Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
File:                     kjOEThK8fu30Ns4cyZ6uITZHJkc.mft (raw, json)
Hash identifier:          umknSZdWr2nTfYQNntOr+jWvD5XpMnRVQi8SdhvL6Nk=
Subject key identifier:   7E:5F:AD:3B:B6:CB:CD:CE:53:54:B9:EE:59:69:02:9E:7C:B9:92:62
Authority key identifier: 92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47
Certificate issuer:       /CN=F36F8DABAR/serialNumber=9233844E12BC7EEDF436CE1CC99EAE2136472647
Certificate serial:       0BC7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
Manifest number:          0BC1
Signing time:             Wed 05 Nov 2025 01:09:50 +0000
Manifest this update:     Wed 05 Nov 2025 01:09:49 +0000
Manifest next update:     Fri 07 Nov 2025 01:09:49 +0000
Files and hashes:         1: kjOEThK8fu30Ns4cyZ6uITZHJkc.crl (hash: yeeaZ0qA761Mygx4oIRStgBV6nj0z+WN+F3wwGJyVQU=)
                          2: DC9DA0E4D58F11EEB154057C775412E6.roa (hash: gp7fukfD5fPb1a+zTWjX6E2Nn206G89h7J8+rzHmk5o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
                          rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3015 (0xbc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8DABAR, serialNumber=9233844E12BC7EEDF436CE1CC99EAE2136472647
        Validity
            Not Before: Nov  5 01:09:49 2025 GMT
            Not After : Nov  7 01:09:49 2025 GMT
        Subject: CN=690aa3dd-4a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:75:2d:e0:49:3f:7e:8a:b1:6e:75:c7:7d:a5:
                    9e:70:38:e3:3f:99:03:26:62:14:28:b3:fc:16:7f:
                    22:2e:bf:e5:ad:92:aa:b7:9a:5e:85:28:db:2c:b8:
                    d6:c0:ad:65:4d:7b:ec:88:af:69:d2:15:ac:92:71:
                    0d:77:d7:0f:ee:78:44:5a:71:f8:a1:98:2b:f8:c8:
                    6a:83:6d:25:f5:ee:a2:5b:6e:89:ba:72:ad:03:e9:
                    4b:88:6d:bf:de:f1:26:2b:07:c4:3f:e9:25:7c:03:
                    a5:e2:b3:db:f4:e3:ed:b5:f3:f3:ca:be:1d:84:5d:
                    88:2d:dc:d2:c3:d2:44:9e:93:e8:02:3c:25:c5:49:
                    ce:29:05:8a:b2:db:b3:9c:8e:aa:27:43:ad:7c:90:
                    60:de:79:4c:8d:55:ad:22:a8:18:31:6b:3b:73:51:
                    51:10:23:56:7b:cc:79:26:54:2e:27:70:b3:a5:e9:
                    48:3e:ec:af:72:f2:5b:0f:7c:17:8a:c4:f8:11:eb:
                    ea:3f:70:f8:f3:91:7d:ad:a4:0a:30:b1:a5:f9:05:
                    c6:db:ea:46:37:7a:c1:97:70:6b:3d:b2:ce:64:6d:
                    2a:1f:3b:c8:21:0a:79:4d:76:c1:1a:ae:6d:33:ef:
                    e8:f2:8f:ae:a7:4b:b6:fd:90:77:82:72:1b:c7:27:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5F:AD:3B:B6:CB:CD:CE:53:54:B9:EE:59:69:02:9E:7C:B9:92:62
            X509v3 Authority Key Identifier:
                keyid:92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5c:61:4f:c6:e4:2c:de:67:8f:b0:0a:14:02:dc:63:32:17:
         f0:40:85:14:54:44:d3:bd:b1:ec:e4:5f:78:21:e5:e9:20:d2:
         c9:2c:36:4a:25:96:d2:29:80:b6:a5:d1:2c:00:49:2b:b7:72:
         e1:08:f5:21:90:3c:b7:17:b8:90:c0:7b:45:83:7d:85:08:db:
         38:33:8b:eb:51:36:cc:b2:d9:b1:bc:85:62:f4:2d:50:bc:33:
         81:68:77:ab:68:4d:73:54:4d:6b:0a:00:b3:62:4b:5f:fa:e2:
         30:a4:a1:b5:72:9d:c3:6c:98:9f:81:87:2f:7c:cf:ae:32:aa:
         2c:ea:93:79:e1:f8:69:ec:88:f8:48:27:36:a2:7b:59:b8:98:
         f0:39:f2:e3:0a:61:30:f8:be:10:92:06:69:12:cf:73:d0:9d:
         22:7b:76:75:ab:d8:b9:d1:cf:4b:11:be:b9:28:d3:6f:5c:49:
         59:3e:ae:f0:cb:61:f8:f7:dc:9c:73:2b:21:19:c9:b3:f8:43:
         fb:df:4d:07:cc:81:93:92:c6:88:b0:90:1c:36:75:15:fe:40:
         15:d9:cd:9a:29:0e:40:42:9f:29:84:4a:fb:52:33:83:f8:b5:
         76:9c:88:46:b2:97:b4:83:25:75:de:f0:e4:52:84:a8:ef:13:
         45:86:d0:f2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICC8cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjhEQUJBUjExMC8GA1UEBRMoOTIzMzg0NEUxMkJDN0VFREY0MzZDRTFDQzk5RUFF
MjEzNjQ3MjY0NzAeFw0yNTExMDUwMTA5NDlaFw0yNTExMDcwMTA5NDlaMBgxFjAU
BgNVBAMTDTY5MGFhM2RkLTRhNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD4dS3gST9+irFudcd9pZ5wOOM/mQMmYhQos/wWfyIuv+Wtkqq3ml6FKNss
uNbArWVNe+yIr2nSFayScQ131w/ueERacfihmCv4yGqDbSX17qJbbom6cq0D6UuI
bb/e8SYrB8Q/6SV8A6Xis9v04+218/PKvh2EXYgt3NLD0kSek+gCPCXFSc4pBYqy
27OcjqonQ618kGDeeUyNVa0iqBgxaztzUVEQI1Z7zHkmVC4ncLOl6Ug+7K9y8lsP
fBeKxPgR6+o/cPjzkX2tpAowsaX5Bcbb6kY3esGXcGs9ss5kbSofO8ghCnlNdsEa
rm0z7+jyj66nS7b9kHeCchvHJxs9AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUfl+t
O7bLzc5TVLnuWWkCnny5kmIwHwYDVR0jBBgwFoAUkjOEThK8fu30Ns4cyZ6uITZH
JkcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4REFCLzc4Q0I5MDUwQjlDNDExRTdBREQxOEM2MUY4QUVBMjI4L2tqT0VU
aEs4ZnUzME5zNGN5WjZ1SVRaSEprYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2tqT0VUaEs4ZnUzME5zNGN5WjZ1SVRaSEprYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjhEQUIvNzhDQjkwNTBCOUM0MTFFN0FERDE4QzYxRjhBRUEy
Mjgva2pPRVRoSzhmdTMwTnM0Y3laNnVJVFpISmtjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcXGFPxuQs3mePsAoUAtxjMhfwQIUUVETT
vbHs5F94IeXpINLJLDZKJZbSKYC2pdEsAEkrt3LhCPUhkDy3F7iQwHtFg32FCNs4
M4vrUTbMstmxvIVi9C1QvDOBaHeraE1zVE1rCgCzYktf+uIwpKG1cp3DbJifgYcv
fM+uMqos6pN54fhp7Ij4SCc2ontZuJjwOfLjCmEw+L4QkgZpEs9z0J0ie3Z1q9i5
0c9LEb65KNNvXElZPq7wy2H499yccyshGcmz+EP7300HzIGTksaIsJAcNnUV/kAV
2c2aKQ5AQp8phEr7UjOD+LV2nIhGspe0gyV13vDkUoSo7xNFhtDy
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:27:54 2025 by rpki-client