Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
File:                     xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft (raw, json)
Hash identifier:          biqIv4ypUpcTtByAuLmeNa687nfiOTW6f9Ee4xyfMA0=
Subject key identifier:   C9:16:A5:81:7F:AF:77:21:6D:4E:0D:ED:28:E4:7B:9B:C3:0B:89:DD
Authority key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
Certificate issuer:       /CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Certificate serial:       0986
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
Manifest number:          097B
Signing time:             Tue 04 Nov 2025 01:29:17 +0000
Manifest this update:     Tue 04 Nov 2025 01:29:16 +0000
Manifest next update:     Thu 06 Nov 2025 01:29:16 +0000
Files and hashes:         1: xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl (hash: +tBQLpcEj47cmlg+k/Rcp4AKRCit079ZlrMIL833LBA=)
                          2: D4B109C4B0AF11EF94AB2EA4762E951A.roa (hash: Dru2mYr5BfjKlr8vM+NaW5CnYd2mn2FHYHVMnOlP6ow=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                          rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2438 (0x986)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FA36AR, serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
        Validity
            Not Before: Nov  4 01:29:16 2025 GMT
            Not After : Nov  6 01:29:16 2025 GMT
        Subject: CN=690956ed-70e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:31:48:06:c2:dd:16:f9:9a:49:20:bc:8a:
                    55:0a:b2:a8:22:1c:c2:0e:4a:54:1b:33:f7:c1:74:
                    61:8c:46:6d:4d:69:a8:6e:6f:51:df:13:47:58:f7:
                    f3:a7:48:c4:67:39:62:15:98:8e:84:0f:6d:21:2b:
                    ba:19:fb:b3:fe:4b:cb:ac:89:7b:01:45:b3:69:d2:
                    45:b1:ca:02:17:67:b0:3d:a5:d6:8d:8c:61:96:3c:
                    21:65:fd:a0:64:c7:24:7d:23:dc:c0:ad:81:e3:d7:
                    12:a4:c7:7a:d7:49:ba:42:a9:7f:fc:d0:6f:07:65:
                    f9:0f:cd:73:79:45:26:a7:ed:b2:23:59:a1:d5:a2:
                    14:ca:c3:ce:b0:f3:c9:83:39:d6:d1:d6:ed:a6:a4:
                    ee:b3:7e:cf:89:b8:1a:58:98:a5:f6:0a:45:83:e7:
                    05:b7:97:08:9b:ca:db:19:0e:4a:e9:67:64:ca:7f:
                    91:b3:12:56:31:ed:e4:06:11:76:65:8b:1a:50:7a:
                    3f:67:24:94:58:f8:da:a1:8b:2b:2d:8d:03:6f:da:
                    f4:d1:4a:31:0d:07:95:bb:34:f8:d6:d8:b5:f2:54:
                    9f:dc:cd:15:e9:95:0b:c8:c0:47:7e:ab:e8:c4:66:
                    2d:d7:d6:3f:6c:20:7d:80:fd:4d:d4:c8:ba:71:db:
                    57:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:16:A5:81:7F:AF:77:21:6D:4E:0D:ED:28:E4:7B:9B:C3:0B:89:DD
            X509v3 Authority Key Identifier:
                keyid:C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:5f:d3:00:16:60:a3:3f:d6:b0:d0:c9:8a:b6:04:c9:a2:
         c4:33:8e:d3:3b:cb:26:39:93:98:ab:ec:dd:2b:d1:c1:77:d9:
         0f:8f:5c:90:5c:f0:6a:0a:5b:d0:db:8c:f1:2b:c7:cf:63:b9:
         b4:eb:94:bc:ed:c7:ef:34:88:b0:70:ed:ca:8e:c4:1a:f5:4f:
         97:00:cc:34:dd:f9:dc:c0:0b:15:e2:45:e1:0c:a6:d5:8f:07:
         47:a6:82:1c:f7:59:87:b6:29:85:1c:e8:2a:86:68:86:06:c9:
         87:82:13:b2:29:6a:8d:fa:f4:14:f4:d1:51:c1:71:ce:a4:06:
         32:21:9a:4f:68:96:20:33:fd:3d:4c:0d:6f:aa:d3:ca:e2:d4:
         7d:77:9d:68:96:a7:2b:1b:04:74:3a:71:f2:fb:a1:7f:b3:06:
         7d:ee:19:11:cf:00:c3:25:ad:82:63:81:d7:05:c0:da:b5:16:
         9d:12:c6:f6:35:1a:85:bc:d6:ce:f0:ea:49:7e:3a:82:36:c7:
         81:15:8b:82:14:6f:d6:4a:37:45:48:c9:08:58:db:dd:22:47:
         af:30:99:4a:9b:80:5e:cf:5c:ef:e7:66:02:17:db:1c:3a:65:
         a5:14:b5:d2:40:11:db:b6:8d:c8:40:82:f6:3f:de:f4:bd:1f:
         bf:78:e2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:27:09 2025 by rpki-client