Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
File:                     rTNWCjX9wk4yt-GkeeIbDolqKw8.mft (raw, json)
Hash identifier:          KRYUpRJbrs8CdQWSLHNjTaPdzZsFQm+Bx2khiiAGJ3M=
Subject key identifier:   C8:5F:89:19:88:FD:02:C2:DE:89:36:FF:1F:43:D1:64:C1:65:4D:35
Authority key identifier: AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F
Certificate issuer:       /CN=F36F9BF2AR/serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
Certificate serial:       05A9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
Manifest number:          05A2
Signing time:             Tue 04 Nov 2025 03:53:13 +0000
Manifest this update:     Tue 04 Nov 2025 03:53:12 +0000
Manifest next update:     Thu 06 Nov 2025 03:53:12 +0000
Files and hashes:         1: rTNWCjX9wk4yt-GkeeIbDolqKw8.crl (hash: n36mcl9wtOaXKlI8EZFkeZFvz2AOwOduvZfa4LopV78=)
                          2: 3ECF1FD6C4BF11EE8B2737C5775412E6.roa (hash: 3Te+eK/mIojMdAzwZB8nPJY3HNmC7bWhD0CTw4iHG3c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
                          rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1449 (0x5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F9BF2AR, serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
        Validity
            Not Before: Nov  4 03:53:12 2025 GMT
            Not After : Nov  6 03:53:12 2025 GMT
        Subject: CN=690978a9-cc44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:01:c9:2a:c1:fa:e4:24:b4:bc:84:18:47:a2:
                    7b:e6:ab:55:af:ab:e6:bc:28:ac:cf:1e:b9:91:6d:
                    7f:32:34:98:e4:d1:34:f2:8b:44:2b:bc:16:8d:05:
                    ad:d9:ff:ac:4c:6a:70:a6:64:89:a8:2d:6a:14:c0:
                    08:9a:a4:0f:6b:b9:71:11:c5:21:6c:93:f1:b6:12:
                    89:87:df:2b:c0:a0:fa:5e:33:80:00:25:32:c5:ce:
                    d5:a1:22:8b:4c:ee:8a:d6:27:ab:3a:07:a5:97:b8:
                    8a:3e:c5:27:93:53:25:14:0c:0c:a4:c1:7a:d0:37:
                    ed:0e:db:9c:2a:32:9b:2c:63:07:77:5b:05:75:e7:
                    9b:46:45:00:5d:d6:df:ba:4b:30:3c:f2:2f:08:95:
                    ac:a7:61:7a:a3:f5:77:84:9b:32:f5:76:b7:f6:4a:
                    de:80:64:8a:57:61:f6:99:6d:34:b0:c4:9d:7f:35:
                    b3:d0:9d:ad:73:ea:a5:28:91:ab:f0:31:23:a6:60:
                    6f:58:f3:cf:a8:33:7e:59:71:90:78:0c:58:00:6a:
                    33:03:2e:9b:68:11:29:ea:3f:fd:c4:82:fa:31:6a:
                    27:0f:8d:cc:09:ed:c5:87:ef:14:f0:94:88:b0:82:
                    4a:42:4a:08:4b:d3:c4:58:a7:c3:0a:f5:49:f1:1f:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5F:89:19:88:FD:02:C2:DE:89:36:FF:1F:43:D1:64:C1:65:4D:35
            X509v3 Authority Key Identifier:
                keyid:AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a4:b4:63:9f:20:f2:31:b9:ed:e3:a9:62:cc:a7:c7:83:59:
         60:57:7b:8e:f5:0c:79:b8:2a:43:e6:ef:01:d1:8a:49:02:a2:
         d6:8a:b7:27:37:59:38:2a:de:79:b3:ed:7d:17:0f:6b:a4:9b:
         0d:ed:bb:97:55:6e:3c:2b:06:e2:b9:20:7c:13:da:5f:2c:69:
         8e:e2:2c:a5:66:63:81:3a:a2:03:64:f9:5d:43:b6:61:84:c2:
         13:73:06:26:54:9a:72:b9:03:71:e9:dc:1c:18:78:52:b1:8c:
         5a:ec:65:87:5a:92:f6:c6:75:e5:61:be:f5:54:08:42:76:1e:
         f8:e4:79:73:ea:f5:ab:32:88:0b:e4:d7:a8:ed:a2:5d:f0:b3:
         c8:c4:be:f5:ac:5e:b0:25:42:0c:61:a8:d7:22:f1:11:7c:31:
         de:2b:f2:65:3a:08:ec:fc:df:4f:40:d8:33:6f:31:fa:bd:1d:
         13:d9:09:92:af:53:82:00:94:eb:ba:21:97:e5:50:aa:41:ea:
         2c:e4:55:84:8c:f7:4b:51:33:7b:64:bb:29:2e:39:d3:13:43:
         96:b5:42:b0:e6:a1:08:e8:a1:ee:6a:37:97:3d:2e:06:41:5c:
         21:e2:21:21:83:a3:06:c1:df:bb:6c:88:67:d8:e1:86:e3:73:
         6f:14:5f:0d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBakwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjlCRjJBUjExMC8GA1UEBRMoQUQzMzU2MEEzNUZEQzI0RTMyQjdFMUE0NzlFMjFC
MEU4OTZBMkIwRjAeFw0yNTExMDQwMzUzMTJaFw0yNTExMDYwMzUzMTJaMBgxFjAU
BgNVBAMTDTY5MDk3OGE5LWNjNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXAckqwfrkJLS8hBhHonvmq1Wvq+a8KKzPHrmRbX8yNJjk0TTyi0QrvBaN
Ba3Z/6xManCmZImoLWoUwAiapA9ruXERxSFsk/G2EomH3yvAoPpeM4AAJTLFztWh
IotM7orWJ6s6B6WXuIo+xSeTUyUUDAykwXrQN+0O25wqMpssYwd3WwV155tGRQBd
1t+6SzA88i8IlaynYXqj9XeEmzL1drf2St6AZIpXYfaZbTSwxJ1/NbPQna1z6qUo
kavwMSOmYG9Y88+oM35ZcZB4DFgAajMDLptoESnqP/3EgvoxaicPjcwJ7cWH7xTw
lIiwgkpCSghL08RYp8MK9UnxHxDXAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUyF+J
GYj9AsLeiTb/H0PRZMFlTTUwHwYDVR0jBBgwFoAUrTNWCjX9wk4yt+GkeeIbDolq
Kw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY5QkYyLzVBNjA3MTFBNkZGNzExRUM5NTRCMDdDQTVBNDBENTc3L3JUTldD
alg5d2s0eXQtR2tlZUliRG9scUt3OC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3JUTldDalg5d2s0eXQtR2tlZUliRG9scUt3OC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjlCRjIvNUE2MDcxMUE2RkY3MTFFQzk1NEIwN0NBNUE0MEQ1
NzcvclROV0NqWDl3azR5dC1Ha2VlSWJEb2xxS3c4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHpLRjnyDyMbnt46lizKfHg1lgV3uO9Qx5
uCpD5u8B0YpJAqLWircnN1k4Kt55s+19Fw9rpJsN7buXVW48KwbiuSB8E9pfLGmO
4iylZmOBOqIDZPldQ7ZhhMITcwYmVJpyuQNx6dwcGHhSsYxa7GWHWpL2xnXlYb71
VAhCdh745Hlz6vWrMogL5Neo7aJd8LPIxL71rF6wJUIMYajXIvERfDHeK/JlOgjs
/N9PQNgzbzH6vR0T2QmSr1OCAJTruiGX5VCqQeos5FWEjPdLUTN7ZLspLjnTE0OW
tUKw5qEI6KHuajeXPS4GQVwh4iEhg6MGwd+7bIhn2OGG43NvFF8N
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:01 2025 by rpki-client