST3TDCqcY=)
                          3: A98258D0404C11EFA55BD559762E951A.roa (hash: FlBCIPwQ4YkejGviFEaWQJchhPbjvvwNsjpap4nCAeQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                          rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAR, serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
        Validity
            Not Before: Nov  5 04:21:08 2025 GMT
            Not After : Nov  7 04:21:08 2025 GMT
        Subject: CN=690ad0b5-57b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:cc:b8:76:9f:9f:36:12:7a:20:11:16:d1:
                    20:74:ba:f7:02:1f:71:47:27:ba:04:2e:f0:07:65:
                    8b:53:b0:eb:fe:62:bd:3a:17:cd:42:89:00:df:53:
                    33:72:f8:cc:37:49:fb:8a:5e:5e:37:38:da:1f:c7:
                    2f:0c:ff:87:3a:73:08:a0:bb:14:20:05:4d:c4:f1:
                    6e:0a:71:48:2f:3b:e0:35:fb:ad:4c:ef:6e:5e:41:
                    31:7e:5b:ca:a0:45:13:c2:23:4c:7f:6d:42:cc:ae:
                    27:e2:2e:cc:94:12:ca:da:e3:fc:89:b3:9f:54:f8:
                    49:c9:f1:d7:f9:2d:71:f9:90:c1:67:e5:43:53:eb:
                    2c:0d:ef:7a:65:e4:f6:d2:0a:24:1b:a8:b3:ae:36:
                    5e:65:a4:42:df:b2:89:04:04:b2:9b:ae:23:f1:1a:
                    46:b4:f2:2e:bb:3b:a1:32:b3:cb:30:3b:d8:9f:47:
                    b3:e1:18:5e:92:bb:58:41:4a:c7:35:95:c1:f3:41:
                    98:fb:2d:92:ac:07:c7:2d:88:cd:51:bb:44:59:7d:
                    b8:7a:38:9e:d7:b8:d9:c5:8e:63:40:58:02:c6:57:
                    27:29:f8:b5:b9:7a:a4:4c:56:b0:d0:0c:dc:45:78:
                    69:e6:bc:47:f9:25:78:5e:fd:03:27:08:7f:3b:47:
                    f7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F7:49:01:3B:F0:07:CF:E4:76:18:8F:3E:2F:CB:49:47:05:63:06
            X509v3 Authority Key Identifier:
                keyid:C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d6:72:6c:2a:42:b0:90:f7:15:96:1d:b3:92:53:6e:03:80:
         c2:84:41:4d:a9:d0:d1:2d:41:5b:74:5f:ea:fb:32:bb:2f:7b:
         0b:ba:be:78:2b:da:40:97:a8:c2:d1:56:f2:01:9e:ba:71:e5:
         be:d7:75:47:b3:15:fd:da:5d:9a:5e:aa:93:8e:4c:72:8a:7d:
         a2:2f:44:5f:54:79:f6:27:c4:0b:ca:18:0b:91:71:64:97:45:
         f6:f7:c5:a6:f3:a5:19:e0:57:75:34:e4:35:cf:13:02:20:9b:
         3d:de:81:8f:b0:63:48:1c:fa:2e:e1:62:f1:6d:a1:66:56:8b:
         eb:3b:42:77:c1:58:45:0b:21:ec:fa:d6:b8:f6:d8:45:d9:ea:
         38:ad:ac:c9:b6:23:9f:bb:44:db:34:bc:a2:8f:4a:a4:87:6a:
         cc:22:64:4b:e7:88:6f:b0:4e:ae:ab:95:5f:01:27:a5:b5:73:
         48:4b:6d:47:b0:4c:bd:e1:ab:9b:cc:8f:5b:2b:d7:3d:fe:eb:
         2d:66:ff:dc:31:8c:79:8e:52:77:da:0a:21:dd:7a:2d:49:ae:
         c5:2b:6a:3d:75:62:46:5d:c9:da:09:db:48:0e:54:a1:7f:d4:
         99:6b:62:91:92:f1:74:2b:57:34:62:01:a9:d8:b8:92:51:f0:
         ca:0d:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:22:00 2025 by rpki-client