Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft
File:                     uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft (raw, json)
Hash identifier:          NEGdd1ZWw9zMdZyBK2UExh1yZc26K3qHIpQZ/PKKkkg=
Subject key identifier:   56:73:D7:87:0A:F5:C4:BF:61:07:87:90:73:0E:94:9C:2C:64:B4:8B
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Certificate issuer:       /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial:       0823
Authority info access:    rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft
Manifest number:          07A6
Signing time:             Mon 20 Oct 2025 02:06:06 +0000
Manifest this update:     Mon 20 Oct 2025 02:06:05 +0000
Manifest next update:     Wed 22 Oct 2025 02:06:05 +0000
Files and hashes:         1: uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl (hash: czgIDPmUw+AeqHBxXAjzLgAjbAb2xvCmT5KXI8zvEmc=)
                          2: B3154C7CC81F11EEAA20E967775412E6.roa (hash: 8UfO1Zdj7sHYai3qFl14GvhjEbZMOyrK3RfMcTYVc3I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft
                          rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083 (0x823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626CB6AR, serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
        Validity
            Not Before: Oct 20 02:06:05 2025 GMT
            Not After : Oct 22 02:06:05 2025 GMT
        Subject: CN=68f5990e-82b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:b2:b5:e7:ce:bc:b6:2b:ad:89:d4:dc:c4:
                    92:9d:86:0d:ce:39:ca:85:90:dc:cf:f9:a9:a6:47:
                    14:0a:ec:f0:36:06:1c:94:38:f0:0e:d5:b4:e6:57:
                    d2:a3:64:88:83:28:49:7c:d5:c4:5a:f9:b7:18:2a:
                    d9:1a:95:3e:d5:f9:31:d1:c1:33:f8:e0:85:ba:4f:
                    b0:a7:c0:92:c8:35:39:c5:44:ef:52:87:dc:e6:38:
                    20:90:0a:65:ef:11:25:48:e9:8a:56:62:b7:63:ee:
                    fb:0b:f0:47:ec:52:cd:7d:43:2a:b3:7d:38:37:11:
                    fd:65:72:a2:95:df:21:bb:8b:1e:1b:b5:2d:11:5e:
                    84:3f:c9:31:f5:d2:91:b0:be:68:97:f1:57:b7:97:
                    f0:c8:a3:d0:35:11:bd:68:b6:80:91:9a:af:5e:0d:
                    d5:c2:87:ed:eb:cc:55:c7:fe:de:b6:8d:7e:58:72:
                    fe:44:3f:5b:1b:07:e7:7c:be:2a:e8:b1:f6:f8:32:
                    44:a8:ea:48:36:9f:97:6b:6e:75:1a:e7:32:31:d1:
                    6d:a8:6f:ea:51:39:6c:c7:c5:22:df:c0:6e:c1:f2:
                    9a:d7:aa:0c:1e:71:89:12:4c:a8:6a:f4:e1:ac:65:
                    85:ca:4b:9e:58:b7:36:d5:c6:56:18:86:87:6e:2f:
                    d0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:73:D7:87:0A:F5:C4:BF:61:07:87:90:73:0E:94:9C:2C:64:B4:8B
            X509v3 Authority Key Identifier:
                keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ce:9d:7e:19:48:90:39:a1:b1:c0:64:4c:a9:dd:18:95:cb:
         db:27:77:51:29:e2:a7:2b:83:ed:9c:56:c2:3d:36:8e:db:82:
         8c:9c:6b:1f:96:34:0d:d4:92:12:37:b8:86:79:f6:6c:e6:ca:
         1a:b5:e6:e5:7d:23:cf:06:42:99:5a:04:a2:64:9d:4e:00:29:
         dd:b1:45:dd:77:4a:c5:a4:e1:0a:5c:89:e2:e3:9c:d7:8d:ac:
         cf:51:21:d0:bf:2c:e9:90:a9:19:e6:8c:56:88:3a:a0:75:8e:
         f2:df:6d:ea:c4:be:69:63:33:d0:b8:e0:42:4c:2e:75:03:ec:
         c6:7d:1d:6b:e0:cd:43:41:49:11:c9:75:c9:5a:b0:b5:3a:eb:
         59:d8:06:8d:2d:b9:4e:3c:72:b1:fd:93:4f:80:91:da:b3:3e:
         f4:dc:c5:2b:cc:39:48:c3:56:aa:d9:b7:c1:47:a4:63:d9:0a:
         af:01:63:94:e9:79:38:35:25:be:f3:d7:72:90:d4:35:18:49:
         a2:4b:50:d1:66:fe:06:55:64:58:bc:8d:07:a5:dc:03:64:90:
         22:78:c5:6d:08:da:d1:f0:19:7d:bc:0b:c3:9c:4a:4e:14:e2:
         4c:01:2e:63:18:ee:8c:68:67:39:f0:50:a5:79:66:74:98:e8:
         c6:17:75:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:58 2025 by rpki-client