Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File:                     3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier:          Dc0Wrmoqs2eHxptIf0itJ0+ZNv1ajoqULRElUixz6M0=
Subject key identifier:   3A:99:98:7B:87:62:B0:52:E7:17:4F:67:A5:79:60:80:A9:44:52:27
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer:       /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial:       0337
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number:          0336
Signing time:             Sun 19 Oct 2025 03:42:39 +0000
Manifest this update:     Sun 19 Oct 2025 03:42:38 +0000
Manifest next update:     Tue 21 Oct 2025 03:42:38 +0000
Files and hashes:         1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: WwGr5LgY34Dluwj8XiOLuJEWQtnlPQMmCRSgbMG7TbM=)
                          2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                          rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 03:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
        Validity
            Not Before: Oct 19 03:42:38 2025 GMT
            Not After : Oct 21 03:42:38 2025 GMT
        Subject: CN=68f45e2f-7ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:17:eb:b5:90:c0:c1:19:cb:df:f0:32:e3:
                    6f:46:e2:5c:40:a1:8f:9b:83:c5:fa:61:9b:f3:f7:
                    87:5c:8f:2c:44:06:9c:e3:64:e9:54:ef:25:23:5d:
                    b4:3b:8b:5b:2a:d1:3a:f0:e5:e7:8d:41:d9:78:1e:
                    8a:13:f2:87:01:df:f4:4f:1a:69:25:18:7d:c2:fc:
                    bd:f9:54:5f:bd:39:fe:40:3e:45:c8:25:2f:d1:44:
                    52:ed:17:b6:da:67:ea:96:e5:f9:7f:c7:ef:87:fd:
                    20:38:e7:a7:01:f1:c3:07:1c:aa:77:e0:2f:44:87:
                    c0:20:3c:89:76:e9:de:c8:e2:e8:4c:d1:e9:b6:1c:
                    73:b9:df:92:d0:ef:e5:43:12:7d:8c:68:e1:3b:63:
                    7c:a6:7a:2e:20:99:06:09:db:5a:e3:02:01:e5:6d:
                    65:d5:a8:b2:6b:6c:f3:28:ad:ec:17:9d:fe:4e:63:
                    d9:b7:f3:a7:8e:4a:7e:6b:f8:d1:c8:c2:42:af:05:
                    68:67:d3:36:40:27:d9:ff:21:59:a3:fa:25:10:f5:
                    1b:31:2c:f0:97:93:14:cf:e3:90:e2:50:64:77:74:
                    f8:e1:b2:45:b5:42:7c:60:70:8e:fb:26:ef:db:79:
                    3c:5d:a5:58:e7:ba:71:aa:2e:5a:f8:4d:08:36:50:
                    14:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:99:98:7B:87:62:B0:52:E7:17:4F:67:A5:79:60:80:A9:44:52:27
            X509v3 Authority Key Identifier:
                keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:54:77:ac:f9:a3:b7:a2:1c:58:f2:0c:a9:08:62:8e:9f:2d:
         e8:6f:52:f2:b0:b3:d9:72:aa:e7:08:4d:7b:29:9f:c3:da:ff:
         a9:2d:28:f6:5a:d4:f0:75:2e:26:af:08:83:68:2e:42:f6:65:
         9f:b7:ef:23:2d:71:26:1f:10:92:8a:85:01:99:d7:54:be:88:
         a3:6c:79:2e:f3:3f:32:09:15:0f:e1:8f:fa:e6:96:54:85:86:
         07:c0:5a:b0:b0:bb:08:0b:d4:74:2c:d6:da:be:ff:2a:a8:c5:
         4a:7f:26:a1:a7:b0:2d:0d:60:44:88:85:77:62:e5:20:1f:df:
         0a:d9:53:54:4a:cb:47:9d:e8:85:c2:3c:86:a6:13:fb:11:eb:
         e6:46:70:03:a3:1f:79:87:cd:b1:ed:3d:b9:44:bb:6c:4b:27:
         85:4f:de:a0:8d:27:6e:07:b2:a3:60:be:02:b1:8e:12:91:08:
         55:db:80:7b:97:a3:03:75:ee:d5:c5:0d:c5:4a:6e:e7:ba:c4:
         4d:5e:91:fd:8f:c2:3d:0f:d5:4a:8c:7f:5c:28:0e:8a:8f:95:
         18:ab:90:3d:34:9e:f4:c3:4b:56:52:f3:00:02:90:c1:c2:b5:
         e2:57:6d:62:21:21:ac:5f:3c:e7:b9:26:55:55:fa:44:7f:52:
         48:fc:8a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:45:41 2025 by rpki-client