Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          jXACq20Mae0vfo2TqQIeuY5aVRkqM4IGjZPLXHaeInA=
Subject key identifier:   63:82:68:D5:85:BD:9F:08:34:9D:CD:8F:C7:3C:60:32:BA:DF:6A:1F
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       04BE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          04BC
Signing time:             Sun 19 Oct 2025 02:56:14 +0000
Manifest this update:     Sun 19 Oct 2025 02:56:14 +0000
Manifest next update:     Tue 21 Oct 2025 02:56:14 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: Vl+UZC2pCRSbvYtUX+0mvXdJzfST6LK9iBK2tNEfzdE=)
                          2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                          rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 02:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
        Validity
            Not Before: Oct 19 02:56:14 2025 GMT
            Not After : Oct 21 02:56:14 2025 GMT
        Subject: CN=68f4534e-72e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:f2:41:d7:80:72:e4:21:a4:e6:99:99:02:
                    0b:a5:de:22:05:7d:6c:74:15:c8:22:be:36:69:79:
                    7e:46:3b:66:fc:35:e2:69:af:47:5a:dc:14:23:9f:
                    60:ba:31:f7:8f:7c:41:cb:fc:af:06:95:1f:eb:59:
                    29:c8:0b:96:35:71:f4:c6:1f:ed:84:47:83:e9:34:
                    f0:75:37:e0:a3:a9:2b:1c:14:ec:8c:e0:ee:f1:b8:
                    d8:34:4e:3a:09:84:a2:2d:d8:5d:52:50:36:1f:15:
                    3d:7e:0a:2a:d4:b5:cd:f9:52:89:bc:b8:9c:cf:f4:
                    66:10:72:f2:f9:4f:5f:ad:12:ab:09:82:de:87:7d:
                    3b:95:62:3e:3b:c9:5a:2f:a9:d5:f9:d9:ab:04:31:
                    5b:10:62:fc:25:b6:93:a5:c5:bc:65:06:7f:2f:70:
                    d1:cd:40:6c:b0:28:f3:dc:61:fe:f0:db:c9:ae:7e:
                    36:a6:2a:8b:f5:90:83:37:17:b6:da:2b:8f:fa:53:
                    21:6a:b0:80:10:07:83:84:48:1d:7b:d5:7f:1e:3e:
                    98:33:51:0f:f5:f4:31:a0:7d:6b:b5:36:a7:9b:e5:
                    66:5f:93:53:2e:0c:8c:81:58:ea:02:55:33:6c:7d:
                    21:20:33:1b:8c:a2:d6:d9:73:f5:e2:08:c3:fa:17:
                    25:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:82:68:D5:85:BD:9F:08:34:9D:CD:8F:C7:3C:60:32:BA:DF:6A:1F
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:68:09:41:6c:6e:6a:e4:53:45:f0:f1:51:4a:db:4c:93:61:
         5c:46:45:72:75:7a:1e:9a:bb:a2:ce:69:a8:70:47:be:49:8d:
         bc:69:71:46:27:1c:4e:e6:01:c9:ae:6e:da:45:f2:40:46:05:
         ce:2f:f0:a1:42:43:3b:a9:44:bf:1e:a0:be:02:d5:6c:7b:d6:
         26:c7:b0:07:c6:2f:28:5a:6c:c2:fa:ad:fa:a0:b8:e2:f4:f1:
         05:98:87:59:3d:12:d9:fa:f7:9c:0a:35:dd:11:a2:af:00:8f:
         5b:0f:fb:1e:77:5c:ca:be:14:8c:ba:9e:c1:86:84:67:98:3d:
         37:28:e3:7e:b8:f6:1d:69:7e:67:ea:a1:08:3c:b8:de:bb:40:
         c9:f6:61:d4:15:1a:bd:74:ad:54:3e:03:99:1e:9c:c0:95:77:
         cd:13:71:e3:22:49:71:50:25:6d:39:db:31:40:4a:ea:20:4c:
         b7:b4:65:ee:1b:6a:96:e9:fa:6c:f5:d6:e2:11:e6:33:39:d8:
         f3:eb:fd:a2:5c:74:3b:df:22:02:8f:f3:01:65:77:8c:62:02:
         2f:51:30:85:b6:9e:69:98:13:19:9b:84:11:bc:37:23:3c:04:
         45:76:86:4f:c7:05:e9:14:bc:57:08:d1:a4:b8:3f:11:8f:bf:
         b1:47:33:63
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzFEQkRBUjExMC8GA1UEBRMoQzgzREM2OENFMkJFNDMyNTNBQUE1NTFBQUUyMkY5
NUExRjFEQUQyQjAeFw0yNTEwMTkwMjU2MTRaFw0yNTEwMjEwMjU2MTRaMBgxFjAU
BgNVBAMTDTY4ZjQ1MzRlLTcyZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCg7/JB14By5CGk5pmZAgul3iIFfWx0FcgivjZpeX5GO2b8NeJpr0da3BQj
n2C6MfePfEHL/K8GlR/rWSnIC5Y1cfTGH+2ER4PpNPB1N+CjqSscFOyM4O7xuNg0
TjoJhKIt2F1SUDYfFT1+CirUtc35Uom8uJzP9GYQcvL5T1+tEqsJgt6HfTuVYj47
yVovqdX52asEMVsQYvwltpOlxbxlBn8vcNHNQGywKPPcYf7w28mufjamKov1kIM3
F7baK4/6UyFqsIAQB4OESB171X8ePpgzUQ/19DGgfWu1Nqeb5WZfk1MuDIyBWOoC
VTNsfSEgMxuMotbZc/XiCMP6FyWnAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUY4Jo
1YW9nwg0nc2PxzxgMrrfah8wHwYDVR0jBBgwFoAUyD3GjOK+QyU6qlUariL5Wh8d
rSswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcxREJELzNFRTEwMkRFMTI0NDExRUQ5RjYyNjhCNEYxMjIyNDY4L3lEM0dq
T0stUXlVNnFsVWFyaUw1V2g4ZHJTcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3lEM0dqT0stUXlVNnFsVWFyaUw1V2g4ZHJTcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzFEQkQvM0VFMTAyREUxMjQ0MTFFRDlGNjI2OEI0RjEyMjI0
NjgveUQzR2pPSy1ReVU2cWxVYXJpTDVXaDhkclNzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZaAlBbG5q5FNF8PFRSttMk2FcRkVydXoe
mruizmmocEe+SY28aXFGJxxO5gHJrm7aRfJARgXOL/ChQkM7qUS/HqC+AtVse9Ym
x7AHxi8oWmzC+q36oLji9PEFmIdZPRLZ+vecCjXdEaKvAI9bD/sed1zKvhSMup7B
hoRnmD03KON+uPYdaX5n6qEIPLjeu0DJ9mHUFRq9dK1UPgOZHpzAlXfNE3HjIklx
UCVtOdsxQErqIEy3tGXuG2qW6fps9dbiEeYzOdjz6/2iXHQ73yICj/MBZXeMYgIv
UTCFtp5pmBMZm4QRvDcjPARFdoZPxwXpFLxXCNGkuD8Rj7+xRzNj
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:21 2025 by rpki-client