Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
File:                     xPPi6r3p45Aa27wxyfJTXN47HG8.mft (raw, json)
Hash identifier:          NuCfUTgPoV+7vS8/C0kLyKCAcNPLHKd/cUqs5mPko1E=
Subject key identifier:   F7:FB:16:B9:C3:76:A2:51:36:3D:FD:78:65:4B:E3:93:EA:4E:FB:2B
Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Certificate issuer:       /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Certificate serial:       0DC6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
Manifest number:          0DC6
Signing time:             Tue 04 Nov 2025 01:08:03 +0000
Manifest this update:     Tue 04 Nov 2025 01:08:03 +0000
Manifest next update:     Thu 06 Nov 2025 01:08:03 +0000
Files and hashes:         1: xPPi6r3p45Aa27wxyfJTXN47HG8.crl (hash: e0+GzDdr6s5mgdXYvSlc5B8h+Xg3L8/PNNTMujYUB8g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                          rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3526 (0xdc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAR, serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
        Validity
            Not Before: Nov  4 01:08:03 2025 GMT
            Not After : Nov  6 01:08:03 2025 GMT
        Subject: CN=690951f3-39c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:09:6c:55:6b:ee:16:ff:05:78:42:da:44:
                    93:89:3e:ca:1a:d7:b8:70:d1:ad:e6:dc:99:73:60:
                    bc:ad:3f:0a:f6:72:16:1f:2f:2c:d5:7e:98:39:83:
                    b6:e2:df:4a:ed:93:a6:5a:e4:49:e3:19:a3:ff:00:
                    a4:ff:32:e2:fe:1c:4d:bc:a8:83:73:9e:30:76:b2:
                    86:61:f9:40:42:00:67:7f:ae:36:db:eb:86:12:c0:
                    55:54:ac:3f:1e:86:4a:d8:83:30:70:42:fb:c8:ac:
                    e4:58:be:2f:25:24:3d:72:55:cc:ed:40:03:8e:46:
                    a7:48:36:cf:dd:d2:68:5c:bc:12:3b:e1:55:2d:5d:
                    0e:6e:80:76:60:a4:09:68:98:d2:91:99:e1:17:2f:
                    69:33:36:0f:7e:65:62:38:18:9f:59:de:dd:56:d6:
                    0e:5b:99:a6:cf:27:b7:5e:ee:86:c5:38:1d:17:25:
                    38:cb:77:ce:81:ef:85:ec:1b:92:33:35:43:68:63:
                    e7:82:09:a5:38:88:31:38:a1:6f:b4:93:64:3d:a1:
                    8f:b4:6c:0b:c9:22:e7:88:c7:cd:6c:de:92:e4:c9:
                    36:78:c5:39:01:67:5f:91:5a:49:9a:f9:aa:aa:8c:
                    c2:dd:cd:dc:d6:31:f3:79:cc:ec:08:00:62:26:e5:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FB:16:B9:C3:76:A2:51:36:3D:FD:78:65:4B:E3:93:EA:4E:FB:2B
            X509v3 Authority Key Identifier:
                keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7e:21:61:e6:e9:bd:52:ff:65:79:0d:20:a3:58:e8:e0:67:
         1d:a1:1a:7c:97:e1:4c:a9:68:fa:57:8e:df:bc:c0:66:bc:74:
         00:86:ac:6f:b2:7f:61:dd:de:15:46:8b:61:76:ed:b0:b2:c1:
         1d:51:09:de:83:e4:eb:62:f7:2e:98:d1:f6:ef:57:67:03:29:
         3e:a7:7f:4c:e5:bf:68:42:43:c2:cd:e1:1d:41:85:9a:42:07:
         d7:0c:95:e1:f3:33:1a:c3:73:0c:ac:4f:c1:cf:ac:6a:66:9b:
         8e:c7:b5:20:50:c1:9f:2b:8f:56:8a:d3:45:46:d5:88:86:ce:
         59:65:a9:a9:77:d5:21:e8:25:43:32:bd:43:07:cb:03:bb:d8:
         7c:6d:ac:c1:e2:91:61:11:6e:f0:6c:8d:3e:98:db:a1:47:49:
         ba:3b:a1:1b:2f:21:fe:1c:7c:1d:20:59:8c:76:d5:cc:c3:c1:
         1e:ec:64:7a:46:46:48:32:2d:33:d3:3c:3f:e2:58:eb:be:b4:
         75:85:d2:4a:50:0e:df:93:35:cb:56:71:5e:4b:c0:8b:07:06:
         c2:b3:b9:cf:b8:e9:9b:32:5a:51:40:34:24:22:bb:16:29:12:
         39:ce:a7:e9:db:38:44:0f:b0:cc:c6:a6:0d:98:98:e5:bc:4d:
         2d:b4:f2:da
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDcYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ5RkFBUjExMC8GA1UEBRMoQzRGM0UyRUFCREU5RTM5MDFBREJCQzMxQzlGMjUz
NUNERTNCMUM2RjAeFw0yNTExMDQwMTA4MDNaFw0yNTExMDYwMTA4MDNaMBgxFjAU
BgNVBAMTDTY5MDk1MWYzLTM5YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpsglsVWvuFv8FeELaRJOJPsoa17hw0a3m3JlzYLytPwr2chYfLyzVfpg5
g7bi30rtk6Za5EnjGaP/AKT/MuL+HE28qINznjB2soZh+UBCAGd/rjbb64YSwFVU
rD8ehkrYgzBwQvvIrORYvi8lJD1yVcztQAOORqdINs/d0mhcvBI74VUtXQ5ugHZg
pAlomNKRmeEXL2kzNg9+ZWI4GJ9Z3t1W1g5bmabPJ7de7obFOB0XJTjLd86B74Xs
G5IzNUNoY+eCCaU4iDE4oW+0k2Q9oY+0bAvJIueIx81s3pLkyTZ4xTkBZ1+RWkma
+aqqjMLdzdzWMfN5zOwIAGIm5RYZAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU9/sW
ucN2olE2Pf14ZUvjk+pO+yswHwYDVR0jBBgwFoAUxPPi6r3p45Aa27wxyfJTXN47
HG8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0OUZBL0I1NDQ4NDUyMUMxQzExRTY5RjdDNzUwQ0Y4QUVBMjI4L3hQUGk2
cjNwNDVBYTI3d3h5ZkpUWE40N0hHOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hQUGk2cjNwNDVBYTI3d3h5ZkpUWE40N0hHOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QjQ5RkEvQjU0NDg0NTIxQzFDMTFFNjlGN0M3NTBDRjhBRUEy
MjgveFBQaTZyM3A0NUFhMjd3eHlmSlRYTjQ3SEc4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHfiFh5um9Uv9leQ0go1jo4GcdoRp8l+FM
qWj6V47fvMBmvHQAhqxvsn9h3d4VRothdu2wssEdUQneg+TrYvcumNH271dnAyk+
p39M5b9oQkPCzeEdQYWaQgfXDJXh8zMaw3MMrE/Bz6xqZpuOx7UgUMGfK49WitNF
RtWIhs5ZZampd9Uh6CVDMr1DB8sDu9h8bazB4pFhEW7wbI0+mNuhR0m6O6EbLyH+
HHwdIFmMdtXMw8Ee7GR6RkZIMi0z0zw/4ljrvrR1hdJKUA7fkzXLVnFeS8CLBwbC
s7nPuOmbMlpRQDQkIrsWKRI5zqfp2zhED7DMxqYNmJjlvE0ttPLa
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:48 2025 by rpki-client