Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          M8mLmnmuLGeD9UD2gfXnDYNbFW4ZpoSiQlJntVZLZ7w=
Subject key identifier:   02:49:BB:61:EC:AB:3E:C7:E1:26:E9:00:50:57:C8:D6:64:C6:3B:FB
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       0582
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          057D
Signing time:             Sun 19 Oct 2025 02:38:49 +0000
Manifest this update:     Sun 19 Oct 2025 02:38:48 +0000
Manifest next update:     Tue 21 Oct 2025 02:38:48 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: yCCBvh69ni9v0oDXHjLqY/LMXSAlEQ0aIAZnLpwYWmw=)
                          2: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          3: 01CC6C947E8D11EC89A79C885A40D577.roa (hash: qd/8XDFff1CiSxAQk1vmUsyny6ywpT4UycAJmKGe26U=)
                          4: D88002927E8C11EC95A915885A40D577.roa (hash: zp+bksguNWi/6Gwbfy/elTDlK43kW6UD+PYcX23ze0Y=)
                          5: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
                          6: 675DA8B27E8211ECAB19A1E75A40D577.roa (hash: TlKHAqm5F0asDSkR7ApdBCSJn77368RAQ3PQ3KzHit4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1410 (0x582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Oct 19 02:38:48 2025 GMT
            Not After : Oct 21 02:38:48 2025 GMT
        Subject: CN=68f44f39-44e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:f2:e2:26:6e:2e:cd:d3:47:89:ab:9f:f5:
                    e2:64:a1:76:57:d7:60:de:b5:95:49:ee:25:a9:09:
                    8b:b0:cf:27:6c:1b:35:dc:79:91:de:19:45:2c:cd:
                    c0:e9:ca:86:41:5b:0c:74:02:4a:cf:01:0c:9f:14:
                    02:56:df:db:6b:1b:d8:f1:cf:32:35:08:5c:30:8d:
                    04:c6:70:5d:37:63:f7:23:f3:3b:ba:24:77:b0:48:
                    94:5a:2e:29:f8:e3:5c:7b:52:ff:e8:cf:99:75:58:
                    43:65:7d:ba:33:0e:46:be:84:1d:68:a9:ac:57:b0:
                    a6:43:7b:63:60:b3:75:64:46:b5:8e:90:e0:85:8d:
                    96:12:15:1f:71:a5:d9:aa:55:a1:11:ad:93:7a:e3:
                    1a:75:c3:46:85:fb:07:db:7c:8b:5a:7c:5a:2c:9e:
                    ce:d1:3a:9c:0a:cb:02:ad:7e:56:53:69:58:be:ca:
                    24:1a:cc:a4:98:9e:59:fd:68:62:5d:c3:b0:86:c1:
                    19:1a:68:b9:f4:7b:22:e8:78:9f:a9:f8:e5:9e:82:
                    36:92:eb:3c:97:12:90:0e:e5:d9:ce:0d:5b:fd:e6:
                    31:ea:bd:6b:4f:19:7b:a7:37:ca:35:9d:f9:78:e2:
                    75:42:b9:22:39:bf:d1:56:3a:d7:ea:38:80:63:2b:
                    82:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:49:BB:61:EC:AB:3E:C7:E1:26:E9:00:50:57:C8:D6:64:C6:3B:FB
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:02:15:ea:81:c4:84:60:ba:c2:7d:d4:68:89:88:5f:ff:70:
         7b:1d:ed:97:f4:b2:21:e1:f4:e9:af:5b:17:05:01:98:d6:ee:
         28:06:32:ef:47:28:a6:63:f1:0d:08:03:a3:83:f0:41:20:77:
         3b:ab:86:16:81:21:43:9a:05:24:54:9f:41:9c:0c:21:e0:ae:
         62:90:64:b0:dc:c8:b2:dd:91:99:ac:fd:d7:b9:14:08:e7:6c:
         9f:13:32:b7:fc:33:5d:60:93:71:5c:ed:d0:18:61:92:dd:63:
         03:69:e0:d9:a8:2a:35:23:e0:37:ed:7b:52:44:3f:14:7e:2f:
         98:83:4e:c7:e6:28:6a:49:9b:b0:4e:ce:85:55:01:56:50:59:
         e1:c1:38:48:8d:fc:0d:df:b5:55:2e:8b:39:9c:a6:1c:6a:e2:
         93:a6:b6:96:25:01:0b:71:d2:6a:e7:0a:92:8e:53:c7:cf:72:
         97:14:8f:48:5b:9a:c3:47:41:74:ed:f1:dd:0d:8e:ab:49:94:
         6a:54:d8:c8:7e:80:1c:b7:fd:5e:06:24:73:b7:3f:44:76:87:
         90:32:b1:e1:3a:91:f7:55:20:88:6e:4d:dc:d7:e8:8f:14:fd:
         3a:45:da:0e:9f:6d:82:23:99:16:82:39:ac:c9:d9:9d:3a:83:
         b0:2f:61:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:16:21 2025 by rpki-client