Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File:                     FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier:          XYOxPGxEDA895PqG5g+/bzjl63r44F4ZpJYixNYuupM=
Subject key identifier:   02:BB:6D:0D:7B:38:14:D8:6E:CE:00:5E:D4:56:DA:41:9E:B0:BE:51
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer:       /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial:       040B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number:          0408
Signing time:             Sun 19 Oct 2025 03:16:06 +0000
Manifest this update:     Sun 19 Oct 2025 03:16:05 +0000
Manifest next update:     Tue 21 Oct 2025 03:16:05 +0000
Files and hashes:         1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: dTLFzsRbXCHKdX4uQ2bK5zGiEEs7cyLfQdH6pdjcOfY=)
                          2: CF8B10CE1DB711EFA609B0217DDC24C2.roa (hash: cUUrYIHHPxFgWnYQbOftBzdS94Gj26Vr5vz5884oWrA=)
                          3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                          rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 03:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
        Validity
            Not Before: Oct 19 03:16:05 2025 GMT
            Not After : Oct 21 03:16:05 2025 GMT
        Subject: CN=68f457f6-ebc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:6b:c6:ef:2a:96:25:b1:69:f6:e5:73:cd:
                    45:16:6a:4e:c4:55:b8:9a:3e:ca:d1:4a:d5:23:8c:
                    74:49:6f:dd:ee:df:a7:a5:0e:d9:91:68:97:a8:41:
                    02:fa:26:ad:76:5a:0f:20:8d:7c:47:ec:29:4b:54:
                    ea:1b:89:7a:bf:1e:4b:a6:de:d5:eb:04:c6:4e:9a:
                    ae:14:6b:5e:8a:5e:3a:3f:6e:00:ae:c7:4d:44:28:
                    e4:1d:0f:72:71:9b:36:18:51:38:41:7e:57:e4:00:
                    54:aa:6f:4a:4d:63:58:96:2e:f3:3e:e2:12:d6:9f:
                    b0:7f:7a:c1:8c:e3:bb:fe:fc:c9:cf:72:ec:71:6f:
                    be:d1:56:16:d2:26:c5:78:71:11:0d:d1:03:a5:a2:
                    50:39:ec:98:61:10:3f:a1:f8:8e:d5:ef:4c:f6:d7:
                    a3:57:38:a5:a1:72:1e:59:65:ef:9d:da:62:a3:d3:
                    de:cb:86:67:e2:74:7e:5f:1c:c7:44:e9:50:e3:a2:
                    6a:37:09:57:63:58:fb:94:df:6a:66:75:dd:64:cf:
                    14:0e:2b:65:44:4e:fc:38:3b:52:ba:fb:03:50:91:
                    62:2e:d8:93:bb:ae:29:6d:f3:a5:56:ca:3a:10:08:
                    2a:ba:cb:7c:d5:a8:da:ab:2a:f6:2a:4f:06:8e:7c:
                    2e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BB:6D:0D:7B:38:14:D8:6E:CE:00:5E:D4:56:DA:41:9E:B0:BE:51
            X509v3 Authority Key Identifier:
                keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:da:c1:a1:e2:ef:a1:94:fa:48:a5:54:fc:62:ba:30:f9:96:
         d4:d4:6e:4d:d8:8f:52:df:52:3f:26:79:15:ce:98:eb:17:6f:
         e3:09:ae:47:9f:1b:89:6f:c4:dc:90:c5:0f:b9:98:82:a2:05:
         c5:1c:36:c7:5d:3f:62:dd:dc:1c:1c:27:43:40:35:c2:22:db:
         c3:ad:e5:7c:ea:e9:d8:0c:be:25:54:ce:6e:d0:98:ca:5d:14:
         e5:aa:14:c0:3c:47:5f:db:77:35:b7:4e:64:02:9b:a7:4a:1c:
         b6:ee:a9:5f:b8:b5:37:c1:53:30:cc:94:52:62:74:5a:a7:b8:
         64:71:f4:bf:28:14:ba:99:1d:ec:9e:4c:95:b2:65:68:b3:43:
         a6:b3:2d:96:d0:9b:e0:3b:76:a3:c1:83:2a:3c:7e:43:41:94:
         e6:be:77:06:75:d2:0b:5f:c6:ec:84:d0:7a:10:39:3c:62:8c:
         f1:d2:3d:d4:74:2c:0f:41:c3:60:d2:d1:96:cd:a4:b9:d3:14:
         e3:db:b8:70:8c:05:0a:49:eb:3e:61:03:ee:03:dc:7f:f6:e9:
         f2:b3:b4:28:42:c9:5c:15:1e:84:7d:fe:c0:7f:b7:fe:82:83:
         87:17:35:49:38:bc:21:37:85:35:2f:7d:50:f6:6d:d7:47:d7:
         39:49:6d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:05 2025 by rpki-client