Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
File:                     At3Avw90-WSo2yJsvjP3007bAFM.mft (raw, json)
Hash identifier:          MfUj9LVzgImeLaLYFdsTe9nF4kfVDUevOwZUrw3l7O4=
Subject key identifier:   3C:C9:00:37:58:08:7C:B3:C2:78:85:B3:6E:5F:AA:D9:52:4B:1C:60
Authority key identifier: 02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53
Certificate issuer:       /CN=F36F51F8AR/serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
Certificate serial:       0911
Authority info access:    rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
Manifest number:          090F
Signing time:             Tue 04 Nov 2025 01:42:58 +0000
Manifest this update:     Tue 04 Nov 2025 01:42:57 +0000
Manifest next update:     Thu 06 Nov 2025 01:42:57 +0000
Files and hashes:         1: At3Avw90-WSo2yJsvjP3007bAFM.crl (hash: 36cmK5I/Y3IEIWGiuxDJiDDTrr3k3Uvoq1a53ABY+PI=)
                          2: B0D116986C8D11ECA9758ACA5A40D577.roa (hash: lTLDiHShhMe4QavSzilaN/PR1KFjgS4fLvPFpQKkp0g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                          rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2321 (0x911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F51F8AR, serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
        Validity
            Not Before: Nov  4 01:42:57 2025 GMT
            Not After : Nov  6 01:42:57 2025 GMT
        Subject: CN=69095a21-496e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:c5:ea:82:34:a9:59:f6:25:d2:ed:38:41:
                    10:d4:e5:53:93:9d:6b:bd:0c:ce:40:82:14:6b:c0:
                    c1:25:5c:ea:ab:e6:06:e0:94:a6:ad:58:7b:df:ee:
                    4c:64:00:0c:c4:08:fa:b6:9f:83:07:be:66:d3:48:
                    1f:9a:3d:04:ea:f0:e8:4b:75:60:c8:01:2c:1b:69:
                    a2:ac:14:db:36:97:27:2f:1f:05:21:f8:e2:3b:4e:
                    70:c3:1f:3b:86:c9:03:8f:f3:3e:60:2f:e1:d3:32:
                    1e:78:cd:d4:91:ee:ca:13:b7:5e:95:73:5d:47:6f:
                    f2:4b:fb:92:22:2a:99:bf:b8:74:58:4a:c5:85:5e:
                    4f:9a:93:3d:69:49:4d:ca:d7:c9:4a:06:6f:a8:76:
                    97:2d:a5:2d:6c:3c:28:3e:49:98:e6:72:85:d1:94:
                    1b:fb:69:51:59:77:7d:c1:32:4c:17:5f:b6:a6:22:
                    1d:64:e6:d4:b3:67:9b:f1:65:11:4a:4a:bf:3d:d8:
                    ad:4f:0d:4d:8d:7d:8c:ba:5f:37:c0:3d:09:79:d5:
                    d0:75:7a:b2:86:28:4f:ee:b9:7a:85:be:c7:0c:bd:
                    d8:b9:bd:36:8f:37:93:92:3b:8c:64:85:d4:ff:e0:
                    16:19:15:22:77:75:37:0f:bc:0c:96:ca:3e:a2:f9:
                    f5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C9:00:37:58:08:7C:B3:C2:78:85:B3:6E:5F:AA:D9:52:4B:1C:60
            X509v3 Authority Key Identifier:
                keyid:02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:db:7d:ae:b5:e3:c6:2a:59:9b:c6:c8:c6:e8:6a:83:60:99:
         96:01:8f:47:49:84:4d:8c:ed:14:a6:5d:90:1a:e3:b9:d1:c4:
         f3:cb:87:54:66:dc:cd:d4:b6:60:64:26:c6:7c:99:bd:50:3b:
         81:a7:7b:4c:27:72:84:da:21:3d:b7:66:b6:bd:75:e5:b9:24:
         37:d3:f2:3a:b1:83:f0:20:25:ab:80:71:7a:bc:5b:af:08:9e:
         36:cb:1f:30:d0:00:7f:e2:db:74:3b:2f:9a:27:26:ca:90:32:
         26:9b:ef:79:93:01:b0:4b:84:d6:54:aa:aa:ea:eb:3d:df:59:
         d6:5c:4c:54:6a:36:2c:88:fc:1f:53:4a:54:88:e1:bd:ef:74:
         5b:5e:16:ed:92:c5:a7:e8:38:dc:f0:07:08:48:d9:9e:0e:0a:
         fd:ee:82:66:22:0b:be:07:a2:77:84:db:f4:fa:71:88:5c:af:
         cb:c7:f8:b2:9a:86:86:d2:21:ef:ac:06:be:6c:7d:6e:7d:07:
         39:72:81:11:7f:9c:ef:29:21:20:f8:c3:b5:48:64:a6:ad:79:
         4b:45:61:3f:3a:50:f5:ea:9b:8d:15:fe:61:15:99:86:72:52:
         2b:70:a9:03:ff:f4:0a:f6:86:2c:be:da:b6:75:87:6a:b3:d5:
         76:32:e4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:59:13 2025 by rpki-client