Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
File:                     kiiCgOPYgt7EFfWIHAFch2WdaEo.mft (raw, json)
Hash identifier:          dW0bplZz8MXvr9Gdxssov0+P/Q1WYU6mW+PMKi0E5co=
Subject key identifier:   45:D1:91:2A:B0:DA:43:CC:99:61:B4:CB:14:11:6E:D0:D0:DB:0D:DD
Authority key identifier: 92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A
Certificate issuer:       /CN=F365F7E8AR/serialNumber=92288280E3D882DEC415F5881C015C87659D684A
Certificate serial:       02BE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
Manifest number:          02BD
Signing time:             Sun 19 Oct 2025 03:57:54 +0000
Manifest this update:     Sun 19 Oct 2025 03:57:53 +0000
Manifest next update:     Tue 21 Oct 2025 03:57:53 +0000
Files and hashes:         1: kiiCgOPYgt7EFfWIHAFch2WdaEo.crl (hash: C164rAHRCpiIldyQyG1VYjyOVeTvXBmsTwc9xzDYAF8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                          rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 03:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AR, serialNumber=92288280E3D882DEC415F5881C015C87659D684A
        Validity
            Not Before: Oct 19 03:57:53 2025 GMT
            Not After : Oct 21 03:57:53 2025 GMT
        Subject: CN=68f461c2-ed98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:1b:8e:5f:17:ec:7e:bb:54:0d:5f:98:0e:
                    db:30:ec:6f:32:3d:fd:98:bc:76:31:32:6a:35:df:
                    84:df:f7:01:a0:00:54:15:8d:5e:48:e8:c0:f6:d2:
                    a3:b3:a2:3d:f1:98:e4:b0:97:b1:0c:38:42:8a:8c:
                    ef:b9:00:f5:28:c3:25:03:3e:df:9b:20:dc:88:e0:
                    09:ab:4e:70:82:84:cf:24:ac:70:33:6a:00:a2:c5:
                    d4:06:4c:c6:4a:4a:08:06:69:9c:a4:1e:a3:96:b1:
                    0d:41:b7:c1:4a:85:be:62:c1:94:67:4b:68:71:ad:
                    af:53:06:08:8c:65:ea:44:de:f1:c7:71:eb:66:4a:
                    a1:51:f1:04:98:7b:0e:62:74:b1:dc:fd:6e:ea:2b:
                    4e:ee:6f:72:8c:a5:53:34:9f:98:66:f7:2d:79:52:
                    ea:8b:5f:48:15:8f:d1:96:0d:ce:60:83:8e:4b:9b:
                    87:47:37:36:23:ee:cb:78:be:e7:37:90:49:18:b6:
                    3c:6e:84:56:7d:cb:7b:9c:56:44:a0:0f:1d:87:17:
                    b5:fe:79:30:6a:50:e5:ef:33:24:c9:53:a7:ab:2e:
                    76:6b:a7:a8:d2:56:6b:4d:c2:b8:2f:d9:35:ea:7a:
                    12:98:0c:2a:ec:50:01:bf:ba:39:a5:a8:2c:0f:3b:
                    9f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D1:91:2A:B0:DA:43:CC:99:61:B4:CB:14:11:6E:D0:D0:DB:0D:DD
            X509v3 Authority Key Identifier:
                keyid:92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2d:64:60:43:5e:6d:7d:07:fb:c7:f7:f9:2f:07:a8:44:f9:
         91:76:d1:3c:f4:40:27:ce:0b:07:ef:f9:05:d1:0c:81:f6:41:
         6a:d2:ca:ed:bd:47:99:bf:3a:b4:7f:da:41:09:29:8b:67:18:
         07:aa:ec:d5:09:c9:ca:b4:b9:29:2a:01:a2:c5:86:72:47:cd:
         f6:79:a9:3d:4a:9b:89:8f:0d:1d:31:41:6b:bf:c4:bc:14:5e:
         d9:56:81:7f:ba:77:39:4b:1d:26:a1:62:1b:3f:c7:1d:5b:09:
         42:a1:92:1d:54:94:99:33:5a:0c:12:37:89:3c:b5:d0:31:07:
         5d:3a:f6:3e:21:94:5f:b1:31:1a:b1:e9:86:4a:69:91:e3:18:
         66:cc:fb:69:54:39:a6:ad:b3:80:a8:cc:b9:2b:dc:96:40:3d:
         bc:6c:d6:ad:32:1c:15:9c:a1:e3:3a:80:d2:3e:08:b6:d7:f1:
         87:c3:d1:49:c3:6f:40:b2:28:80:66:96:0d:4f:ea:b7:bd:66:
         51:18:9c:41:8b:65:27:c0:e0:8f:89:1f:f7:ba:11:41:c8:2f:
         49:67:1a:a9:63:48:c5:a2:3c:3a:a4:c7:82:15:2a:e3:ee:17:
         9e:36:88:ea:cc:cd:60:8b:f7:d7:11:2a:40:07:a2:51:3e:3f:
         8a:6e:9f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:54 2025 by rpki-client