Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File:                     xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier:          0OsU42om8FiSi7ylkGzNpsg0QGlUM70ZvgeyIIlXcoQ=
Subject key identifier:   36:B2:6D:44:2A:FB:37:35:FF:C9:C1:54:48:CB:0D:06:B8:51:82:97
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer:       /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial:       034C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number:          034A
Signing time:             Wed 05 Nov 2025 03:52:27 +0000
Manifest this update:     Wed 05 Nov 2025 03:52:26 +0000
Manifest next update:     Fri 07 Nov 2025 03:52:26 +0000
Files and hashes:         1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: 8TWwTbd3aQ3aAakNOqiPE26JuNQZRLCm+2vOHSFd6Oc=)
                          2: 046CF67872E311F0A86CB7A7DAE4EC9C.roa (hash: RxZ6zJwwPB1hMFI2/FMmvPsAjrVlDL8yDDweU2BNpDw=)
                          3: 308911DA72E111F086A6389EDAE4EC9C.roa (hash: tYlSqnPCB7Kv8awS73OBDNcKa9Ut1iPvCF4nylTCo2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                          rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
        Validity
            Not Before: Nov  5 03:52:26 2025 GMT
            Not After : Nov  7 03:52:26 2025 GMT
        Subject: CN=690ac9fb-612d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:f6:6f:bd:8b:a5:ac:c5:bb:d2:da:75:38:
                    f5:b5:3c:cd:d6:29:5e:78:06:59:57:86:6b:aa:7a:
                    52:c2:a4:a4:4d:01:90:56:ef:0d:20:ef:bf:d7:2c:
                    fa:08:af:12:03:37:43:8c:9d:8b:8f:c5:24:03:06:
                    e9:ab:fa:13:b5:8f:de:ff:bf:8a:6c:38:b4:e7:0c:
                    85:d6:5b:83:d1:bb:8a:52:e0:b0:ae:41:92:6b:d3:
                    cb:f8:8a:dd:c0:d4:e5:eb:04:2c:27:70:62:96:90:
                    6b:27:fc:eb:28:8f:3d:04:ee:c3:0a:90:bb:81:57:
                    fd:7e:36:ea:55:10:f7:96:47:c6:3f:cf:5c:ae:1a:
                    c4:9f:34:66:b7:44:93:8f:22:ba:61:15:11:cb:87:
                    21:68:11:2f:01:f4:2f:cf:ba:1a:d1:4e:9b:16:ec:
                    a4:84:24:9e:a3:d7:b9:69:fc:33:2d:88:84:80:48:
                    95:cf:c9:84:c5:34:f8:5c:e7:5c:bd:4c:2c:f2:72:
                    4c:ee:f4:15:25:fc:6d:f8:8f:66:05:30:92:07:4d:
                    73:2e:7d:26:28:f7:59:f4:82:fb:60:1f:f3:24:43:
                    e3:cb:c8:2a:0e:81:25:cc:ef:b6:1f:0a:8d:e6:70:
                    ee:f3:20:b9:11:e9:b2:de:a6:7c:97:4a:2e:52:90:
                    2d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B2:6D:44:2A:FB:37:35:FF:C9:C1:54:48:CB:0D:06:B8:51:82:97
            X509v3 Authority Key Identifier:
                keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8d:ba:d7:a1:5e:e7:20:f5:f9:73:d0:69:fc:95:71:77:c0:
         21:01:53:08:51:a6:f8:b6:22:a0:34:e0:97:e0:f7:6f:c7:b7:
         66:53:60:9f:35:f7:b1:97:94:69:12:ae:1a:3c:6f:05:38:cd:
         38:c0:c4:97:d7:3d:73:af:ed:fb:e9:0e:38:34:0d:cd:38:a3:
         98:33:a0:c2:fd:22:a4:55:72:50:e8:f6:e3:b6:1e:e5:65:1a:
         d3:54:d5:44:fc:fc:aa:e5:cb:04:99:c6:1b:6f:c6:f8:2a:25:
         f2:f4:3e:8e:0b:94:32:02:88:c8:44:6d:a1:ea:40:6f:46:7e:
         40:02:22:b8:ae:7a:73:75:f6:5c:74:70:c0:a0:a1:5c:d5:a7:
         27:54:10:ed:0e:21:90:5c:7d:c6:45:fb:ad:aa:e7:c1:f8:4f:
         f4:49:12:be:73:6c:65:3c:d9:8d:b1:a2:f8:13:66:a5:40:68:
         97:d4:22:36:41:d9:17:4c:bf:51:62:75:4e:04:f3:8f:7d:7e:
         60:28:3b:9c:ac:89:d8:bd:a8:43:36:cd:d1:f9:8e:95:1d:07:
         31:84:8f:32:8f:4c:71:49:af:c6:96:5b:c1:e0:a4:a5:f6:dc:
         ca:d8:ff:89:aa:2c:0a:9d:b0:7a:33:00:84:d9:0a:28:56:c3:
         fb:89:01:bc
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjczMUZBUjExMC8GA1UEBRMoQzY0NzM2MjVFQUVGRDY3MzZDOTA3RDIzMUREOUM1
REJEQjlGNUVBQjAeFw0yNTExMDUwMzUyMjZaFw0yNTExMDcwMzUyMjZaMBgxFjAU
BgNVBAMTDTY5MGFjOWZiLTYxMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsT/ZvvYulrMW70tp1OPW1PM3WKV54BllXhmuqelLCpKRNAZBW7w0g77/X
LPoIrxIDN0OMnYuPxSQDBumr+hO1j97/v4psOLTnDIXWW4PRu4pS4LCuQZJr08v4
it3A1OXrBCwncGKWkGsn/Osojz0E7sMKkLuBV/1+NupVEPeWR8Y/z1yuGsSfNGa3
RJOPIrphFRHLhyFoES8B9C/PuhrRTpsW7KSEJJ6j17lp/DMtiISASJXPyYTFNPhc
51y9TCzyckzu9BUl/G34j2YFMJIHTXMufSYo91n0gvtgH/MkQ+PLyCoOgSXM77Yf
Co3mcO7zILkR6bLepnyXSi5SkC1pAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUNrJt
RCr7NzX/ycFUSMsNBrhRgpcwHwYDVR0jBBgwFoAUxkc2Jerv1nNskH0jHdnF29uf
XqswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY3MzFGLzkzNDBEODI2Mzc5NzExRUU5NkZCN0EzMTRBRDlFNkZDL3hrYzJK
ZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hrYzJKZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjczMUYvOTM0MEQ4MjYzNzk3MTFFRTk2RkI3QTMxNEFEOUU2
RkMveGtjMkplcnYxbk5za0gwakhkbkYyOXVmWHFzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABjbrXoV7nIPX5c9Bp/JVxd8AhAVMIUab4
tiKgNOCX4Pdvx7dmU2CfNfexl5RpEq4aPG8FOM04wMSX1z1zr+376Q44NA3NOKOY
M6DC/SKkVXJQ6Pbjth7lZRrTVNVE/Pyq5csEmcYbb8b4KiXy9D6OC5QyAojIRG2h
6kBvRn5AAiK4rnpzdfZcdHDAoKFc1acnVBDtDiGQXH3GRfutqufB+E/0SRK+c2xl
PNmNsaL4E2alQGiX1CI2QdkXTL9RYnVOBPOPfX5gKDucrInYvahDNs3R+Y6VHQcx
hI8yj0xxSa/GllvB4KSl9tzK2P+JqiwKnbB6MwCE2QooVsP7iQG8
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:28:30 2025 by rpki-client