Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
File:                     3e9RyKD_hVBdng5v-gInbCpVrug.mft (raw, json)
Hash identifier:          j8BNSXx4mRg6u12kJr7nq+3mANL11ek1uF9hPgA9ZDM=
Subject key identifier:   52:5E:C4:50:B8:22:6D:AF:73:FE:60:49:4F:46:C3:3E:42:F5:94:8B
Authority key identifier: DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8
Certificate issuer:       /CN=F36FBB68AR/serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
Certificate serial:       06E9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
Manifest number:          06E5
Signing time:             Sun 19 Oct 2025 02:04:15 +0000
Manifest this update:     Sun 19 Oct 2025 02:04:15 +0000
Manifest next update:     Tue 21 Oct 2025 02:04:15 +0000
Files and hashes:         1: 3e9RyKD_hVBdng5v-gInbCpVrug.crl (hash: 5wxrg4d1iaaLcb7BRWU6AYH2lEI4uBea1olRPWQNkPY=)
                          2: 8EB8874C767711EB81CF8371F8AEA228.roa (hash: a5Ya8AZMPcr4yo5onV+OXArWF7aJzeoyFelL2j6STfo=)
                          3: A8B2187C767511EBB8015C6FF8AEA228.roa (hash: +55ryPzqgEQMEpzdUbqmX7lkwQdExVhKk9NqHf4i0Lk=)
                          4: 1E3F561E8B1A11EBB0DA3D71F8AEA228.roa (hash: Cpd4zmkYKicudOUgZJe6/OaQ296nySd++X2fdJd/rUU=)
                          5: F8B4E3247D9E11EB83704925F8AEA228.roa (hash: 63CDlb9OzE0Ed+gaeo+vCDqqodWQ+GqMecV9r4cwpCQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                          rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 02:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769 (0x6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBB68AR, serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
        Validity
            Not Before: Oct 19 02:04:15 2025 GMT
            Not After : Oct 21 02:04:15 2025 GMT
        Subject: CN=68f4471f-98c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:ad:90:90:b1:e6:b8:85:c5:2a:20:20:5e:
                    db:a6:28:a2:dc:cc:00:c2:b9:e4:f7:55:28:a0:5e:
                    6a:31:aa:5b:77:ff:e0:61:a3:c7:e0:c7:7d:38:7b:
                    af:87:a2:cc:3d:54:93:db:ab:3e:bd:0a:7b:9d:24:
                    03:b3:3f:bb:f0:37:15:e2:6a:c3:04:a8:e7:c8:a8:
                    39:0a:72:b8:66:10:fb:7c:b6:8e:0c:10:03:9c:d6:
                    dd:7d:3c:d7:a6:14:4c:e9:d6:f2:4c:74:d0:b9:b4:
                    67:07:91:5a:48:5a:4a:89:c5:9f:2c:59:53:77:c5:
                    c5:56:ce:40:98:d4:04:0e:8c:ed:89:b4:97:97:fb:
                    78:19:a0:ac:d8:cc:28:5d:53:95:72:6a:26:23:d0:
                    78:39:d1:54:f4:74:fc:93:b4:c3:a5:6f:0b:5a:37:
                    30:a5:1c:6e:85:67:4e:87:ed:e2:1f:35:58:aa:47:
                    5c:de:b6:87:8f:a2:4a:30:96:0c:b5:44:7e:21:9c:
                    08:7f:e9:7c:4a:b0:25:0f:73:dd:8c:d3:69:a6:c5:
                    32:53:23:6c:bf:00:6f:db:77:44:00:14:fe:77:f7:
                    f4:93:ad:6b:45:b0:82:ff:52:ad:fc:ef:1d:53:5d:
                    dc:82:c0:ab:5a:b6:8d:c0:25:4f:e1:8b:a4:e9:69:
                    d0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5E:C4:50:B8:22:6D:AF:73:FE:60:49:4F:46:C3:3E:42:F5:94:8B
            X509v3 Authority Key Identifier:
                keyid:DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0e:ef:28:13:99:80:e2:7f:06:72:03:64:dd:bc:6c:ff:ad:
         1a:86:61:29:38:8f:e6:fa:7f:1c:69:ab:3b:fb:9a:eb:82:39:
         fc:07:ab:4d:22:e8:55:b4:2d:80:55:6e:8e:8a:7d:05:d4:01:
         13:07:52:38:8e:21:15:e4:92:6f:64:b1:bb:f8:15:85:89:b9:
         51:fd:59:a9:8d:3c:8e:88:f8:20:8c:a6:c7:eb:82:ea:03:d6:
         d2:ad:fb:1b:71:bf:f7:73:8d:a4:c4:fd:d0:95:61:18:60:6f:
         d4:85:a3:f6:9f:ec:43:73:2e:0f:2f:c6:c7:d9:84:fd:49:e9:
         2a:39:08:6e:a2:0e:32:fa:41:2d:19:58:b2:f1:44:17:0d:63:
         9c:64:00:26:12:f3:d2:f3:8d:cf:b0:94:a2:11:07:ea:be:dd:
         21:2a:e7:01:23:29:84:f0:13:a6:e1:8c:d0:bb:c6:df:d2:07:
         da:13:0e:63:fc:be:c4:2d:56:24:b1:ba:de:d4:d5:d0:bb:64:
         0c:5b:ca:6e:47:7b:c1:f3:e9:27:88:79:28:c4:b0:2a:f1:ae:
         a7:99:99:9f:2d:8e:6f:c4:01:5d:a3:4c:cd:7a:3f:45:8a:3e:
         19:aa:d7:ab:0b:f6:d8:2d:35:1b:c6:2d:b6:26:bf:6c:12:ef:
         f2:60:7b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:42:46 2025 by rpki-client