Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
File:                     gw8nolWHc_MWi4g8BLAjjqV1I7U.mft (raw, json)
Hash identifier:          maMfVs5eKa/la4bqumrugb69IcSBMRhQlxIs31o31O4=
Subject key identifier:   57:DF:5D:89:D5:3F:AB:59:1E:55:D0:EF:DA:45:E9:02:91:06:2A:31
Authority key identifier: 83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5
Certificate issuer:       /CN=F36D9B5BAR/serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
Certificate serial:       0CF3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
Manifest number:          0CF8
Signing time:             Wed 05 Nov 2025 01:07:38 +0000
Manifest this update:     Wed 05 Nov 2025 01:07:37 +0000
Manifest next update:     Fri 07 Nov 2025 01:07:37 +0000
Files and hashes:         1: gw8nolWHc_MWi4g8BLAjjqV1I7U.crl (hash: uTOaI/zgePAyq8h/EUciXFzGiPuW9LmWzjmVBtTwJAc=)
                          2: D24E31E2DE7C11EBB05A5E63F8AEA228.roa (hash: M2UxYeTNruKkNVITsjU6u+dRgieWPfDpSGMbsu/uKcE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
                          rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3315 (0xcf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D9B5BAR, serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
        Validity
            Not Before: Nov  5 01:07:37 2025 GMT
            Not After : Nov  7 01:07:37 2025 GMT
        Subject: CN=690aa35a-1e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:12:4a:00:19:27:02:2e:86:f5:15:2e:b6:
                    52:d9:2b:43:94:9f:b3:6f:5a:34:90:60:60:75:a9:
                    7f:6d:9c:c8:47:66:da:c8:54:77:d0:e5:75:cd:f5:
                    96:dc:d3:b1:21:0e:8b:15:dc:b0:46:03:a5:91:fe:
                    3c:a1:27:eb:44:fb:e9:36:c7:28:e8:61:9d:2a:f2:
                    f6:51:ce:56:15:db:c4:fe:df:84:37:92:7d:84:89:
                    33:cc:4b:86:d2:c8:c1:80:d1:a5:48:6e:df:31:41:
                    4f:68:12:1d:e6:e1:53:a4:ab:b4:79:62:de:b2:4a:
                    fd:47:3a:88:70:6d:b5:45:33:f0:01:16:4e:57:cf:
                    a3:95:f2:3e:d3:a6:cc:e3:20:b7:ee:25:67:c0:40:
                    35:da:ea:71:8c:ba:4b:b4:06:e5:cd:0e:bc:6b:bd:
                    c1:cc:5c:e9:0f:20:72:8b:f9:5c:b5:e8:be:b2:4e:
                    c4:e1:e6:14:c8:b8:12:6c:0b:3e:7c:fc:04:5f:8e:
                    42:1c:80:ce:df:36:fb:06:7b:7e:f8:0f:c8:09:d0:
                    1b:7a:ec:02:a7:e1:22:26:5d:1e:65:84:13:6a:4f:
                    5f:db:72:f2:c5:37:d8:95:db:a6:dd:94:67:c3:bd:
                    99:56:e3:2f:36:86:72:69:d1:51:77:92:0f:da:cd:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DF:5D:89:D5:3F:AB:59:1E:55:D0:EF:DA:45:E9:02:91:06:2A:31
            X509v3 Authority Key Identifier:
                keyid:83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f2:f7:4e:3e:c2:59:8f:5b:79:0e:40:1b:68:c2:6c:af:64:
         53:df:5a:4a:b3:49:2d:88:11:2d:60:9f:ea:4c:cd:dc:81:80:
         d1:90:7d:3a:6a:76:a9:f7:6f:dc:11:f5:ac:cd:02:7d:f7:b6:
         81:e6:3f:f1:07:bb:96:20:ee:a0:fa:8d:84:88:52:cb:a5:f9:
         ee:6d:97:cb:96:de:b1:48:40:30:8d:45:94:2f:0d:cd:d6:d4:
         c4:5d:a1:66:ab:af:4a:87:89:75:bb:3d:d0:72:66:32:3c:10:
         26:8b:7f:31:f3:5d:e0:62:7c:83:af:19:a9:c7:7d:7f:d5:98:
         a7:cb:0f:45:78:3f:34:9f:8f:f2:4b:15:b0:60:f3:34:44:00:
         1e:03:05:fe:b6:39:9b:cc:8d:47:7e:94:a1:2f:2b:f2:5f:77:
         83:ea:da:e7:c4:72:94:a8:09:b6:ee:d3:31:79:5c:63:2a:c6:
         21:6d:63:0e:10:2b:04:8f:20:47:03:ba:ea:90:32:7e:c9:a0:
         3b:5a:c4:57:56:71:0c:ed:18:b9:74:1f:20:9b:72:82:b5:83:
         69:52:f0:55:f4:09:84:f8:1a:9a:6a:6c:d1:82:1f:23:23:a2:
         83:02:4b:ab:4b:90:ea:b7:50:0e:87:e8:5e:4e:3b:a3:68:70:
         55:92:78:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:24:36 2025 by rpki-client