Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          ZoBh2Akx0tpKpZTKSzmnnjpSJLmErt9Z3hTDK7Vz6P0=
Subject key identifier:   56:EB:8B:63:42:2A:52:EE:C5:AA:97:F7:EE:97:50:3C:E7:4F:E0:42
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0D6F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0D6C
Signing time:             Mon 20 Oct 2025 01:03:26 +0000
Manifest this update:     Mon 20 Oct 2025 01:03:25 +0000
Manifest next update:     Wed 22 Oct 2025 01:03:25 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: qLTaNzT1MZL9k+ZB6T+tykxbjkhiSfbh/6J1V4w1s2c=)
                          2: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
                          3: B72B3B7459DA11EC8F6187BD5A40D577.roa (hash: lX5w/V9IxiCR5OIdQ46QZvuvbFy5St8N0ELixEctQHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3439 (0xd6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Oct 20 01:03:25 2025 GMT
            Not After : Oct 22 01:03:25 2025 GMT
        Subject: CN=68f58a5e-6085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:bd:b0:9f:0f:02:9c:c2:24:c5:81:1c:9c:
                    87:79:9b:06:68:3b:2d:a9:98:5e:9d:0b:61:61:93:
                    1c:5f:ec:c7:57:41:68:c4:ae:b3:55:31:8f:e2:53:
                    be:32:33:11:7b:09:b3:9c:bb:e6:dd:71:e8:bb:bc:
                    c3:7e:ec:60:d5:58:15:fd:da:23:c5:8c:50:14:85:
                    4b:5c:e9:db:6c:c8:03:64:cb:2e:09:af:ea:76:43:
                    24:42:c1:0d:a0:07:1a:a0:54:d5:91:b5:e8:e9:c5:
                    ab:94:00:ab:f3:14:bf:0e:17:f5:d9:1e:1d:19:5d:
                    ea:3f:0d:74:58:cb:e8:79:a2:71:1f:bd:14:77:a2:
                    c2:8c:4f:03:97:2d:e1:73:15:14:24:90:bf:bd:8f:
                    ed:dc:af:83:e4:19:a8:14:6e:83:b0:82:13:00:de:
                    3f:63:84:b0:77:68:bd:1c:bd:d5:0e:5f:3d:f0:2f:
                    9a:59:88:25:cf:4b:68:49:68:dd:a2:f0:60:8c:3e:
                    de:8d:c7:a4:19:52:75:45:51:2f:6f:8b:9c:ba:c8:
                    ac:24:1f:df:a2:9c:4f:16:38:9a:3d:4b:a4:ab:47:
                    c8:28:d5:91:b7:f5:b1:ab:b4:07:80:5c:a0:a4:94:
                    1f:00:ff:03:35:9b:e0:f3:a6:be:f0:ab:62:95:cf:
                    fa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EB:8B:63:42:2A:52:EE:C5:AA:97:F7:EE:97:50:3C:E7:4F:E0:42
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b3:b1:96:09:f6:a9:0c:37:40:26:df:ab:bc:5e:94:fd:6e:
         a5:37:a8:2d:81:12:47:02:25:83:70:c5:95:56:28:40:ae:25:
         e8:ee:fa:51:41:b7:c5:1e:3d:21:36:f8:44:b3:78:27:fc:49:
         11:9b:5e:b7:81:1f:db:2f:41:6d:63:75:25:e0:60:02:42:50:
         3f:74:45:1b:c6:06:af:3e:d8:27:56:86:72:ef:70:9d:69:d4:
         46:e1:3c:f9:e9:a1:c7:f3:be:9f:38:d0:fa:d6:5f:0f:41:5e:
         f1:e4:b2:14:85:96:e4:c8:3c:b8:bc:70:0d:cc:f5:c6:07:96:
         c0:79:86:cd:66:2e:e6:0e:b0:f5:89:2c:dc:82:89:80:9e:22:
         03:1a:d4:46:14:ad:7e:6f:b3:8c:98:57:e6:a7:43:54:75:e5:
         3e:db:ab:8a:8c:21:e1:9c:df:9d:11:10:88:80:a4:d5:f2:35:
         61:42:6c:e0:58:29:96:ae:49:ff:b6:91:ef:07:4d:ce:9f:ac:
         5b:c3:6f:80:0f:f8:d5:d0:6b:84:38:b1:b4:cd:19:07:89:fc:
         9e:4c:54:48:d7:82:84:ca:c9:25:21:7e:f6:5f:33:d4:b6:84:
         40:49:c0:77:69:5c:d9:ce:0b:96:e4:db:e0:5a:56:91:58:2a:
         8f:cf:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:00 2025 by rpki-client