Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
File:                     q1UdEIRQYI699UDKEhmyuEf2Xr0.mft (raw, json)
Hash identifier:          SMIslkdFBD6g4ZLy2LHQ6B5xgIGiZq3VG3srsQZB4/c=
Subject key identifier:   79:D8:99:AF:8F:FE:A2:B5:43:1F:52:26:84:88:AF:86:6E:28:7F:5B
Authority key identifier: AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD
Certificate issuer:       /CN=F36145DBAR/serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
Certificate serial:       03A9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
Manifest number:          03A7
Signing time:             Tue 16 Sep 2025 03:22:46 +0000
Manifest this update:     Tue 16 Sep 2025 03:22:45 +0000
Manifest next update:     Thu 18 Sep 2025 03:22:45 +0000
Files and hashes:         1: q1UdEIRQYI699UDKEhmyuEf2Xr0.crl (hash: OAe+grP78KRNY2sj1deyQZlT/EhVLu6AIBwQGBF3/Xg=)
                          2: 8CF32B68904C11EF9584C288762E951A.roa (hash: W8KdpJvKsiz8S2dQkLaP2FisSXn5+k8WsnBGg52AlIA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
                          rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36145DBAR, serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
        Validity
            Not Before: Sep 16 03:22:45 2025 GMT
            Not After : Sep 18 03:22:45 2025 GMT
        Subject: CN=68c8d806-9841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:a1:86:72:03:d7:f5:9a:eb:b0:e5:f6:fe:
                    b8:80:ec:f3:3e:06:9b:c3:fe:6f:e6:b7:d2:36:ec:
                    a7:71:75:49:47:2e:26:b1:51:8b:c2:c4:2e:d5:b2:
                    bf:ff:e4:03:80:be:d0:43:d6:ff:d2:de:9f:11:25:
                    da:eb:13:46:90:10:40:2e:b1:27:98:9c:e5:2c:3a:
                    d2:50:5d:1c:5c:e2:1f:3e:f6:d8:7d:69:9a:10:4c:
                    1f:84:ce:7b:0b:7d:57:8b:0f:ca:0c:00:48:0e:ef:
                    50:d9:e5:c5:3b:b4:e2:a7:0c:3d:66:5c:ac:49:4c:
                    0a:af:2d:5d:ba:11:71:bc:17:f8:21:fb:b4:75:c2:
                    52:84:5e:db:53:b6:d5:a6:fc:e1:00:3f:f0:de:a0:
                    18:a1:c3:88:5c:31:15:15:4c:17:81:0d:1b:4f:89:
                    da:ee:0b:0e:44:0b:a5:06:99:61:47:ca:ef:d9:19:
                    cd:0c:6c:4b:f7:5f:34:c3:87:12:a9:56:1b:48:94:
                    c1:a7:56:dd:4f:11:5b:f4:57:06:ab:85:5e:91:f8:
                    3a:e1:5d:cd:ee:af:c6:a1:74:18:49:4e:d4:89:00:
                    8e:47:94:81:d8:1c:5e:4b:ec:98:ee:24:9a:8d:15:
                    20:e1:3c:ae:35:5c:aa:02:47:39:34:00:ee:e9:a9:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D8:99:AF:8F:FE:A2:B5:43:1F:52:26:84:88:AF:86:6E:28:7F:5B
            X509v3 Authority Key Identifier:
                keyid:AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:0e:f7:29:2a:0d:c8:f8:03:5f:75:b1:9c:e5:d0:7f:f4:ff:
         25:97:0f:e0:6e:00:05:75:54:5c:56:2c:8e:80:a7:50:4c:5a:
         e8:eb:13:d9:b7:84:3b:61:44:d1:40:ee:42:10:ff:d3:1e:8b:
         8b:65:a3:e0:40:ce:c6:2a:04:90:de:d9:2d:88:30:85:f6:b1:
         17:da:2e:a2:9a:5b:b4:4a:94:4e:6a:5c:1d:f6:b4:4e:ea:b2:
         ed:18:5e:98:92:f6:1f:15:af:fe:c5:0a:bf:19:a9:8b:df:46:
         3e:a9:f4:fb:07:ef:21:e9:0c:fa:8d:13:76:04:c2:28:25:bd:
         2b:4a:e6:81:8c:4e:ed:66:77:c8:15:5d:3b:4f:b0:a7:22:3d:
         12:f5:1e:55:de:e2:d2:8e:d1:1f:c2:72:99:bf:0f:e9:14:90:
         06:cd:0d:54:be:ef:bf:3b:87:0c:70:c5:e5:04:d2:ac:b2:5f:
         3f:02:ca:88:40:aa:2c:92:de:ad:4e:13:c8:9d:c8:bf:ff:7d:
         c8:d3:e5:c4:ed:de:bd:79:23:09:7a:72:f9:67:30:2a:cd:7d:
         4d:7d:15:e5:38:75:c6:67:4b:a7:5b:63:8c:e5:74:40:e9:d9:
         31:82:d2:53:17:a5:21:81:1f:c1:70:42:c3:b3:91:11:6b:32:
         9b:65:5b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:51:08 2025 by rpki-client