Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          MBtgIMgRiHuO3eBUofVe7M3Zhfx562VsjC2Z/Pvpqs8=
Subject key identifier:   CF:C2:3D:13:3A:10:F1:A1:8D:AD:62:6C:FD:41:87:4C:EB:D9:CB:9A
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       020F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          020E
Signing time:             Mon 20 Oct 2025 04:19:41 +0000
Manifest this update:     Mon 20 Oct 2025 04:19:40 +0000
Manifest next update:     Wed 22 Oct 2025 04:19:40 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: rRL5JJtGTZQRDiaDvjhq0PFK4IIg3IdeQS7WueLLXzM=)
                          2: 5E52EDD81C4911EFA98F9E317DDC24C2.roa (hash: Zixh/aFPuo2zs0C1hGvWJdvczTuAhUvvaA1FyHi6zv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR, serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Oct 20 04:19:40 2025 GMT
            Not After : Oct 22 04:19:40 2025 GMT
        Subject: CN=68f5b85c-00c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:60:c5:fe:82:39:4c:69:44:4a:5e:71:e0:
                    6c:e7:b3:01:ae:26:0f:38:97:47:3b:5a:79:a3:b3:
                    1c:ab:70:8b:d2:9d:28:05:3a:11:d1:8d:da:fb:06:
                    ab:8e:43:22:95:c8:61:d9:46:45:61:d9:55:53:5f:
                    f3:b5:04:07:51:ca:ea:68:93:e2:d0:77:cc:c3:93:
                    6e:66:04:2c:8b:7c:b6:40:76:ea:ff:0f:36:bc:4d:
                    12:7c:5d:48:88:4e:de:35:61:53:fe:f2:4a:6b:08:
                    08:d5:e4:f2:16:ad:ea:5d:0f:46:f6:36:bb:9b:94:
                    6e:88:a3:d4:fe:52:44:f4:49:05:0b:39:db:ed:67:
                    ff:33:ea:f0:db:10:61:fe:0f:c5:aa:3d:4f:50:6f:
                    9e:84:0e:6a:7d:be:63:7c:59:8a:6d:ac:64:32:ee:
                    a3:33:56:eb:87:ad:5b:63:74:2a:da:5b:3c:3b:19:
                    59:33:07:a7:80:0e:d6:d6:c3:e3:61:e9:31:68:36:
                    9c:2e:25:68:fe:43:cc:64:5f:af:ce:47:01:06:4f:
                    92:28:af:21:ca:59:7a:dc:e1:5b:89:b8:90:2e:20:
                    d8:55:92:46:3d:d9:3a:85:09:f2:bf:d4:f0:a3:2e:
                    46:d1:b6:17:71:6f:d6:86:c3:f6:ad:d0:cf:e3:1f:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C2:3D:13:3A:10:F1:A1:8D:AD:62:6C:FD:41:87:4C:EB:D9:CB:9A
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:9f:8c:b7:05:96:0c:88:90:4e:f0:52:39:d1:c4:9e:b8:71:
         d0:5a:b2:8f:1d:c1:62:17:fc:f5:d2:cd:99:bc:0e:14:25:91:
         57:f7:3b:a4:be:df:e5:95:97:73:c8:6b:2b:d3:97:42:ca:ae:
         fa:73:7a:dc:40:6e:56:ce:d9:45:8a:58:f1:fa:30:cc:35:d9:
         42:3f:d5:3b:86:20:98:d2:95:c4:32:3d:08:e9:67:b7:fd:17:
         a1:61:bb:7a:db:5e:a5:d9:b3:3d:92:1f:2c:28:27:dc:16:44:
         e1:6f:7f:ef:88:15:2a:2a:2c:2f:a7:18:a6:4e:c3:de:9b:65:
         2c:fd:ff:16:9e:b4:0e:81:b0:ae:f8:9f:4d:cf:aa:b9:0d:76:
         44:f8:b7:0d:86:bb:7a:09:82:be:54:62:53:5d:5c:60:02:63:
         77:14:0e:48:8d:21:b8:d7:20:f0:23:74:2a:f2:ef:9b:59:23:
         6c:02:b3:f4:d0:25:51:23:8e:76:f1:a3:52:8b:53:9c:af:ed:
         bf:04:26:fb:b4:92:a9:58:0f:f6:eb:d8:b7:7c:85:4d:5b:b2:
         e6:5b:9d:94:7c:16:8d:8b:19:53:c0:c7:a4:87:57:51:46:ba:
         89:3c:8d:20:56:32:fd:28:82:b1:e8:57:39:2e:17:74:06:d0:
         24:ef:01:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:12 2025 by rpki-client