Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
File:                     GDcf6QPvCG9cH_b2hAumd2cmdnA.mft (raw, json)
Hash identifier:          8rBPKx7jhiW/hOoI3bZhQbHAkGS00cI/S+nTZtskC+U=
Subject key identifier:   67:DE:27:55:1A:5C:4C:B7:E2:8E:2F:4E:02:61:6F:15:DA:8E:B0:22
Authority key identifier: 18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
Certificate issuer:       /CN=F3655EE4AR/serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
Certificate serial:       089C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
Manifest number:          0899
Signing time:             Mon 20 Oct 2025 01:42:23 +0000
Manifest this update:     Mon 20 Oct 2025 01:42:23 +0000
Manifest next update:     Wed 22 Oct 2025 01:42:23 +0000
Files and hashes:         1: GDcf6QPvCG9cH_b2hAumd2cmdnA.crl (hash: aEnMhI1HIWcVRg8heb1e1BJA/ftxwFoMyHRjiEc8wOU=)
                          2: F31E6B76755711ED9B93B29DF1222468.roa (hash: NAQ4ruRr3CeKBEbG5bbYSwTINb1GDpCxoruFb42Xz/o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                          rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204 (0x89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AR, serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
        Validity
            Not Before: Oct 20 01:42:23 2025 GMT
            Not After : Oct 22 01:42:23 2025 GMT
        Subject: CN=68f5937f-e52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:13:7b:4c:c5:39:8c:b0:5e:67:e1:ab:17:
                    32:54:3f:f0:98:6a:55:6d:26:09:a2:23:17:93:7d:
                    51:fd:11:b9:0e:79:33:08:f3:ba:80:70:ae:47:e5:
                    66:43:59:5f:eb:c6:e6:7e:5b:cb:24:0a:5f:1e:36:
                    a3:49:9a:4f:f0:26:16:f6:ca:68:dd:e2:76:26:0d:
                    bd:48:a5:fa:c0:04:f9:ce:89:4e:9c:f4:43:d8:10:
                    46:61:c5:c0:11:1d:d5:6e:d6:5a:58:0a:71:ff:2b:
                    44:f1:ea:ac:51:58:ae:26:25:18:e0:c1:97:bc:af:
                    47:11:1c:05:30:1c:7a:c0:ab:e5:2e:48:97:44:68:
                    96:eb:78:f1:a3:b6:a2:da:eb:7c:b2:27:a8:66:4c:
                    13:15:4c:cc:29:bc:b7:96:a1:89:5f:00:46:6b:c2:
                    7c:56:2f:14:ef:a5:b4:9c:48:0f:1a:48:0c:58:95:
                    16:9b:c9:62:0e:e5:81:8c:a4:14:ad:1d:e5:01:58:
                    b6:f0:f8:18:0a:8e:72:0e:bf:69:fd:c4:f8:2f:13:
                    f8:c8:52:97:ce:00:36:f7:b4:bc:30:69:1d:9d:9d:
                    b0:96:bc:32:55:d4:d7:20:07:99:f7:33:e3:d5:a0:
                    37:ec:2c:94:63:48:d8:81:67:4d:d4:43:4b:9c:3b:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DE:27:55:1A:5C:4C:B7:E2:8E:2F:4E:02:61:6F:15:DA:8E:B0:22
            X509v3 Authority Key Identifier:
                keyid:18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ad:03:f3:07:2f:61:78:29:a7:66:e7:89:0e:e2:3d:36:8b:
         86:e4:0f:12:dd:2d:ff:ac:9c:e3:e4:b1:55:31:41:2e:c0:7c:
         e6:5c:d3:a7:45:9c:34:3a:4c:7b:96:86:13:a4:11:61:7e:e4:
         81:29:e5:38:fe:57:4d:19:ae:e9:f3:61:76:8c:5d:ec:51:f9:
         a2:cc:4a:67:a1:57:be:d1:62:d7:e5:85:5a:8a:f9:9a:e9:70:
         78:45:ed:7f:6c:6a:89:fa:63:4d:d0:40:00:97:8b:0c:8d:2e:
         d6:89:f3:e4:f2:24:e7:29:b1:7e:ac:a6:6c:c5:36:17:78:fe:
         1e:7f:bc:0b:b8:4c:9f:38:de:ea:3a:39:98:2e:57:61:79:fa:
         cc:a1:d8:a7:98:92:ba:36:b8:57:18:0e:56:ac:dc:03:e2:54:
         7b:25:ed:fa:4a:7c:c3:88:f6:da:87:90:a4:b6:4b:1e:94:ef:
         fe:c0:7a:20:81:a3:08:65:d2:03:a7:74:a8:c5:81:3e:6f:65:
         74:f8:eb:28:d2:4a:09:64:be:b4:48:2b:8d:06:8b:d7:75:d6:
         e9:14:6d:02:c6:2a:38:9e:ff:41:76:7b:77:71:66:be:a1:15:
         45:d5:4c:94:ab:8b:99:01:09:64:95:a6:55:2d:18:31:9c:c4:
         53:c8:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:14 2025 by rpki-client