Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
File:                     At3Avw90-WSo2yJsvjP3007bAFM.mft (raw, json)
Hash identifier:          hj7QW9E72WX+WHl1QDkUAuxSoZjon8UDyea+GMJzyAQ=
Subject key identifier:   60:0C:1A:1B:B7:93:F8:DC:A0:A7:EA:04:07:58:F8:F2:68:3B:D1:C4
Authority key identifier: 02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53
Certificate issuer:       /CN=F36F51F8AR/serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
Certificate serial:       0902
Authority info access:    rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
Manifest number:          0900
Signing time:             Mon 20 Oct 2025 01:35:01 +0000
Manifest this update:     Mon 20 Oct 2025 01:35:00 +0000
Manifest next update:     Wed 22 Oct 2025 01:35:00 +0000
Files and hashes:         1: At3Avw90-WSo2yJsvjP3007bAFM.crl (hash: h2MoUgl25G0hs7/17UjotLB6XZ3LE3exgIhTk+TplY8=)
                          2: B0D116986C8D11ECA9758ACA5A40D577.roa (hash: lTLDiHShhMe4QavSzilaN/PR1KFjgS4fLvPFpQKkp0g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                          rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2306 (0x902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F51F8AR, serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
        Validity
            Not Before: Oct 20 01:35:00 2025 GMT
            Not After : Oct 22 01:35:00 2025 GMT
        Subject: CN=68f591c5-f8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:d3:a4:37:d8:be:77:64:65:a7:6f:f8:e3:
                    0a:9d:d5:25:41:87:e0:63:db:c7:43:92:7c:48:1e:
                    2c:8d:6e:2f:19:3e:44:ea:e3:7f:d9:1b:df:e6:f2:
                    ed:0e:b5:0a:e0:56:c6:82:09:98:4b:f8:ff:13:ea:
                    ac:df:57:7e:e6:74:f4:e6:51:cd:5d:c1:29:3e:9f:
                    57:63:92:2c:47:49:c3:4d:87:d6:da:08:24:c1:8a:
                    e2:e9:6b:f8:af:3b:7d:ba:e7:9e:28:9f:94:bf:91:
                    8b:05:c1:b9:15:c2:7a:b6:3c:7c:54:6c:b3:ee:5b:
                    6e:26:d2:07:b5:68:ec:79:02:5e:7d:66:51:51:fc:
                    93:17:b7:cd:d1:0f:48:ec:08:c2:6f:74:23:0d:ae:
                    8c:d8:9d:78:63:63:0b:bc:8c:c6:09:92:7f:ec:5e:
                    e9:8a:30:6a:2f:61:52:91:a6:31:6f:b6:72:51:00:
                    01:70:cd:e8:2f:05:47:56:0a:30:02:8a:7a:a9:d9:
                    43:4b:d9:43:72:fc:ce:5c:8b:85:59:f9:72:93:bb:
                    c7:bf:ac:00:d6:6d:62:0d:20:15:95:c2:59:9e:21:
                    0b:a7:d1:16:45:72:2c:40:2e:4e:57:4a:50:76:3c:
                    a1:ec:7a:d6:8f:cc:d3:21:24:e2:6b:1a:ea:ad:cc:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0C:1A:1B:B7:93:F8:DC:A0:A7:EA:04:07:58:F8:F2:68:3B:D1:C4
            X509v3 Authority Key Identifier:
                keyid:02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:0e:93:45:6e:eb:3c:ba:a6:28:3f:18:3a:1a:3b:64:2f:f8:
         87:eb:2c:73:28:37:80:6d:8d:ae:0e:98:16:a7:46:e8:d1:55:
         ef:ad:6f:70:f2:89:bd:9b:0c:0c:c2:d2:7b:06:9c:b8:29:c1:
         cd:9c:19:69:e5:e1:50:fd:9a:76:c4:31:08:6f:c6:f8:10:2f:
         b5:e0:01:74:ce:30:db:7c:0e:33:a1:e4:30:5b:aa:2b:6e:ad:
         25:2a:7a:cc:fd:2d:4a:96:e6:57:08:92:b6:79:46:8f:71:74:
         c8:81:fd:26:a8:fe:b8:c9:e3:cb:0d:3f:f9:d1:a9:86:07:0b:
         05:1e:8b:70:65:b6:de:2f:cf:0c:35:04:ac:e3:cc:bd:2d:4b:
         33:00:c0:64:d5:dc:ba:d3:ae:3b:20:2c:dc:1e:e8:94:b8:6e:
         b9:70:ae:77:ea:db:18:bb:98:92:ab:93:5e:85:41:72:02:ce:
         23:4f:ae:46:6a:83:5b:39:07:8d:51:8f:38:0a:ac:a3:b5:c3:
         25:87:e5:d7:6f:da:42:83:05:64:9c:93:c4:dd:81:5f:97:aa:
         4c:70:2f:e6:1a:a4:c6:ef:d3:95:be:e1:37:2f:ab:57:c6:ff:
         34:7b:92:c1:d5:8b:8a:f1:b6:86:03:53:51:55:79:81:ac:48:
         04:95:db:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:19 2025 by rpki-client