Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
File:                     iyncQT61Ar1t3qMGRh4aehCExfY.mft (raw, json)
Hash identifier:          87uMrOz20wHPfDd1q56LhX8LReMakHsMZmY8c/HjjGc=
Subject key identifier:   F1:81:DB:E1:C0:2C:18:99:5C:28:0E:0F:77:48:D4:BE:A1:65:BC:E1
Authority key identifier: 8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
Certificate issuer:       /CN=F3696E5FAR/serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
Certificate serial:       04B7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
Manifest number:          04B5
Signing time:             Mon 20 Oct 2025 02:58:51 +0000
Manifest this update:     Mon 20 Oct 2025 02:58:50 +0000
Manifest next update:     Wed 22 Oct 2025 02:58:50 +0000
Files and hashes:         1: iyncQT61Ar1t3qMGRh4aehCExfY.crl (hash: XjPHDrZ9VVcuFFUbVJNYzzaWUHNj4JPWZ0kdD/cK7T0=)
                          2: 526F2A62732611EEA96ED8714AD9E6FC.roa (hash: Ukkb5AVQsO1Gjuu3k0PEd18RL/gRcbSRynh/B4Aa3tQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                          rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1207 (0x4b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAR, serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
        Validity
            Not Before: Oct 20 02:58:50 2025 GMT
            Not After : Oct 22 02:58:50 2025 GMT
        Subject: CN=68f5a56b-4040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a9:29:06:27:dd:fa:3c:fa:61:52:48:0c:ed:
                    59:ee:fc:e0:8b:1a:6b:a6:54:fa:79:20:20:f2:89:
                    77:e8:df:06:6a:31:81:22:6c:f1:2c:4c:c9:0b:86:
                    4f:09:9e:6e:43:6c:9b:c0:b3:f4:0a:81:72:c8:7d:
                    60:3f:81:60:8d:3d:df:fd:87:2e:8e:46:22:f4:89:
                    db:e5:b5:07:39:ac:71:c2:24:f9:0d:50:1a:92:fd:
                    f1:fb:f9:39:b6:d4:f3:4e:50:ea:0d:a6:7d:7d:0c:
                    ec:a9:cf:bf:e5:d7:7f:bf:ea:c5:d2:86:94:b9:c1:
                    66:d6:5e:b4:9d:22:6b:0a:b1:9a:f0:b7:5f:9f:57:
                    89:4b:2b:97:69:52:ad:10:f9:6b:70:70:ea:9f:58:
                    6c:3f:10:2e:d3:c6:f2:0a:43:32:fd:c1:f9:9e:75:
                    0f:87:99:9b:6f:2b:70:94:95:bb:38:01:f7:1d:8e:
                    9a:a6:5b:0c:2f:33:d0:7d:0d:e7:b1:8a:f2:3c:60:
                    33:52:8d:0a:a1:56:a6:dd:3e:64:89:b8:bc:29:83:
                    13:13:61:b0:2d:25:29:d7:e9:4b:e3:a6:0c:7a:39:
                    ed:c1:62:7a:49:60:f7:17:1f:cc:e7:9d:4f:12:2c:
                    e0:35:2e:c9:82:80:7a:2e:23:42:3e:72:51:1b:23:
                    84:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:81:DB:E1:C0:2C:18:99:5C:28:0E:0F:77:48:D4:BE:A1:65:BC:E1
            X509v3 Authority Key Identifier:
                keyid:8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:53:47:ee:f6:16:35:e6:6e:3c:55:41:35:d3:6c:1f:0f:d5:
         7e:d3:24:4d:e3:91:c3:2a:27:5e:b4:c5:ed:56:bc:12:1f:3a:
         60:57:49:b4:c2:fe:62:27:4a:c5:6f:57:fe:ba:e3:1d:f1:20:
         4f:32:2e:cf:3c:d9:cf:bd:09:86:93:34:c9:49:2f:3e:a4:7b:
         bf:0f:6a:05:31:a4:e8:82:a6:ad:70:78:1b:f3:5d:52:f5:29:
         35:a6:0c:e0:d6:c6:e9:00:b0:06:d4:fd:45:34:57:0a:29:7f:
         21:19:e5:2f:1d:bb:46:96:63:b9:8e:8d:10:7e:cb:eb:24:e0:
         56:5a:75:01:ab:b0:03:78:9b:32:20:a6:f9:3a:16:10:d9:dc:
         cc:16:4e:23:77:40:ea:4e:5e:aa:b1:3e:2e:88:6d:0e:96:13:
         11:9d:31:31:1d:ca:5d:99:28:ea:7e:50:41:b8:7d:b7:a1:4b:
         f1:4d:ad:dc:d0:49:27:10:ae:58:a7:3f:2b:58:b0:26:0f:0b:
         b0:d1:dc:d9:2d:00:34:dc:bd:c9:98:a8:c3:0e:0a:bc:eb:fb:
         6c:63:58:7a:d7:92:82:06:d3:51:81:f2:63:8e:b5:4a:d2:38:
         58:28:e0:c1:77:ec:0e:db:72:f2:71:c5:40:f2:99:03:94:50:
         f0:86:7f:67
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTZFNUZBUjExMC8GA1UEBRMoOEIyOURDNDEzRUI1MDJCRDZEREVBMzA2NDYxRTFB
N0ExMDg0QzVGNjAeFw0yNTEwMjAwMjU4NTBaFw0yNTEwMjIwMjU4NTBaMBgxFjAU
BgNVBAMTDTY4ZjVhNTZiLTQwNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYqSkGJ936PPphUkgM7Vnu/OCLGmumVPp5ICDyiXfo3wZqMYEibPEsTMkL
hk8Jnm5DbJvAs/QKgXLIfWA/gWCNPd/9hy6ORiL0idvltQc5rHHCJPkNUBqS/fH7
+Tm21PNOUOoNpn19DOypz7/l13+/6sXShpS5wWbWXrSdImsKsZrwt1+fV4lLK5dp
Uq0Q+WtwcOqfWGw/EC7TxvIKQzL9wfmedQ+HmZtvK3CUlbs4AfcdjpqmWwwvM9B9
DeexivI8YDNSjQqhVqbdPmSJuLwpgxMTYbAtJSnX6Uvjpgx6Oe3BYnpJYPcXH8zn
nU8SLOA1LsmCgHouI0I+clEbI4SpAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU8YHb
4cAsGJlcKA4Pd0jUvqFlvOEwHwYDVR0jBBgwFoAUiyncQT61Ar1t3qMGRh4aehCE
xfYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2RTVGLzUyRkU4OTdDMTg5NzExRUQ4MDU5QjlEMkYxMjIyNDY4L2l5bmNR
VDYxQXIxdDNxTUdSaDRhZWhDRXhmWS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2l5bmNRVDYxQXIxdDNxTUdSaDRhZWhDRXhmWS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTZFNUYvNTJGRTg5N0MxODk3MTFFRDgwNTlCOUQyRjEyMjI0
NjgvaXluY1FUNjFBcjF0M3FNR1JoNGFlaENFeGZZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApU0fu9hY15m48VUE102wfD9V+0yRN45HD
KidetMXtVrwSHzpgV0m0wv5iJ0rFb1f+uuMd8SBPMi7PPNnPvQmGkzTJSS8+pHu/
D2oFMaTogqatcHgb811S9Sk1pgzg1sbpALAG1P1FNFcKKX8hGeUvHbtGlmO5jo0Q
fsvrJOBWWnUBq7ADeJsyIKb5OhYQ2dzMFk4jd0DqTl6qsT4uiG0OlhMRnTExHcpd
mSjqflBBuH23oUvxTa3c0EknEK5Ypz8rWLAmDwuw0dzZLQA03L3JmKjDDgq86/ts
Y1h615KCBtNRgfJjjrVK0jhYKODBd+wO23LyccVA8pkDlFDwhn9n
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:56 2025 by rpki-client