Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
File:                     ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft (raw, json)
Hash identifier:          IiYJhwnWp7Io07CYwD65Itm5Pk/WO17RKzRn6X/R8s0=
Subject key identifier:   65:CB:67:AF:E8:F7:E0:E9:9B:B2:26:D9:D3:0E:20:59:0E:AC:45:63
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Certificate issuer:       /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial:       0E65
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
Manifest number:          0E5B
Signing time:             Wed 05 Nov 2025 01:00:18 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:18 +0000
Manifest next update:     Fri 07 Nov 2025 01:00:18 +0000
Files and hashes:         1: ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl (hash: JD/adSI6mllqVgYk0K7Hozjq8w9w5fvAIoKxUrCx4+U=)
                          2: 8378B942986E11EBA9B2860AF8AEA228.roa (hash: DCXxXlW0spouErSs20DWzGFXGGBNaPXmr93oX+0glto=)
                          3: 90FDB810980F11EBAB14840FF8AEA228.roa (hash: ds3qrAkDtscjN+f/zFO0WydLzwA1BWtOcz3cojiECQw=)
                          4: 256DF7EC042E11EB8295AC11F8AEA228.roa (hash: oTPzm4i8uNZ00YlCZDea9uUazbu6kMoUCNcJkTTMdGU=)
                          5: B13DE26C980F11EBBA26A90FF8AEA228.roa (hash: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=)
                          6: 86F1AB563B6911EEA5032D7A4AD9E6FC.roa (hash: tXTkl36K5XLn7WgTr9rni780MBAg7Xu71NqmtnAIntU=)
                          7: 3FEDB4D43B6911EEA1EC28794AD9E6FC.roa (hash: Urr1+RPeSWBQ633dZAK+HE5qMEPCK2i7hu69WdCyFmE=)
                          8: 54554C04042E11EB814EE311F8AEA228.roa (hash: onUIXvOiTLaHtKeCxm3b6uqCM95dsnBo0FQxUaZDWI4=)
                          9: 159996B2082511ED8BA38C86F1222468.roa (hash: EKcGWQb8zxFfpKmxxPcqFEC27AcHuQOygLKxgR7xr7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3685 (0xe65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAR, serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
        Validity
            Not Before: Nov  5 01:00:18 2025 GMT
            Not After : Nov  7 01:00:18 2025 GMT
        Subject: CN=690aa1a2-d85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:b1:69:13:fe:39:6f:42:d1:18:37:9b:e9:
                    69:4d:f0:07:34:75:60:d0:5f:6e:cc:8d:67:73:0c:
                    f7:43:63:7f:80:d5:36:af:3b:9f:4f:89:1b:ca:69:
                    85:24:c5:b0:7d:6f:e7:5c:b0:47:71:07:cc:e5:66:
                    2d:94:89:f5:09:d2:63:1a:1d:d0:91:5a:46:f6:52:
                    2c:79:4d:5b:35:df:5a:47:05:44:31:f4:d9:38:36:
                    d4:6a:4e:e1:09:cb:59:9b:99:b9:9c:af:bb:b6:35:
                    73:2d:20:82:f0:a8:72:9b:11:5d:0d:92:06:44:4e:
                    4c:a8:06:3c:9e:5c:81:26:0c:b7:dd:6b:43:98:15:
                    37:f3:35:38:98:05:ac:08:36:1d:3b:73:29:69:6f:
                    6f:25:7d:b6:e9:43:6b:23:16:bb:03:ce:5d:04:d4:
                    64:82:2e:1e:90:8c:d4:26:a9:77:23:fb:a8:59:88:
                    10:c0:da:8d:10:30:3e:22:a7:05:e4:0e:9e:b3:11:
                    cc:df:84:73:0a:9f:c5:30:ae:b4:42:98:66:eb:3b:
                    3e:27:f7:99:b1:79:30:db:4a:83:6c:0b:0e:f1:2d:
                    82:ef:6a:bd:21:c1:01:9b:5b:07:56:d0:9a:63:58:
                    cf:35:63:bd:93:b5:d2:25:66:c9:f2:cd:c9:5a:51:
                    e2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CB:67:AF:E8:F7:E0:E9:9B:B2:26:D9:D3:0E:20:59:0E:AC:45:63
            X509v3 Authority Key Identifier:
                keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ca:83:d1:a1:af:55:05:00:48:09:df:9a:51:33:af:f1:f4:
         62:58:24:53:2a:2a:85:1f:ea:ca:ea:d0:0c:47:aa:12:ef:ab:
         93:f3:6d:84:20:17:aa:20:27:0b:b4:15:4b:a3:bf:9e:30:61:
         66:6f:cf:9e:fa:12:0a:12:f5:c9:4f:ed:0f:cf:cb:14:3e:77:
         f4:76:5f:21:18:f8:07:24:bb:e8:5f:a0:58:a1:a3:0b:85:ab:
         e3:6e:57:19:a3:50:19:d4:5c:78:97:fb:9b:9e:49:96:20:7a:
         ed:b9:a6:90:f2:b7:39:82:82:36:b4:e9:dc:43:96:f6:1a:3f:
         14:8c:75:b9:8e:5f:77:d7:38:e7:29:b4:86:55:97:77:78:55:
         dd:63:70:2f:32:a2:f9:38:c4:1d:1c:5e:e1:16:57:cc:30:c4:
         df:97:79:68:71:0c:8e:b4:2a:6a:0c:b1:6b:21:ff:67:89:dd:
         91:4b:5a:22:56:c8:3f:ce:ed:57:5a:d5:3a:ee:04:38:68:25:
         3b:e6:d6:62:eb:d5:ae:ae:af:d1:77:1d:7e:9d:1c:a3:0d:c6:
         8d:22:ed:9e:96:71:ab:5d:2a:bb:6f:ad:0f:d7:6e:06:32:3f:
         30:31:d5:ed:04:30:74:75:58:cd:83:7e:21:e0:a0:2c:76:47:
         f3:9f:a0:e8
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDmUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTlCOEVBUjExMC8GA1UEBRMoOEE5Rjg2MDUwQjRBNEU0RTkyNURFNkZGRDkyQUMz
NDgzMzNFMDcxMjAeFw0yNTExMDUwMTAwMThaFw0yNTExMDcwMTAwMThaMBgxFjAU
BgNVBAMTDTY5MGFhMWEyLWQ4NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHvrFpE/45b0LRGDeb6WlN8Ac0dWDQX27MjWdzDPdDY3+A1TavO59PiRvK
aYUkxbB9b+dcsEdxB8zlZi2UifUJ0mMaHdCRWkb2Uix5TVs131pHBUQx9Nk4NtRq
TuEJy1mbmbmcr7u2NXMtIILwqHKbEV0NkgZETkyoBjyeXIEmDLfda0OYFTfzNTiY
BawINh07cylpb28lfbbpQ2sjFrsDzl0E1GSCLh6QjNQmqXcj+6hZiBDA2o0QMD4i
pwXkDp6zEczfhHMKn8UwrrRCmGbrOz4n95mxeTDbSoNsCw7xLYLvar0hwQGbWwdW
0JpjWM81Y72TtdIlZsnyzclaUeKDAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUZctn
r+j34OmbsibZ0w4gWQ6sRWMwHwYDVR0jBBgwFoAUip+GBQtKTk6SXeb/2SrDSDM+
BxIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5QjhFLzBFNDczODBDQjEyMzExRTU5MTQ0NjE0QUY4QUVBMjI4L2lwLUdC
UXRLVGs2U1hlYl8yU3JEU0RNLUJ4SS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2lwLUdCUXRLVGs2U1hlYl8yU3JEU0RNLUJ4SS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTlCOEUvMEU0NzM4MENCMTIzMTFFNTkxNDQ2MTRBRjhBRUEy
MjgvaXAtR0JRdEtUazZTWGViXzJTckRTRE0tQnhJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9yoPRoa9VBQBICd+aUTOv8fRiWCRTKiqF
H+rK6tAMR6oS76uT822EIBeqICcLtBVLo7+eMGFmb8+e+hIKEvXJT+0Pz8sUPnf0
dl8hGPgHJLvoX6BYoaMLhavjblcZo1AZ1Fx4l/ubnkmWIHrtuaaQ8rc5goI2tOnc
Q5b2Gj8UjHW5jl931zjnKbSGVZd3eFXdY3AvMqL5OMQdHF7hFlfMMMTfl3locQyO
tCpqDLFrIf9nid2RS1oiVsg/zu1XWtU67gQ4aCU75tZi69Wurq/Rdx1+nRyjDcaN
Iu2elnGrXSq7b60P124GMj8wMdXtBDB0dVjNg34h4KAsdkfzn6Do
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:24:51 2025 by rpki-client