Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
File:                     gw8nolWHc_MWi4g8BLAjjqV1I7U.mft (raw, json)
Hash identifier:          syncgeLRPoCvDf0w09uqOZysacllq/zs5WOkrypL70g=
Subject key identifier:   28:72:9C:20:94:69:8E:D3:DC:81:F5:1A:F6:D5:B9:FD:DB:BF:40:06
Authority key identifier: 83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5
Certificate issuer:       /CN=F36D9B5BAR/serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
Certificate serial:       0CE2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
Manifest number:          0CE7
Signing time:             Mon 20 Oct 2025 01:07:49 +0000
Manifest this update:     Mon 20 Oct 2025 01:07:48 +0000
Manifest next update:     Wed 22 Oct 2025 01:07:48 +0000
Files and hashes:         1: gw8nolWHc_MWi4g8BLAjjqV1I7U.crl (hash: 16+Q92VS443K2v4jYp906+mNNk7txUEvLlqH5VlHDf4=)
                          2: D24E31E2DE7C11EBB05A5E63F8AEA228.roa (hash: M2UxYeTNruKkNVITsjU6u+dRgieWPfDpSGMbsu/uKcE=)
                          3: 44CC9024914411EFAF149499762E951A.roa (hash: l3Qn1RGJiIaOX/uJ3zhEKWWubILzUTCLDcpUJEVSwjw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
                          rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3298 (0xce2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D9B5BAR, serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
        Validity
            Not Before: Oct 20 01:07:48 2025 GMT
            Not After : Oct 22 01:07:48 2025 GMT
        Subject: CN=68f58b65-6432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:3e:9e:f5:22:b8:93:61:41:dd:2c:a6:76:
                    ff:f1:24:b1:03:e9:56:2f:95:78:7e:19:2f:1a:15:
                    80:f8:26:b4:ae:3d:cb:18:35:37:e2:40:f4:0e:b5:
                    bd:f1:e1:d5:87:1c:d7:fd:28:4c:f6:8a:ef:d2:82:
                    82:f3:6a:ee:b8:fc:3f:d7:a8:b5:e8:b3:d0:d4:46:
                    7e:b6:1e:6e:bb:35:1a:09:8d:f6:8c:0f:52:f3:ae:
                    08:5b:9f:e8:97:31:e4:a6:60:a9:4b:47:2d:18:b0:
                    3c:a8:e5:14:fd:c7:b9:6a:04:0c:6d:b6:a2:21:64:
                    a4:0d:df:37:fb:1f:50:9f:1c:57:ea:12:d9:00:f1:
                    a3:ca:f3:65:4b:65:a5:51:37:8d:c7:98:ff:30:c4:
                    54:e6:bf:b9:72:7d:cd:7e:10:fd:76:d9:46:a9:9d:
                    5a:6d:82:d8:a1:e6:a6:1e:3d:5e:fd:8f:5a:68:49:
                    a6:8f:61:c4:4d:15:3d:45:2f:94:3c:38:f4:32:d3:
                    30:e2:95:56:4f:f3:11:76:95:e9:c7:67:0e:ce:ec:
                    15:e7:88:8e:a0:99:94:3a:c6:97:d9:b5:9f:b4:92:
                    6f:b7:45:88:67:9b:10:25:31:f1:42:81:67:23:2d:
                    cd:f4:18:cf:33:ab:9f:70:9e:e2:f4:d8:39:29:74:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:72:9C:20:94:69:8E:D3:DC:81:F5:1A:F6:D5:B9:FD:DB:BF:40:06
            X509v3 Authority Key Identifier:
                keyid:83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b1:77:e4:32:19:87:73:38:ea:eb:42:8b:30:1b:e4:cd:ec:
         75:85:21:93:0d:59:a0:c9:3f:c4:40:f6:68:58:15:e8:9b:6d:
         8d:67:31:9a:6f:c7:f9:b1:ee:02:67:eb:ea:23:ba:d0:b9:4d:
         59:f4:cc:5d:9c:c1:4b:b8:e8:b6:d0:35:dc:2e:47:a1:28:f7:
         5f:9d:9a:27:c0:05:04:df:13:44:b1:c8:f2:26:13:c1:3f:cf:
         1a:53:51:5c:57:13:e9:a0:98:af:69:f5:c6:4b:4e:30:28:2a:
         92:f5:84:ce:81:d3:ef:5f:75:37:08:91:f8:5a:30:61:8e:e3:
         6a:8c:05:9f:84:a5:2e:37:3e:2a:f5:65:a9:33:c8:37:14:64:
         06:73:98:20:e9:bc:dc:ed:63:e1:82:05:5f:87:be:64:2c:3b:
         8d:85:ef:32:88:9b:0f:77:f7:d2:44:a0:88:ed:0b:2c:4a:ea:
         96:cb:a0:b9:5e:06:c0:f9:46:34:3d:e5:01:5f:ff:95:c8:3c:
         21:d3:7f:ca:f7:b2:68:ce:a9:e7:52:b7:8e:3f:53:af:79:51:
         59:7c:4d:be:37:64:c5:bf:31:6a:58:97:01:d4:46:e3:b2:5c:
         c9:16:5b:da:8b:e6:29:3e:00:ae:d8:01:4e:91:08:7c:8a:bc:
         00:26:3a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:30 2025 by rpki-client