Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
File:                     PuGjQpUbwSAiYnHzC4UKh356oZs.mft (raw, json)
Hash identifier:          rwK9RyMb93qD/728E6XtoQHcRQzmMrR4Q9H+bCsvjQo=
Subject key identifier:   B5:4D:12:F1:C5:D5:D3:56:38:AC:84:71:D2:F0:C8:A8:02:2B:C9:CD
Authority key identifier: 3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B
Certificate issuer:       /CN=F36B95DEAR/serialNumber=3EE1A342951BC120226271F30B850A877E7AA19B
Certificate serial:       07B5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
Manifest number:          07B2
Signing time:             Mon 20 Oct 2025 01:54:53 +0000
Manifest this update:     Mon 20 Oct 2025 01:54:52 +0000
Manifest next update:     Wed 22 Oct 2025 01:54:52 +0000
Files and hashes:         1: PuGjQpUbwSAiYnHzC4UKh356oZs.crl (hash: OUBBm/lkUQ3mcywpIBk3S1QcSKxcy6ySsKqeswtempc=)
                          2: 2AAAA51ACA5F11EAB07F4086F8AEA228.roa (hash: 9lpPgbRATZcc3ZHLRlyfVXyO2KMqQ5Z59ZWuFR9owTA=)
                          3: D0C0ABF8CA5E11EAB567CE85F8AEA228.roa (hash: ynXcFOQd3R7EbSd50GZihRiiSJvK2sTmwunIuzMYoks=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
                          rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1973 (0x7b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B95DEAR, serialNumber=3EE1A342951BC120226271F30B850A877E7AA19B
        Validity
            Not Before: Oct 20 01:54:52 2025 GMT
            Not After : Oct 22 01:54:52 2025 GMT
        Subject: CN=68f5966c-d022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:d6:e0:b2:94:11:0b:11:f0:1d:b2:8e:17:
                    39:38:dd:53:46:f0:9e:c9:57:65:19:45:d8:cb:88:
                    2d:bb:47:27:c0:c2:a0:96:17:3b:56:e1:6d:41:2a:
                    f7:2e:ff:85:de:33:1b:57:dd:22:89:bf:d4:09:e5:
                    c1:30:59:ac:bb:26:8f:31:4e:a9:a2:5e:59:0a:80:
                    94:67:6a:91:ef:75:dc:78:19:3f:47:c3:39:01:c5:
                    f4:79:6f:d6:cb:8e:bd:84:df:96:86:68:5c:4a:3d:
                    07:da:67:d7:32:b7:43:37:f0:49:bb:8c:14:07:b8:
                    e5:28:bd:20:00:b9:05:9a:0b:b6:52:2c:6d:1e:45:
                    31:83:3e:53:59:88:34:f2:13:ca:f2:b3:93:b3:99:
                    61:68:e7:40:b6:0a:b2:d9:b1:43:a4:2e:0b:13:e5:
                    13:c4:b1:dc:f9:b6:b3:ef:61:94:14:41:1c:6f:b0:
                    8a:9e:c9:08:86:c1:19:3d:0c:c8:8b:f0:40:ff:55:
                    98:aa:b1:63:b2:df:c1:d6:99:01:39:c4:6d:5b:ee:
                    cb:59:0f:e8:9d:fc:b0:ba:81:1c:93:e0:bd:de:a0:
                    d1:0e:1a:89:7d:a8:45:1e:91:ed:67:7a:c5:33:9b:
                    a3:e2:ea:5a:cb:ea:70:2a:75:36:41:9c:20:89:5a:
                    03:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4D:12:F1:C5:D5:D3:56:38:AC:84:71:D2:F0:C8:A8:02:2B:C9:CD
            X509v3 Authority Key Identifier:
                keyid:3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:25:38:87:fd:15:01:04:86:a4:c6:e9:e0:ab:41:79:45:ad:
         82:a9:d8:fa:e7:d3:0b:73:75:62:3f:65:97:10:34:b2:18:73:
         6a:f8:f9:4d:f5:52:9e:66:6f:42:24:f1:b5:3b:90:11:f7:cd:
         4c:2a:b0:46:74:8f:3d:aa:ec:3a:56:df:20:e4:12:6c:97:3e:
         15:a3:54:36:a0:68:0b:4c:31:ee:2b:75:99:88:13:ff:74:9a:
         d0:71:9f:0e:30:5c:b4:aa:de:af:4c:b3:cb:3e:0d:4b:66:43:
         77:82:34:7f:32:44:7d:54:b2:8b:dc:8f:8d:34:42:26:1e:06:
         e7:94:c7:ed:5e:77:9c:5a:41:47:cb:81:ca:4a:17:c9:4e:7d:
         01:04:11:b6:10:61:dc:b8:94:60:20:b5:b3:18:43:76:ac:95:
         22:ab:54:e3:20:db:79:d7:7f:87:1f:60:fa:d1:58:d2:63:0f:
         75:c9:10:61:47:e2:28:41:07:4e:86:78:6e:02:d8:ad:a8:0c:
         3a:61:20:2d:05:6b:72:f3:56:50:19:5f:45:5c:90:b7:b3:57:
         ac:4e:db:db:58:e1:a4:16:8d:e2:18:35:47:09:df:94:87:40:
         f9:45:fd:6e:f6:e9:ed:e4:a2:d4:56:71:cf:96:c4:e4:91:a1:
         b6:0f:a8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:43:48 2025 by rpki-client