Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File:                     pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier:          +CcHZ4nFTRUCnF5raxabIHOTAU0c/B8dOS7fCbeURyE=
Subject key identifier:   E4:8B:20:CF:D7:33:D1:A4:24:D3:50:F2:29:5A:93:24:ED:49:EE:8B
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer:       /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial:       01EB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number:          01EB
Signing time:             Sun 19 Oct 2025 04:21:28 +0000
Manifest this update:     Sun 19 Oct 2025 04:21:27 +0000
Manifest next update:     Tue 21 Oct 2025 04:21:27 +0000
Files and hashes:         1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: L/xNKqjB+aWqQ6RnbF8ZJvL9PFpNUzdEKdagmZntG3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                          rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 04:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
        Validity
            Not Before: Oct 19 04:21:27 2025 GMT
            Not After : Oct 21 04:21:27 2025 GMT
        Subject: CN=68f46748-e957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1a:0d:8b:38:1a:bb:65:23:66:ea:1d:d2:f0:
                    03:b0:d2:28:84:fb:13:69:22:7f:e2:94:c8:2f:89:
                    62:b4:96:c5:ae:29:f2:b3:af:6b:74:51:c3:23:da:
                    6c:58:e1:5e:09:17:c7:e0:11:a5:26:a5:73:d2:2a:
                    ca:e8:7e:52:8b:c3:c2:be:33:74:4d:1d:0e:9a:94:
                    c8:b2:2b:9d:46:3c:87:d8:e6:6b:69:de:3c:bd:d4:
                    d7:4a:f7:02:25:b7:72:b4:c2:1b:61:a1:4e:8f:af:
                    28:9a:0e:bc:e5:7a:75:ba:89:fa:00:39:bf:21:5e:
                    7b:6d:7d:97:95:43:09:29:9d:10:ff:7c:12:36:67:
                    51:86:bc:c0:52:1d:90:43:19:ed:a0:9c:07:bb:8e:
                    c4:19:00:2a:97:70:61:1c:2c:1e:6a:02:30:16:f7:
                    04:74:b8:c8:b7:d2:ba:a8:94:2a:f9:77:63:48:a8:
                    40:14:ef:f0:76:57:c2:6e:a4:be:5a:48:07:75:f1:
                    d7:8e:62:1b:d9:c1:31:da:90:a9:b8:12:0f:c0:ea:
                    01:32:4b:97:b2:7f:47:83:ec:bd:a5:b7:9c:1a:f4:
                    19:b4:3b:fb:db:d0:74:bb:1d:66:02:3e:49:12:8a:
                    5d:40:51:48:ba:44:85:ea:97:5a:08:f3:38:b7:20:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8B:20:CF:D7:33:D1:A4:24:D3:50:F2:29:5A:93:24:ED:49:EE:8B
            X509v3 Authority Key Identifier:
                keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f4:8d:ae:b2:4e:74:f4:f7:57:98:a3:b0:85:fc:94:b2:ec:
         c0:80:5d:22:d3:90:cf:3c:89:01:07:32:a4:93:51:8e:b5:f5:
         20:87:96:dd:52:e8:68:ce:b3:d6:9c:65:6f:d9:35:9a:ab:f7:
         ce:12:4e:5c:fd:97:c4:30:a2:16:63:99:ef:81:1b:80:00:71:
         5b:2f:f0:b6:5b:2a:0c:34:91:9c:5a:20:3b:63:f1:76:19:69:
         44:0c:c3:71:e9:90:35:56:35:a2:73:2d:29:7c:33:f2:eb:5a:
         e1:5b:cf:35:f5:5e:43:7b:bf:84:62:7e:21:d9:93:04:93:f9:
         be:a7:c7:00:93:88:45:6b:71:d3:2b:04:6e:ad:21:8f:05:d6:
         f4:50:73:5e:24:45:13:9a:8f:b2:df:5b:5f:d9:ec:d1:08:36:
         00:e2:d0:04:28:2c:e3:39:dc:01:fc:2e:4b:ea:9f:9c:d9:09:
         c0:c3:38:96:69:d4:df:6c:21:f0:3c:af:74:00:da:3e:a6:12:
         f0:3f:29:4d:7d:35:27:8d:f6:fa:fb:58:cc:ce:0d:95:ce:81:
         9c:7a:86:a7:5c:18:8e:ef:67:90:a0:9b:51:9c:86:60:26:b8:
         f0:0b:54:ac:88:03:72:54:54:66:6f:50:7b:74:7e:74:22:8a:
         41:95:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:25 2025 by rpki-client