Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
File:                     xSvyehTUxJuqAvCZWQ287LDgS5c.mft (raw, json)
Hash identifier:          J5uCS1aONpGlwOb2WeoszWZ57sOuqd1uC+C13OasbLk=
Subject key identifier:   49:10:B3:D5:B8:1D:18:55:E4:0A:52:57:AB:5A:1A:2D:E3:3D:47:5D
Authority key identifier: C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
Certificate issuer:       /CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Certificate serial:       042A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
Manifest number:          0429
Signing time:             Wed 05 Nov 2025 03:22:46 +0000
Manifest this update:     Wed 05 Nov 2025 03:22:46 +0000
Manifest next update:     Fri 07 Nov 2025 03:22:46 +0000
Files and hashes:         1: xSvyehTUxJuqAvCZWQ287LDgS5c.crl (hash: +77Pa7QbhnAm6O1E/0CG0fUWcVXLJgqRYcfDOvvfcpY=)
                          2: DC60099290ED11EDA023F07CF1222468.roa (hash: 9KneDc8AxCXKlLKwihUlSkgU/m9aNJKS4oxTHOBZ0ns=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                          rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1066 (0x42a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8936AR, serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
        Validity
            Not Before: Nov  5 03:22:46 2025 GMT
            Not After : Nov  7 03:22:46 2025 GMT
        Subject: CN=690ac306-85d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:7d:23:10:9d:1e:4b:4f:d9:6a:23:2e:d3:
                    d6:14:44:e6:71:59:9a:b1:b0:3e:bf:94:30:92:c7:
                    6f:e5:2b:ea:c4:8d:b4:d1:50:48:19:b0:5a:8c:95:
                    06:5f:a1:06:be:d5:88:c5:8d:94:b6:83:fe:00:d8:
                    0e:de:5f:1f:d3:7d:4a:0d:d1:cb:b1:8b:13:5e:57:
                    10:16:0a:ee:36:ab:0c:43:2c:68:5b:38:fb:c1:43:
                    79:09:8a:9c:b1:a6:b0:79:45:07:f0:d3:9f:72:15:
                    f5:1f:fb:72:d3:69:8a:5f:7c:b4:93:8f:93:bf:d1:
                    07:57:f8:3f:9d:77:c4:66:0e:cb:a1:62:20:34:eb:
                    b4:0a:58:23:8f:53:1f:66:48:7a:9e:e1:a0:0c:0c:
                    d9:0b:dc:b9:e5:54:bc:21:a7:17:0f:56:b6:0b:9a:
                    25:0e:7c:67:3d:d9:55:3b:1a:dd:4a:17:77:6e:8c:
                    9f:4d:a5:ae:77:f7:de:13:c6:c0:1f:4c:bd:01:c1:
                    1d:09:3e:4f:42:26:cd:e8:18:12:84:b6:8a:89:03:
                    73:89:5b:17:7d:3e:2b:38:86:db:c1:81:61:b1:23:
                    4b:0e:93:a9:92:ba:a6:3e:2e:af:50:71:6a:6e:50:
                    cf:dd:da:86:81:f9:ac:ae:d5:e2:48:ab:04:1c:78:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:10:B3:D5:B8:1D:18:55:E4:0A:52:57:AB:5A:1A:2D:E3:3D:47:5D
            X509v3 Authority Key Identifier:
                keyid:C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:12:b0:1d:01:9e:04:fe:ed:dc:3e:ca:3c:f4:24:ef:cf:16:
         c3:ed:8c:19:6a:f7:66:0c:ae:d2:19:3b:fe:83:5d:36:7b:13:
         e2:1c:d5:d8:32:b9:62:72:72:f3:69:15:a8:9a:ad:d6:18:45:
         11:4e:f0:3d:23:48:c4:1c:84:ab:10:55:90:8d:73:8a:e9:81:
         96:bb:bd:f2:35:5e:5a:35:d1:75:87:34:2b:a1:a8:fc:6f:3a:
         57:85:b6:c4:57:23:47:06:e1:92:c7:8b:f8:1d:67:c7:e6:92:
         84:59:91:9a:d4:53:df:74:d0:33:07:70:7c:0b:97:2f:5f:85:
         f4:39:90:31:a0:c8:3d:cd:24:f2:5c:61:c7:b6:a6:69:b0:94:
         97:79:31:90:54:c0:ff:de:79:8c:84:86:f9:36:9a:2c:89:6e:
         f3:f6:87:99:3d:c6:17:21:06:93:d0:5e:2c:36:c5:ce:90:79:
         1c:64:c0:af:2d:79:68:4d:39:f1:20:14:3a:2a:93:a3:ec:de:
         a3:a6:7e:18:62:56:3b:d7:76:30:41:d1:6c:b2:1e:62:a8:76:
         26:78:1c:c4:43:40:8a:94:74:ec:d1:3a:60:35:1e:23:1d:5f:
         b2:5d:20:99:07:d7:fb:f8:aa:7d:a9:f9:34:b8:4a:7e:74:94:
         bf:a2:e5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:29:11 2025 by rpki-client