Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
File:                     kjOEThK8fu30Ns4cyZ6uITZHJkc.mft (raw, json)
Hash identifier:          oKr1Jr3jazL066R1gXIDkl3Nc0eMAT0gc7my+shkazg=
Subject key identifier:   D9:F7:1C:3F:3E:01:81:0A:4E:4E:6A:B1:58:41:BC:6C:2E:B6:A7:73
Authority key identifier: 92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47
Certificate issuer:       /CN=F36F8DABAR/serialNumber=9233844E12BC7EEDF436CE1CC99EAE2136472647
Certificate serial:       0BB5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
Manifest number:          0BAF
Signing time:             Sun 19 Oct 2025 01:09:50 +0000
Manifest this update:     Sun 19 Oct 2025 01:09:50 +0000
Manifest next update:     Tue 21 Oct 2025 01:09:50 +0000
Files and hashes:         1: kjOEThK8fu30Ns4cyZ6uITZHJkc.crl (hash: uBQK68aB3nttI8mhfsx7FTsSA1nGQjf4aVY4s7rbYs8=)
                          2: DC9DA0E4D58F11EEB154057C775412E6.roa (hash: gp7fukfD5fPb1a+zTWjX6E2Nn206G89h7J8+rzHmk5o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
                          rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2997 (0xbb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8DABAR, serialNumber=9233844E12BC7EEDF436CE1CC99EAE2136472647
        Validity
            Not Before: Oct 19 01:09:50 2025 GMT
            Not After : Oct 21 01:09:50 2025 GMT
        Subject: CN=68f43a5e-c343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:ed:ba:ad:d2:75:2e:da:3f:73:f0:1a:4d:
                    8b:c0:e3:f1:47:26:2c:7d:a8:0e:b5:e4:bb:f8:3d:
                    e1:b5:56:57:30:02:28:1c:fa:7c:b8:47:63:16:ed:
                    81:57:29:6e:71:49:16:1d:b7:7e:78:7d:6f:26:f0:
                    41:10:1f:11:8b:7d:49:25:c0:72:5f:15:c1:24:60:
                    c1:6f:5f:b3:4f:0e:f1:84:e7:57:cd:45:f5:ca:10:
                    64:e5:20:16:d9:78:5f:65:a4:8d:4a:fc:7c:14:37:
                    4a:e1:a9:28:c2:e5:5c:ea:b0:79:f8:b9:9c:85:ed:
                    67:c9:60:55:2b:88:78:7d:cd:dd:7e:31:55:bc:7a:
                    11:39:9c:a9:a7:ee:c4:68:0d:a7:71:8d:cf:f3:b6:
                    71:eb:0c:36:4a:e8:2a:62:d3:8c:fd:12:e0:4c:0e:
                    46:9a:80:27:47:a2:df:31:7b:1c:c8:23:eb:76:95:
                    2f:41:5c:fb:04:60:e7:f9:16:5a:d3:fa:70:f6:38:
                    fd:3f:1a:b4:c1:be:b8:4b:e6:4d:85:ef:e0:4f:d3:
                    d1:f7:8a:31:13:fa:f7:39:05:52:96:fb:0a:3e:3c:
                    b3:34:88:eb:01:23:48:18:8c:8f:21:13:4f:4b:93:
                    1a:a9:92:61:9b:d7:68:00:4f:46:74:c1:c3:b1:f9:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F7:1C:3F:3E:01:81:0A:4E:4E:6A:B1:58:41:BC:6C:2E:B6:A7:73
            X509v3 Authority Key Identifier:
                keyid:92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d5:08:0a:9f:8b:a3:0b:b1:a9:9f:c5:6c:5c:f1:78:0d:8e:
         06:10:eb:f0:8d:81:43:cf:b5:5c:29:ff:98:bc:12:89:76:a3:
         91:d2:02:66:80:90:a5:bd:b2:94:1e:d0:d6:9e:67:8c:db:0d:
         21:49:e1:2b:92:f0:01:48:c6:31:1f:96:40:ef:19:f4:b0:4c:
         95:9a:03:8e:69:3e:6f:a5:6c:81:21:d0:7b:e2:91:83:67:d6:
         d7:d1:80:75:0e:ba:fc:e0:87:1f:2c:de:08:01:aa:85:e7:2c:
         da:a4:ca:e2:f2:16:de:ed:66:8b:5f:48:b1:3c:04:bf:7c:e5:
         2e:7c:44:b2:82:25:c2:0d:a0:7a:de:70:91:36:cd:25:e5:49:
         be:d2:df:16:16:e1:74:36:79:26:e2:99:a3:7f:8b:03:8b:6f:
         bc:05:1a:f3:08:d0:db:01:15:1d:3e:b0:ce:db:02:72:42:cd:
         4a:1d:24:90:3d:f1:7a:3a:72:60:92:f5:49:3e:d8:8b:bf:d8:
         82:d3:d1:3f:0e:b8:75:c4:e8:b8:0f:51:0a:86:1a:75:bc:7e:
         47:e3:cd:c3:cb:ee:be:b2:13:6b:1d:7c:65:67:9b:4e:56:3c:
         e8:be:0d:50:63:79:60:b2:d5:6a:a7:23:12:1d:6d:65:a6:de:
         f8:fc:95:16
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICC7UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjhEQUJBUjExMC8GA1UEBRMoOTIzMzg0NEUxMkJDN0VFREY0MzZDRTFDQzk5RUFF
MjEzNjQ3MjY0NzAeFw0yNTEwMTkwMTA5NTBaFw0yNTEwMjEwMTA5NTBaMBgxFjAU
BgNVBAMTDTY4ZjQzYTVlLWMzNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJXO26rdJ1Lto/c/AaTYvA4/FHJix9qA615Lv4PeG1VlcwAigc+ny4R2MW
7YFXKW5xSRYdt354fW8m8EEQHxGLfUklwHJfFcEkYMFvX7NPDvGE51fNRfXKEGTl
IBbZeF9lpI1K/HwUN0rhqSjC5VzqsHn4uZyF7WfJYFUriHh9zd1+MVW8ehE5nKmn
7sRoDadxjc/ztnHrDDZK6Cpi04z9EuBMDkaagCdHot8xexzII+t2lS9BXPsEYOf5
FlrT+nD2OP0/GrTBvrhL5k2F7+BP09H3ijET+vc5BVKW+wo+PLM0iOsBI0gYjI8h
E09LkxqpkmGb12gAT0Z0wcOx+Vd5AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU2fcc
Pz4BgQpOTmqxWEG8bC62p3MwHwYDVR0jBBgwFoAUkjOEThK8fu30Ns4cyZ6uITZH
JkcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4REFCLzc4Q0I5MDUwQjlDNDExRTdBREQxOEM2MUY4QUVBMjI4L2tqT0VU
aEs4ZnUzME5zNGN5WjZ1SVRaSEprYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2tqT0VUaEs4ZnUzME5zNGN5WjZ1SVRaSEprYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjhEQUIvNzhDQjkwNTBCOUM0MTFFN0FERDE4QzYxRjhBRUEy
Mjgva2pPRVRoSzhmdTMwTnM0Y3laNnVJVFpISmtjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ1QgKn4ujC7Gpn8VsXPF4DY4GEOvwjYFD
z7VcKf+YvBKJdqOR0gJmgJClvbKUHtDWnmeM2w0hSeErkvABSMYxH5ZA7xn0sEyV
mgOOaT5vpWyBIdB74pGDZ9bX0YB1Drr84IcfLN4IAaqF5yzapMri8hbe7WaLX0ix
PAS/fOUufESygiXCDaB63nCRNs0l5Um+0t8WFuF0Nnkm4pmjf4sDi2+8BRrzCNDb
ARUdPrDO2wJyQs1KHSSQPfF6OnJgkvVJPtiLv9iC09E/Drh1xOi4D1EKhhp1vH5H
483Dy+6+shNrHXxlZ5tOVjzovg1QY3lgstVqpyMSHW1lpt74/JUW
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:22:47 2025 by rpki-client