Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File:                     xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier:          UAJAEdBbcg7u1PZuAO3cSAzrBOc6MgtMTXIgPF6hxgw=
Subject key identifier:   8A:4B:FD:3B:74:C9:E3:70:64:A1:7E:FB:9F:C0:93:A4:5E:31:E9:5E
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer:       /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial:       033B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number:          0339
Signing time:             Mon 20 Oct 2025 03:45:02 +0000
Manifest this update:     Mon 20 Oct 2025 03:45:01 +0000
Manifest next update:     Wed 22 Oct 2025 03:45:01 +0000
Files and hashes:         1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: LBgG7L/a5EvHm2LrDM8TKXBd+SBl6XLAgizisw4r5IM=)
                          2: 046CF67872E311F0A86CB7A7DAE4EC9C.roa (hash: RxZ6zJwwPB1hMFI2/FMmvPsAjrVlDL8yDDweU2BNpDw=)
                          3: 308911DA72E111F086A6389EDAE4EC9C.roa (hash: tYlSqnPCB7Kv8awS73OBDNcKa9Ut1iPvCF4nylTCo2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                          rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827 (0x33b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
        Validity
            Not Before: Oct 20 03:45:01 2025 GMT
            Not After : Oct 22 03:45:01 2025 GMT
        Subject: CN=68f5b03e-b011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:0e:dd:a7:5b:27:79:38:5b:75:48:74:1c:
                    99:a2:5b:65:05:e8:96:4d:9b:97:23:f0:81:44:16:
                    14:0b:51:42:07:a3:b8:71:97:ef:01:2f:d7:cf:b5:
                    b7:28:a9:27:77:19:d4:3c:4b:91:75:52:47:d0:dc:
                    1b:be:33:0c:ea:74:21:0b:a7:bf:6b:c9:5f:d5:10:
                    c1:4d:ff:4b:1e:0a:af:f1:90:8c:be:06:9d:dd:54:
                    52:f7:9b:de:b9:02:55:72:ea:81:d2:5f:7a:2a:58:
                    00:88:29:bb:37:5f:27:ac:bd:e4:a4:19:4f:11:d6:
                    ce:f4:79:49:41:8e:bb:64:8e:ac:c8:ab:43:78:9e:
                    c5:e1:c3:1c:9e:6a:5d:28:9a:41:82:15:73:f0:4f:
                    20:67:27:d3:21:1b:c2:26:a0:f1:2a:2b:f8:e3:c4:
                    93:db:47:44:c2:71:0a:f3:10:2e:af:c4:43:05:fc:
                    6a:2f:f3:cd:22:be:fa:e3:69:05:71:a1:3a:f0:c1:
                    1c:0f:fe:24:06:d6:31:79:02:bd:77:f5:a9:97:a6:
                    cc:7a:4a:cb:d6:9c:f9:8f:1c:26:1b:5d:50:14:ce:
                    93:77:29:1e:8b:71:09:90:9c:4e:03:2b:cb:85:65:
                    70:26:00:8b:60:72:81:34:1c:db:29:48:f7:16:d2:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4B:FD:3B:74:C9:E3:70:64:A1:7E:FB:9F:C0:93:A4:5E:31:E9:5E
            X509v3 Authority Key Identifier:
                keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:09:bc:d5:d2:ea:41:ba:3a:88:a2:92:9f:21:fa:22:7d:95:
         65:d6:6e:8d:0d:de:84:66:be:9b:1a:b2:03:e2:81:5c:5b:6c:
         21:03:7e:e1:d1:c7:6b:36:a5:8a:98:81:6e:16:19:20:b4:a9:
         c7:2b:0d:f9:00:4c:76:85:a2:af:05:50:72:1e:b4:2c:e7:17:
         0b:0a:f0:93:dd:68:24:0a:1c:29:2a:73:16:4f:17:c5:a9:a4:
         b8:f3:9b:0d:37:27:53:10:32:55:ca:4b:50:b5:29:7b:b2:8a:
         71:8a:f4:11:a5:2a:a6:c4:36:4c:6d:49:d9:38:37:72:0e:f0:
         52:12:17:30:00:83:3d:f7:20:0d:60:7c:3e:22:0a:73:b7:e6:
         9c:f7:a5:2f:f3:52:1a:32:5d:63:43:44:f0:e3:44:45:b9:60:
         1d:18:11:6d:cc:8a:be:5d:35:f7:78:b9:c8:46:7c:d3:20:bb:
         1a:cd:29:a0:d1:6d:ab:0f:33:dd:24:35:d8:20:0b:49:3a:e9:
         37:f4:49:b9:79:ad:28:45:81:4a:1b:42:bd:1e:ec:8f:28:cd:
         47:1d:4f:d9:d4:e5:f5:24:5d:68:a2:19:71:53:ac:94:1f:8f:
         09:7e:6b:1c:f9:85:ab:3f:5d:de:f6:20:a3:04:55:d5:b2:17:
         b0:b0:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:43:11 2025 by rpki-client