Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
File:                     MzQdyhYYc65_OkSzbhzbObXAoJo.mft (raw, json)
Hash identifier:          iJng4MO5Q1sTLtOF962I4dHuc87GVCOEjLyWR1tAA3c=
Subject key identifier:   41:FB:31:6F:FE:75:EB:F1:19:1C:41:5B:0B:AA:80:8C:66:D0:8D:56
Authority key identifier: 33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Certificate issuer:       /CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Certificate serial:       040D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
Manifest number:          0409
Signing time:             Mon 20 Oct 2025 03:17:33 +0000
Manifest this update:     Mon 20 Oct 2025 03:17:32 +0000
Manifest next update:     Wed 22 Oct 2025 03:17:32 +0000
Files and hashes:         1: MzQdyhYYc65_OkSzbhzbObXAoJo.crl (hash: sFlJMte0UTrUfPHjyBjfyJ8NHxKsuYBt6W4GkVSaNtU=)
                          2: C8482A8890A511F09A249AC2DAE4EC9C.roa (hash: YU+s4UvMmcAg4MELqrvjtd9+g7rExQPJik+26Y7x314=)
                          3: 7AA044D690A611F0986ABFC6DAE4EC9C.roa (hash: /le7lzuRW1i4hL+MhKBxtXg6Ksje+Y1b6XKnVcdIPSQ=)
                          4: 407424D090A611F0A752BAC4DAE4EC9C.roa (hash: TH3/4mixLvf8p6rQJ/buDVDbyHxIQcv4IonGYryiTFc=)
                          5: A58DD09690A611F0BAABE5C8DAE4EC9C.roa (hash: WRkcJOJs2/U9E6K9MGQG8K0I2p0FY0LDJQ9GxZH1JLE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                          rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1037 (0x40d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662123AR, serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
        Validity
            Not Before: Oct 20 03:17:32 2025 GMT
            Not After : Oct 22 03:17:32 2025 GMT
        Subject: CN=68f5a9cd-38cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:fb:36:37:ed:af:ae:f0:8d:44:03:7a:8b:
                    25:0d:a4:29:5d:a5:ce:44:4d:4a:81:a2:0f:8a:a1:
                    e0:a4:40:53:b9:32:e2:50:94:9f:bf:92:1b:4b:05:
                    9d:22:f8:5a:86:cb:5c:9a:82:f8:76:40:4e:40:45:
                    32:8a:8d:31:1a:60:d8:43:27:e6:99:01:db:d1:1c:
                    91:8b:d0:22:f8:51:3c:81:ec:e5:a0:6f:86:d6:f8:
                    31:7d:bd:12:32:8d:bc:fe:f9:0e:05:ac:fe:4e:99:
                    5c:db:69:2f:4c:18:5b:a4:3b:61:f6:87:08:cc:aa:
                    f8:f4:8a:78:01:22:b2:7a:d3:99:19:74:0e:6f:c0:
                    04:c7:d9:8f:a0:ed:f5:31:33:6e:33:54:73:6f:0a:
                    41:6e:5a:08:62:2d:5a:8e:bf:ea:bc:c4:49:55:1d:
                    77:40:85:50:bd:1b:8c:19:1c:14:65:d8:60:c2:00:
                    4e:47:97:0b:90:3a:7e:e6:43:36:75:ac:30:27:2f:
                    68:2d:66:5c:bc:c4:ba:6a:04:ef:0b:56:3d:39:8e:
                    e1:4f:25:7e:ba:2d:97:eb:d4:6f:72:69:98:cf:8e:
                    80:38:bd:aa:96:52:a0:7b:72:f3:36:79:9d:5f:44:
                    9f:30:70:dd:96:6f:e3:b5:c2:74:11:cf:68:03:d6:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FB:31:6F:FE:75:EB:F1:19:1C:41:5B:0B:AA:80:8C:66:D0:8D:56
            X509v3 Authority Key Identifier:
                keyid:33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:17:af:3a:af:da:7a:b8:fd:dc:12:da:61:6f:2f:92:6a:cd:
         aa:5e:14:05:93:63:ad:21:6a:ae:53:73:04:65:00:47:2f:cd:
         6b:0f:18:65:5e:54:55:ff:c5:d8:64:25:37:55:1c:b2:a7:1d:
         f9:32:f6:33:eb:38:71:1b:ee:a3:8e:f5:96:63:a3:cb:8c:4f:
         38:e1:8e:23:fe:53:1e:6c:f4:4c:21:05:72:72:b8:e0:63:b0:
         30:00:45:83:9a:2a:ba:21:a7:61:47:30:4f:b3:6d:e2:83:6f:
         76:2e:e9:bc:3d:48:7c:75:90:0d:6b:dd:60:0d:93:e2:14:31:
         40:78:d1:f6:45:9a:4a:82:fa:b7:c8:89:40:0f:0a:0c:6c:0b:
         29:ed:75:25:99:9b:93:5d:95:58:2d:3f:a0:cd:7d:16:3b:89:
         96:f5:f2:c1:fa:14:10:77:2c:0a:a8:02:87:fd:3c:e7:d1:1c:
         10:11:f1:c4:ac:aa:cb:6c:a1:1a:c8:61:ca:23:80:32:36:40:
         8e:35:3c:1d:ae:5b:ee:46:e8:63:9c:2f:16:2c:6a:1b:b0:25:
         2f:94:56:7d:ca:51:90:32:da:44:da:8f:c8:51:61:bb:17:5b:
         b3:44:13:08:50:0b:ae:f9:ae:2e:ae:92:0f:02:74:9f:50:c7:
         e9:3d:95:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:47:06 2025 by rpki-client