Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
File:                     rlEpNifxvXqfU3iOKmXqBBNGpwI.mft (raw, json)
Hash identifier:          f7WYp2rvVfvoPgwsuyTb5xEjfFNARQOtDEGBWNhMxtQ=
Subject key identifier:   1D:3E:4C:7A:91:82:2B:60:C3:0F:BC:83:DE:6B:0D:A8:4C:96:CB:30
Authority key identifier: AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02
Certificate issuer:       /CN=F3620C16AR/serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
Certificate serial:       0391
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
Manifest number:          0385
Signing time:             Mon 20 Oct 2025 03:34:12 +0000
Manifest this update:     Mon 20 Oct 2025 03:34:11 +0000
Manifest next update:     Wed 22 Oct 2025 03:34:11 +0000
Files and hashes:         1: rlEpNifxvXqfU3iOKmXqBBNGpwI.crl (hash: cHGfRF41v0iPGsD6y+zA1jG6Pl7nSMvgfsz7ONYyUIw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                          rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620C16AR, serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
        Validity
            Not Before: Oct 20 03:34:11 2025 GMT
            Not After : Oct 22 03:34:11 2025 GMT
        Subject: CN=68f5adb4-e79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:4a:13:87:85:35:66:d4:c2:c5:91:84:69:
                    b8:83:c0:14:8d:b4:e0:4b:c5:d6:9d:30:0d:24:af:
                    69:82:bb:08:46:27:fe:2d:f3:dd:ef:99:20:c3:c5:
                    5c:ef:36:68:41:b6:1b:03:d0:14:db:a6:9d:e3:1c:
                    74:89:cf:45:d6:bb:10:6e:dc:f5:ad:49:57:e5:16:
                    ed:87:6a:e3:0d:f0:da:88:e7:ee:f0:ae:37:ad:e3:
                    c2:4d:c4:ba:e9:d4:1c:08:6d:64:f3:51:0e:77:78:
                    58:1a:5c:1e:64:42:b3:47:88:4c:b2:09:05:69:50:
                    82:2d:63:cc:9f:3e:3b:a1:57:b6:df:12:01:ea:a8:
                    05:46:c2:26:1f:51:d8:40:5b:54:1b:96:4b:5a:8d:
                    22:3e:20:b3:14:5c:96:8f:3d:5b:be:db:0b:7e:d9:
                    f5:f2:18:8f:50:bd:cd:2c:d9:f9:04:f7:28:11:9f:
                    74:e1:e3:ba:10:1a:be:d0:37:26:f0:38:9f:b1:99:
                    ad:3b:b4:f7:ae:fc:ec:2d:c9:25:3c:9e:24:5a:e9:
                    30:dd:28:7c:53:7d:b4:ea:8e:e4:d2:2d:bd:97:22:
                    5a:55:02:90:b8:9c:90:7e:fe:17:08:b4:24:8d:b8:
                    51:0c:73:5e:98:10:5e:c5:77:3f:22:2e:c1:55:b9:
                    22:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3E:4C:7A:91:82:2B:60:C3:0F:BC:83:DE:6B:0D:A8:4C:96:CB:30
            X509v3 Authority Key Identifier:
                keyid:AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:93:a6:c6:43:99:a2:fd:73:8b:2d:d5:cd:e3:0e:f3:b1:ad:
         cd:4f:c4:aa:68:55:f5:8f:a5:0c:99:fb:9a:33:fa:5e:8c:37:
         7e:37:34:8b:f5:83:b9:e3:87:bb:b8:c8:e1:d5:9d:0f:d3:41:
         90:ae:fa:76:ec:54:1f:a3:3e:4c:9e:52:ed:fc:b1:08:e8:f6:
         55:9b:12:74:a8:7d:dd:45:93:7c:e6:a7:58:fe:de:96:31:25:
         4a:3e:c2:b5:96:dc:ef:a7:38:ce:4c:80:e4:c5:2f:f1:c5:cb:
         5c:52:e1:aa:2c:5d:72:7b:16:ad:03:c0:1c:d3:73:e0:64:6d:
         db:10:d7:bc:0e:ee:3c:83:c1:11:52:1b:8f:c7:30:cd:e1:e1:
         7f:28:95:4d:6e:2a:cb:4f:0f:1d:f4:4d:1a:52:48:27:8d:2d:
         9a:3d:0d:fa:8f:11:03:91:1e:81:c3:95:a7:b0:f7:b1:2f:e9:
         74:3c:8d:55:d7:80:6f:c5:f4:97:5f:ce:b4:26:41:c1:7b:bd:
         aa:40:3b:92:a7:80:28:e0:0e:d8:39:4e:42:79:e3:03:a0:8c:
         54:db:0a:2b:9f:80:e8:54:ff:6e:3a:1c:c6:85:36:5b:a5:df:
         6b:7d:0e:93:4c:59:8c:01:eb:6a:c1:a7:8e:34:eb:c7:f5:b2:
         0b:22:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:12:24 2025 by rpki-client