Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
File:                     mpAdFskLYBlnVD3tV83q800LJz4.mft (raw, json)
Hash identifier:          /Mt08gq+kL94Ea0Qts7PvS8wDuWmd5QzNAZPtekx3Eo=
Subject key identifier:   AD:96:5D:AD:0C:F6:AE:8A:83:95:ED:91:E5:A3:33:83:06:8B:84:F4
Authority key identifier: 9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
Certificate issuer:       /CN=F36ED442AR/serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
Certificate serial:       0EC4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
Manifest number:          0EC4
Signing time:             Tue 04 Nov 2025 01:03:26 +0000
Manifest this update:     Tue 04 Nov 2025 01:03:25 +0000
Manifest next update:     Thu 06 Nov 2025 01:03:25 +0000
Files and hashes:         1: mpAdFskLYBlnVD3tV83q800LJz4.crl (hash: XD4oKkR1Tmxh26rezax9ijVTt1Y8cMY1mMhT3IWFQtI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                          rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 01:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3780 (0xec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AR, serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
        Validity
            Not Before: Nov  4 01:03:25 2025 GMT
            Not After : Nov  6 01:03:25 2025 GMT
        Subject: CN=690950de-3dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:0a:d1:fb:40:2d:fd:d6:0a:fd:3c:3c:5f:
                    b2:94:57:c0:93:ab:f4:6a:e0:ca:34:d7:fb:7d:60:
                    e5:1f:12:cf:f6:41:87:58:50:e8:cb:47:51:90:3d:
                    9c:9b:39:56:e1:0e:fd:1b:9c:07:d9:27:7c:80:4c:
                    48:2a:05:7c:70:75:bc:30:5c:70:26:6a:c8:6e:f7:
                    fa:5f:ea:d8:24:56:b4:90:5e:1a:1c:37:94:ec:33:
                    ff:04:4b:50:f3:6e:f6:fa:65:5e:66:c3:63:7d:81:
                    c3:3d:c0:c9:85:27:61:16:48:34:3f:ce:74:7c:42:
                    0f:4b:d4:c3:22:4b:f7:7a:be:82:1c:68:89:6c:1e:
                    a9:a2:5d:be:7f:03:e2:58:71:7c:01:df:e9:b6:43:
                    86:af:84:6c:4c:14:94:66:3d:e0:dd:96:d0:f5:42:
                    c0:f4:ea:b6:fb:17:ab:08:01:ce:35:e1:37:da:f2:
                    8a:85:b4:d7:5c:d9:1c:c7:a4:d3:92:9a:98:a7:8e:
                    2a:74:91:87:27:e1:a2:7f:1d:c3:ce:3a:51:9d:93:
                    94:e9:55:e5:22:49:89:7d:e2:3b:74:8e:1e:4f:3e:
                    82:74:93:16:1c:82:91:12:0d:e0:bf:37:c9:f2:a7:
                    44:e1:28:c4:2c:b6:50:b7:3f:77:be:a8:6e:a8:ab:
                    74:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:96:5D:AD:0C:F6:AE:8A:83:95:ED:91:E5:A3:33:83:06:8B:84:F4
            X509v3 Authority Key Identifier:
                keyid:9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d2:0b:3e:90:19:0e:7b:c5:7a:d0:55:6e:74:12:a1:f4:82:
         27:fa:60:dc:aa:c2:87:15:6a:9b:af:72:2f:d0:d7:8f:7d:21:
         96:9b:9e:ae:e5:b3:96:3a:2a:1a:86:46:17:c0:26:ce:cc:0c:
         cd:c6:fd:30:2e:c7:06:75:89:09:38:e2:cd:c4:98:c7:74:1f:
         f6:3e:39:f0:44:16:63:53:fc:90:3c:e6:36:1f:7a:ad:68:bb:
         6f:46:e5:fd:54:9c:1e:c8:f6:d7:00:2d:e9:7f:7e:a5:c6:f2:
         38:be:61:2d:02:b0:c9:d8:2f:57:ef:84:db:9a:b7:f4:0d:bb:
         f1:0f:e6:87:c0:6e:54:66:0e:7e:92:dd:3a:c3:e0:31:4d:e0:
         8a:82:b2:fc:39:f6:b9:bc:23:62:7f:60:16:55:23:cd:e0:e4:
         37:ff:2a:1d:6e:db:8b:eb:56:98:f2:95:76:d2:62:15:87:4a:
         4c:7f:21:29:e7:fe:86:9c:5a:5c:08:4a:03:8f:71:5e:0e:09:
         fb:86:85:47:a3:20:9c:89:24:c0:ea:89:cb:df:cc:d9:1b:b3:
         c0:6b:de:f9:e0:8b:c0:87:67:9d:b9:70:11:a8:a1:4f:a6:b1:
         cb:06:61:d5:b0:82:ba:d7:8a:1c:12:31:41:db:f5:5e:25:ef:
         e5:da:a9:3a
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDsQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUQ0NDJBUjExMC8GA1UEBRMoOUE5MDFEMTZDOTBCNjAxOTY3NTQzREVENTdDREVB
RjM0RDBCMjczRTAeFw0yNTExMDQwMTAzMjVaFw0yNTExMDYwMTAzMjVaMBgxFjAU
BgNVBAMTDTY5MDk1MGRlLTNkZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkzArR+0At/dYK/Tw8X7KUV8CTq/Rq4Mo01/t9YOUfEs/2QYdYUOjLR1GQ
PZybOVbhDv0bnAfZJ3yATEgqBXxwdbwwXHAmashu9/pf6tgkVrSQXhocN5TsM/8E
S1Dzbvb6ZV5mw2N9gcM9wMmFJ2EWSDQ/znR8Qg9L1MMiS/d6voIcaIlsHqmiXb5/
A+JYcXwB3+m2Q4avhGxMFJRmPeDdltD1QsD06rb7F6sIAc414Tfa8oqFtNdc2RzH
pNOSmpinjip0kYcn4aJ/HcPOOlGdk5TpVeUiSYl94jt0jh5PPoJ0kxYcgpESDeC/
N8nyp0ThKMQstlC3P3e+qG6oq3QDAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUrZZd
rQz2roqDle2R5aMzgwaLhPQwHwYDVR0jBBgwFoAUmpAdFskLYBlnVD3tV83q800L
Jz4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVENDQyL0QzMkMxQjU2NTdDODExRTVCREIxREEzRUY4QUVBMjI4L21wQWRG
c2tMWUJsblZEM3RWODNxODAwTEp6NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L21wQWRGc2tMWUJsblZEM3RWODNxODAwTEp6NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RUQ0NDIvRDMyQzFCNTY1N0M4MTFFNUJEQjFEQTNFRjhBRUEy
MjgvbXBBZEZza0xZQmxuVkQzdFY4M3E4MDBMSno0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCX0gs+kBkOe8V60FVudBKh9IIn+mDcqsKH
FWqbr3Iv0NePfSGWm56u5bOWOioahkYXwCbOzAzNxv0wLscGdYkJOOLNxJjHdB/2
PjnwRBZjU/yQPOY2H3qtaLtvRuX9VJweyPbXAC3pf36lxvI4vmEtArDJ2C9X74Tb
mrf0DbvxD+aHwG5UZg5+kt06w+AxTeCKgrL8Ofa5vCNif2AWVSPN4OQ3/yodbtuL
61aY8pV20mIVh0pMfyEp5/6GnFpcCEoDj3FeDgn7hoVHoyCciSTA6onL38zZG7PA
a9754IvAh2eduXARqKFPprHLBmHVsIK614ocEjFB2/VeJe/l2qk6
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:58:22 2025 by rpki-client