Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
File:                     q1UdEIRQYI699UDKEhmyuEf2Xr0.mft (raw, json)
Hash identifier:          AbpV3Qjm8BITCIcWi9oTu1qnLJFDqFpF6MO+iAKAUb0=
Subject key identifier:   9E:49:68:55:56:9D:43:C0:F7:DE:B6:14:20:B0:26:22:C9:A7:0C:25
Authority key identifier: AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD
Certificate issuer:       /CN=F36145DBAR/serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
Certificate serial:       03CA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
Manifest number:          03C8
Signing time:             Sun 19 Oct 2025 03:24:41 +0000
Manifest this update:     Sun 19 Oct 2025 03:24:40 +0000
Manifest next update:     Tue 21 Oct 2025 03:24:40 +0000
Files and hashes:         1: q1UdEIRQYI699UDKEhmyuEf2Xr0.crl (hash: 12RZUslbEIe2pNq7t5EuI8qyDQpuKC0fOgfVl0Le38c=)
                          2: 8CF32B68904C11EF9584C288762E951A.roa (hash: W8KdpJvKsiz8S2dQkLaP2FisSXn5+k8WsnBGg52AlIA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
                          rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970 (0x3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36145DBAR, serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
        Validity
            Not Before: Oct 19 03:24:40 2025 GMT
            Not After : Oct 21 03:24:40 2025 GMT
        Subject: CN=68f459f9-40cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:55:a0:b1:82:d3:25:b6:d2:b8:66:bc:a9:8d:
                    f2:17:1e:7a:97:6e:fe:ad:3e:9d:63:d3:d4:6d:c4:
                    87:0a:11:fc:b5:4b:9b:1c:aa:a7:b9:96:5d:69:1c:
                    31:0a:d3:b9:d3:59:27:62:e2:3a:ba:a8:76:9d:29:
                    ee:4d:fc:61:0c:62:69:47:b3:3e:19:c8:22:77:e0:
                    e7:77:87:9a:bd:28:c1:11:bb:46:91:1e:d2:3a:42:
                    5a:d2:b5:07:a9:b5:b7:ec:61:cc:a7:60:65:cc:40:
                    82:66:dd:b8:c0:9d:15:06:37:3e:eb:b8:88:c8:97:
                    62:82:2e:69:16:75:e5:e8:74:51:09:eb:02:05:2d:
                    61:02:05:ca:b0:00:05:f6:6e:bb:d9:9c:f7:c1:72:
                    93:18:89:51:64:7e:4f:46:5e:44:67:88:08:df:70:
                    97:71:79:cc:41:4f:a2:e0:29:63:b1:72:90:60:9e:
                    0e:ed:ad:78:7a:5e:3a:49:a7:c4:27:8c:05:86:12:
                    0f:da:e3:37:9d:f4:ed:93:ed:4f:32:52:d3:ef:ef:
                    53:c7:5f:98:ab:2f:64:57:00:c2:71:5f:2b:2e:dd:
                    21:87:d5:9e:10:a3:e3:92:59:42:aa:d5:e0:ae:73:
                    6a:85:27:41:5e:8a:b9:ef:2a:e8:d9:3a:59:1c:50:
                    6d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:49:68:55:56:9D:43:C0:F7:DE:B6:14:20:B0:26:22:C9:A7:0C:25
            X509v3 Authority Key Identifier:
                keyid:AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4d:d4:10:bf:c6:9d:e7:71:a4:38:de:fd:6a:db:61:d9:d1:
         32:0e:00:fc:e5:5e:1e:63:43:25:05:f9:78:32:88:28:80:53:
         66:4c:f4:92:9a:34:56:31:5f:06:c1:80:93:df:62:09:25:1b:
         81:0a:3a:20:a7:d2:55:65:fa:92:84:e7:75:c6:3c:46:aa:3d:
         a7:c1:30:16:f1:ef:8e:fb:e6:7d:89:e2:00:a6:af:e6:5a:c7:
         42:4c:ab:79:de:35:a4:46:4e:61:53:cc:71:9f:98:a2:c6:c0:
         cb:80:11:0b:b6:d0:68:ec:6d:b7:54:b7:f0:8e:55:99:e1:6a:
         2d:c7:97:23:2e:13:b1:3b:8c:94:61:b5:cd:ea:cf:d6:1a:0d:
         e4:ab:78:1d:24:8a:66:25:09:6a:ba:b1:8c:a4:37:62:d5:b4:
         3f:4e:fe:05:78:b2:43:48:1d:5b:10:41:63:2d:ce:00:b8:1b:
         cf:8c:18:89:50:67:77:a0:10:bb:25:3b:a6:8f:03:a3:54:7d:
         75:68:eb:6e:bc:85:56:c6:0c:69:0b:7f:67:8e:9a:79:12:1e:
         42:19:17:82:98:0c:5d:c0:f3:7a:cb:9e:a4:a2:d1:59:1c:11:
         dc:a2:b9:bc:f7:23:45:e9:8b:51:b9:ed:bb:5d:e8:20:25:63:
         84:df:53:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:15:33 2025 by rpki-client