Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
File:                     oTgA5gK0z7bek2kV92nQGZHNe-Q.mft (raw, json)
Hash identifier:          dD7sJvNwfeD2Bk/DUbAEAiBEMIkHuDuHA/60yF8pUd0=
Subject key identifier:   10:0A:50:5D:F3:5A:CE:CE:6F:38:AD:BD:5F:5F:2E:3A:C3:48:41:62
Authority key identifier: A1:38:00:E6:02:B4:CF:B6:DE:93:69:15:F7:69:D0:19:91:CD:7B:E4
Certificate issuer:       /CN=F36700DBAR/serialNumber=A13800E602B4CFB6DE936915F769D01991CD7BE4
Certificate serial:       062C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
Manifest number:          062B
Signing time:             Mon 20 Oct 2025 02:23:06 +0000
Manifest this update:     Mon 20 Oct 2025 02:23:05 +0000
Manifest next update:     Wed 22 Oct 2025 02:23:05 +0000
Files and hashes:         1: oTgA5gK0z7bek2kV92nQGZHNe-Q.crl (hash: UXrWle3IVwiiNmIckXcSMJSMPD2nddnGHt4/HOqR0Rs=)
                          2: 31507B3CF50211EBB42A2B05D8A014CE.roa (hash: dfbIWGum/Ucedfg1WNkiFE0ZtwrT4EWBCHH1tmgOCzc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
                          rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36700DBAR, serialNumber=A13800E602B4CFB6DE936915F769D01991CD7BE4
        Validity
            Not Before: Oct 20 02:23:05 2025 GMT
            Not After : Oct 22 02:23:05 2025 GMT
        Subject: CN=68f59d09-5312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:c1:92:62:34:66:06:f7:9a:d9:6a:ac:0e:
                    ec:70:8c:de:40:bb:fd:fb:bb:ec:38:28:84:94:ae:
                    e9:ba:52:cc:ff:52:d8:be:43:93:14:0a:87:20:b5:
                    ea:52:46:09:22:46:80:ce:c3:92:7f:ba:87:f8:5e:
                    46:93:4f:d9:6d:7b:d5:19:94:1a:a2:0c:94:d0:3f:
                    8a:03:87:f2:6f:1f:fb:f3:e8:45:1b:18:89:f9:f2:
                    d0:1b:36:40:eb:4c:6a:5d:45:d1:cd:c0:ab:12:3d:
                    06:0a:6d:b6:7b:1f:67:c5:d8:0d:d1:51:e9:6d:eb:
                    5d:a7:3f:62:e2:cd:98:7e:53:1c:64:e9:fb:7a:6c:
                    db:36:ae:ae:1d:f9:c4:a5:d5:bb:e6:63:19:8e:cb:
                    5e:e7:2a:ae:e1:9c:39:c9:30:75:c5:52:a6:f2:cc:
                    a9:69:bd:af:fe:88:17:84:51:37:90:fe:5f:82:b4:
                    d8:c7:9a:c2:8d:84:05:4d:1f:c5:b1:c0:d5:47:1b:
                    44:ee:e7:c7:b4:c0:99:e5:54:81:38:d8:96:9e:82:
                    8d:bf:74:27:94:8a:db:5c:92:87:a8:d9:d8:2f:08:
                    0b:67:77:eb:4f:8a:5d:a5:56:c3:ab:03:60:85:ce:
                    05:37:75:a0:ef:80:47:25:3a:02:d1:42:74:3d:55:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0A:50:5D:F3:5A:CE:CE:6F:38:AD:BD:5F:5F:2E:3A:C3:48:41:62
            X509v3 Authority Key Identifier:
                keyid:A1:38:00:E6:02:B4:CF:B6:DE:93:69:15:F7:69:D0:19:91:CD:7B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:55:e1:11:bd:23:f3:b5:32:b2:2a:a8:f1:f9:34:5e:b5:25:
         8a:ea:b2:23:0e:62:51:62:48:42:d3:3b:7d:57:55:33:24:bf:
         6f:21:c1:90:05:e8:d5:83:72:35:f0:2a:6d:91:53:1d:2b:ce:
         87:92:96:f6:3f:71:fc:25:f6:18:ac:5f:2f:29:24:a8:9c:dc:
         6a:94:a1:83:95:50:77:b4:bd:6c:2a:bd:c0:eb:c4:4a:67:39:
         38:67:ed:0d:54:6e:d0:45:f9:28:9a:51:1e:a1:2b:92:53:0f:
         55:fe:97:24:d4:02:97:d6:2b:52:70:09:21:f1:68:ba:e2:aa:
         40:c3:c4:6a:90:1c:77:06:42:a3:f9:fb:fb:36:09:f0:85:22:
         0e:21:8b:b5:10:9b:48:2e:f8:ae:14:99:0e:5a:b6:12:22:87:
         2e:be:e3:eb:cd:23:96:14:69:b7:cf:1b:27:5c:79:24:9d:93:
         f0:05:2e:49:7d:91:6a:0d:1f:be:17:32:41:42:a4:97:c5:00:
         46:3e:d7:5e:4e:e9:9d:4c:bb:20:4f:6a:db:80:e8:77:ba:91:
         ca:98:3b:78:37:45:d8:38:3b:3f:b3:7b:7b:72:97:3a:0a:ee:
         5c:32:e6:f1:03:97:20:77:3b:2d:f6:b0:5e:d0:e6:2e:0e:50:
         96:21:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:01 2025 by rpki-client