Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
File:                     7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft (raw, json)
Hash identifier:          CKNyAn6+xqv1V1Ap/vQdoV5ZLtXfNOPrQVvAJzid5zQ=
Subject key identifier:   56:1B:2E:1D:1F:79:2F:3D:0E:85:6F:41:84:E2:11:40:AD:48:DD:5F
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Certificate issuer:       /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial:       0601
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
Manifest number:          05FB
Signing time:             Tue 04 Nov 2025 03:47:53 +0000
Manifest this update:     Tue 04 Nov 2025 03:47:52 +0000
Manifest next update:     Thu 06 Nov 2025 03:47:52 +0000
Files and hashes:         1: 7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl (hash: D3l4fLM+FC04df3hc3RWafmAuErMqgL1NjAcssx9r74=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                          rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 03:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAR, serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
        Validity
            Not Before: Nov  4 03:47:52 2025 GMT
            Not After : Nov  6 03:47:52 2025 GMT
        Subject: CN=69097768-c737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d2:f1:a0:3b:bb:a7:31:52:fe:fa:7c:e1:69:
                    9c:ff:b4:52:3a:ee:5c:c5:48:4f:32:2f:2b:98:a3:
                    5f:98:f8:2a:40:0b:24:4c:24:41:e1:9a:ae:42:20:
                    42:01:7e:c8:bd:e5:a5:6f:f4:ba:77:81:14:fd:cf:
                    e5:80:16:21:3b:f0:6f:2e:2f:53:6f:84:b8:98:90:
                    41:f3:f6:47:6c:8d:d7:81:af:0e:5e:e2:6c:c3:b8:
                    18:8a:b0:1b:47:94:09:c6:3d:68:d4:1d:85:e1:79:
                    13:2b:43:69:15:bf:66:96:16:af:86:1d:8b:0d:e1:
                    6d:7f:c5:a6:92:7d:89:2e:09:80:dd:18:ed:ae:d2:
                    51:17:cb:d8:22:5e:fd:44:92:0e:99:ce:93:b7:11:
                    47:04:8a:65:af:ad:14:8e:26:c3:e4:83:6e:a5:0e:
                    aa:69:32:3b:e4:85:00:1e:ef:48:ed:78:42:5f:a9:
                    c9:02:60:17:f0:4c:97:e9:7b:c7:98:06:33:82:0d:
                    bf:33:87:3a:ae:c7:85:91:b5:d4:2d:b4:03:07:0b:
                    28:b5:f3:ba:9e:6b:53:0c:1a:f4:ff:3f:b1:e6:3f:
                    13:39:12:97:2b:27:c6:df:87:37:53:dc:fe:38:ff:
                    6c:57:ed:1d:46:b3:78:02:ff:39:43:ef:7e:cd:6d:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1B:2E:1D:1F:79:2F:3D:0E:85:6F:41:84:E2:11:40:AD:48:DD:5F
            X509v3 Authority Key Identifier:
                keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:50:b4:76:1f:b5:eb:50:0f:29:8d:ba:2f:d9:be:c3:55:2b:
         28:cd:a1:af:33:d3:5d:62:6d:6c:3b:d8:14:89:39:cc:ce:07:
         76:93:62:4a:91:44:ac:79:24:68:d4:89:a6:d6:f1:aa:89:ed:
         ca:ce:7f:17:93:67:24:8d:8e:06:3f:5c:30:d2:02:39:53:16:
         2d:0f:8c:a1:6e:b6:4a:dc:b5:7d:a3:aa:f9:bc:1c:4b:16:97:
         22:40:1e:33:be:8b:33:f8:83:51:e9:5b:f9:de:a3:37:dd:96:
         7a:a4:36:6a:02:25:60:82:ba:f5:e0:4f:46:4f:d9:77:10:df:
         83:d2:46:69:f0:05:45:03:da:13:8f:2c:7f:3b:2e:96:0c:94:
         e2:b3:d1:ff:1c:94:8c:82:c3:ef:d2:e8:0c:91:fb:c1:8b:20:
         22:d7:a8:e1:0b:b0:fb:3a:21:e5:94:8a:2a:30:f8:90:cc:dd:
         ac:6d:a6:a4:14:4f:65:18:7d:f0:d9:f1:d5:a9:6d:3f:56:45:
         5a:72:c5:f4:c9:ba:73:65:c3:1f:ec:b8:b4:37:22:1c:fc:8a:
         bc:67:5b:f3:69:5e:aa:79:e3:c3:c8:a1:fe:84:4d:0a:82:0c:
         a7:a0:9e:47:c5:5f:a1:8a:6c:44:1a:c9:32:a8:e7:c5:f4:5e:
         d8:af:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:42:13 2025 by rpki-client