Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
File:                     cIjstS9EHLVBKRrSDIupB7vUQFI.mft (raw, json)
Hash identifier:          3M4RJdZfqlJfELEs6EuAwhkdI/rmFOYG5DF5RY7nwOM=
Subject key identifier:   18:84:8F:78:A9:4F:E4:A3:2D:B2:34:E5:0E:3D:B5:00:55:B3:9E:04
Authority key identifier: 70:88:EC:B5:2F:44:1C:B5:41:29:1A:D2:0C:8B:A9:07:BB:D4:40:52
Certificate issuer:       /CN=F367FECCAR/serialNumber=7088ECB52F441CB541291AD20C8BA907BBD44052
Certificate serial:       063C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
Manifest number:          063A
Signing time:             Mon 20 Oct 2025 02:19:46 +0000
Manifest this update:     Mon 20 Oct 2025 02:19:45 +0000
Manifest next update:     Wed 22 Oct 2025 02:19:45 +0000
Files and hashes:         1: cIjstS9EHLVBKRrSDIupB7vUQFI.crl (hash: TvS3WemTzIJdvXXgtCysArX77uIB+m8+8ah3eWL+VDw=)
                          2: EBAB53E0EA3E11EB96CC7D3AD8A014CE.roa (hash: 8ccVEiAliBiH1WhFkoVeVW9p7ZDUf8PeWahrlb8I6+s=)
                          3: B9EDE330EA3F11EB9BDDAB3BD8A014CE.roa (hash: UpWRiY04Rhit9Uj9Y+xZz3ZrxHoCtYC3IGMvoMbSZgE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
                          rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FECCAR, serialNumber=7088ECB52F441CB541291AD20C8BA907BBD44052
        Validity
            Not Before: Oct 20 02:19:45 2025 GMT
            Not After : Oct 22 02:19:45 2025 GMT
        Subject: CN=68f59c41-4ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:60:a6:8e:ea:54:5c:b8:e6:ef:2b:35:71:
                    11:87:a5:20:cb:13:5b:ca:70:6c:97:70:9c:da:b1:
                    eb:8f:31:69:23:b8:d1:76:47:d5:9a:ca:93:71:55:
                    1d:42:3b:71:7e:64:97:c5:20:4b:14:f5:32:27:5b:
                    b8:f0:39:73:91:aa:25:77:61:53:3d:51:3e:49:bf:
                    77:58:eb:09:4c:57:af:ee:e8:3b:d3:c5:95:ed:51:
                    c4:e7:79:75:9a:38:28:91:4c:34:bf:96:f6:7e:45:
                    61:ad:e2:a3:ba:5e:a1:a1:3c:14:f1:e9:c0:9f:fe:
                    0f:4f:78:06:f5:b4:8e:b6:17:e2:70:2e:c4:65:4d:
                    ce:71:a7:ad:d1:7a:86:61:69:af:95:c9:f8:0d:e2:
                    55:4d:4e:1e:3a:d1:71:f2:57:99:39:34:b6:9f:dc:
                    0a:3a:63:46:1a:12:66:d9:e5:be:3a:25:5c:a4:74:
                    bd:e9:ce:2d:30:01:a2:7c:90:79:64:ce:ef:db:00:
                    f2:7f:48:6a:a9:b8:65:d1:5a:33:31:0f:a8:70:00:
                    fc:ab:24:36:db:6b:fd:4f:6d:53:49:29:09:bc:5f:
                    92:13:b8:03:fe:a0:26:35:07:61:60:0f:2e:40:c8:
                    2f:d3:b8:71:dc:56:3e:e9:56:b9:43:f5:8c:42:de:
                    9f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:84:8F:78:A9:4F:E4:A3:2D:B2:34:E5:0E:3D:B5:00:55:B3:9E:04
            X509v3 Authority Key Identifier:
                keyid:70:88:EC:B5:2F:44:1C:B5:41:29:1A:D2:0C:8B:A9:07:BB:D4:40:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:12:3f:c3:f1:ca:44:80:b1:6a:ea:db:47:a1:f2:9e:1f:13:
         4b:36:9c:de:96:a2:49:c7:b0:f9:8c:89:51:49:a4:1d:11:98:
         99:15:14:af:a1:d6:3e:fb:ce:00:0b:3f:71:df:dc:19:1e:10:
         98:67:8d:16:02:5f:15:76:68:72:9a:fc:f0:e2:d7:80:96:46:
         00:d4:d7:06:cc:00:5d:f1:08:0e:dc:db:e4:21:54:4a:a9:9c:
         fd:d0:b5:9a:87:cf:46:5b:f8:65:0d:8d:7a:38:e5:61:21:6e:
         cd:39:98:f8:46:ea:ea:3e:d1:4e:38:c8:c9:73:7e:0b:4f:c8:
         3a:a3:c9:e2:f4:c0:91:53:1c:40:e9:bd:b5:06:13:0c:d0:f9:
         a6:6c:fd:87:8e:d6:70:bb:0f:0a:ed:4d:3b:cf:c5:57:d9:46:
         45:9c:a1:d9:d4:62:f0:f1:ef:ad:7c:eb:c4:79:13:da:07:67:
         18:86:1a:52:d2:e7:8d:82:e4:6a:c3:62:0e:f9:2d:0c:e0:97:
         6b:a7:34:08:7f:6d:0c:65:d7:eb:43:10:7d:8b:b3:3f:eb:99:
         13:61:06:63:89:6b:66:8a:ef:03:30:aa:60:4d:52:1f:db:11:
         96:f9:d2:0d:87:9d:4a:c8:86:52:c9:21:e4:a8:45:d1:5b:36:
         32:8b:78:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:42 2025 by rpki-client