Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
File:                     cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft (raw, json)
Hash identifier:          y/WAcV2BWnNDNr9mah6trGoEGsjDvHINjYCQLqWirxQ=
Subject key identifier:   20:98:F0:0A:06:01:0B:50:41:2E:1D:6E:8C:79:B2:F7:FB:43:A5:6F
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Certificate issuer:       /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial:       09CC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
Manifest number:          09CB
Signing time:             Sun 19 Oct 2025 01:17:18 +0000
Manifest this update:     Sun 19 Oct 2025 01:17:18 +0000
Manifest next update:     Tue 21 Oct 2025 01:17:18 +0000
Files and hashes:         1: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl (hash: UgUUG794NmKBUmg2/5OfMPIVVnfakPIkxIFd3YlU1G4=)
                          2: 8506A5F2291811E9A5145C67F8AEA228.roa (hash: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                          rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 01:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2508 (0x9cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E67CAR, serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
        Validity
            Not Before: Oct 19 01:17:18 2025 GMT
            Not After : Oct 21 01:17:18 2025 GMT
        Subject: CN=68f43c1e-47f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:e1:0c:2e:00:9d:d8:59:07:7d:5e:60:f3:
                    bb:5e:e6:2a:f4:03:1f:34:02:c5:93:36:77:35:d7:
                    5f:86:8d:09:c6:90:88:84:a4:42:96:87:8e:fd:ba:
                    7e:b5:94:1a:e6:98:df:37:05:5c:54:d1:25:e0:08:
                    a0:02:62:6a:63:ff:6c:e8:fc:46:5c:41:7b:86:00:
                    5e:a9:f9:6e:fe:43:78:dd:93:60:d2:38:c7:67:13:
                    9c:19:7e:23:79:11:62:04:e7:ed:a1:79:2c:fb:c5:
                    71:be:f7:ee:3a:8b:d6:b2:ea:5d:7e:f4:eb:c2:00:
                    5a:d1:05:f5:78:cf:c8:7a:b2:67:2e:eb:9e:25:3b:
                    bf:0c:0d:91:9b:6f:c7:dc:15:3f:ca:4d:83:44:0e:
                    a2:0c:ff:03:46:07:55:3e:ea:ea:82:ee:7e:7e:73:
                    43:f2:36:96:2a:6a:33:f9:45:52:b4:93:9a:fd:0d:
                    0d:53:12:e3:76:40:00:db:82:d1:62:82:72:71:e6:
                    c2:eb:45:b1:67:56:03:85:e3:f0:ff:16:8e:dd:84:
                    93:55:23:40:3b:4d:70:4b:16:6a:fc:2d:b7:b4:ca:
                    2a:61:89:30:40:c1:99:3f:28:6a:99:39:a3:86:40:
                    df:4e:6d:05:5d:78:37:df:81:89:75:93:6e:78:07:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:98:F0:0A:06:01:0B:50:41:2E:1D:6E:8C:79:B2:F7:FB:43:A5:6F
            X509v3 Authority Key Identifier:
                keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e0:74:b5:66:70:bc:29:2a:3b:8c:a2:77:95:98:75:7e:5f:
         c2:3a:1b:ad:e4:df:6c:63:8a:f3:94:97:ba:43:1e:a7:16:6a:
         73:9f:e3:5c:7e:d2:02:ea:4a:e3:bc:05:79:43:5f:31:72:eb:
         47:9f:df:f2:55:79:aa:65:d4:41:bf:c9:91:09:9e:ca:92:3f:
         14:80:26:e5:8d:0b:a4:d1:e7:f5:f3:ec:e3:cc:c8:ef:c5:b3:
         bc:0d:ca:19:df:63:5b:7c:98:3e:35:fa:87:5b:75:83:b6:a0:
         3e:84:e6:84:f0:60:5d:aa:91:1c:6c:14:19:7f:87:25:64:34:
         50:56:61:7f:52:f5:42:8f:f9:65:cf:65:3c:01:23:61:71:67:
         a2:7d:b6:ca:b2:f0:ce:78:2d:d1:6e:6f:e8:bd:a1:30:81:0f:
         53:c1:2a:c0:98:72:a2:94:31:1e:65:d8:a3:2e:66:a2:93:e5:
         05:40:b2:e7:07:14:45:66:3c:17:36:d1:52:8c:b0:c4:10:5e:
         03:cb:62:b6:50:7e:70:44:6b:52:04:d9:b7:31:b8:61:b3:54:
         19:7a:b1:cb:ab:91:5a:8d:44:00:3d:3f:07:50:e8:dd:4d:04:
         01:7e:e1:29:16:f7:60:75:bd:9b:43:90:e2:ba:d6:3c:e9:75:
         4b:38:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:06 2025 by rpki-client