Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
File:                     nLoUINchzAMCPFAG0iUcILr0yII.mft (raw, json)
Hash identifier:          bEgciokityLsQUP0tmpRhRUhMUSHCBW2AL9yuh5vomo=
Subject key identifier:   94:88:73:BD:BD:70:6A:FC:DA:B9:88:53:4B:7D:82:4D:9E:24:11:24
Authority key identifier: 9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82
Certificate issuer:       /CN=F3651E73AR/serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
Certificate serial:       0D40
Authority info access:    rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
Manifest number:          0D3A
Signing time:             Tue 16 Sep 2025 01:04:22 +0000
Manifest this update:     Tue 16 Sep 2025 01:04:21 +0000
Manifest next update:     Thu 18 Sep 2025 01:04:21 +0000
Files and hashes:         1: nLoUINchzAMCPFAG0iUcILr0yII.crl (hash: 2ToJoCOtalrJf9G3B02fRqAn+W/pqbUT0cRLdmUSJac=)
                          2: D365A0ACF80D11EFBEB14452762E951A.roa (hash: Am6JfmXKv4DHhKvXRKWcitTRJPjjXl+0+2dzYYkuDLU=)
                          3: 35AAF9269B8511EC9C57BEA05A40D577.roa (hash: IkRiEA4+pjihvXLHrg2ngxaBC/GnITy6qHEusBSCBlo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                          rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3392 (0xd40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AR, serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
        Validity
            Not Before: Sep 16 01:04:21 2025 GMT
            Not After : Sep 18 01:04:21 2025 GMT
        Subject: CN=68c8b796-89f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9a:81:17:c6:f7:69:6a:57:a0:22:bb:13:19:
                    43:3e:ec:cb:eb:d1:75:f9:13:04:88:1e:8b:4a:ce:
                    37:2c:ca:72:5a:0d:db:a9:7a:18:dc:b3:85:23:16:
                    d0:a2:84:51:08:8e:6f:38:c7:d2:22:f2:92:68:4a:
                    4b:09:80:32:d2:cc:fb:18:de:c2:0c:a3:2a:d3:6e:
                    b8:d3:85:f9:f2:f8:57:af:51:ac:c0:33:ff:ed:2e:
                    37:33:ee:f6:7c:2d:9c:7c:43:50:3d:db:e7:6b:af:
                    0e:de:f5:06:65:e3:2d:c3:3b:3f:fa:9d:68:53:65:
                    ee:47:f4:1b:da:26:2a:9a:77:5e:87:86:32:97:80:
                    79:29:57:7f:d5:2c:0d:db:11:86:5f:94:1f:fe:50:
                    07:69:ae:16:f9:87:f7:f6:78:19:27:de:6c:f0:1a:
                    cb:26:d1:24:ca:12:52:d7:13:3a:59:17:f7:02:36:
                    2d:1c:1f:44:86:31:62:c3:a1:f3:b5:fe:75:66:f6:
                    0e:68:e9:af:54:ed:4a:8f:4d:ad:6d:c6:68:35:ff:
                    31:01:55:d7:65:24:b0:da:1b:cf:94:7d:bb:95:e9:
                    73:14:ed:14:ac:f8:f4:b7:62:6f:14:d9:e8:f6:c7:
                    63:e2:2d:78:4d:ef:f4:73:2b:a0:bf:9e:ae:0d:53:
                    3f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:88:73:BD:BD:70:6A:FC:DA:B9:88:53:4B:7D:82:4D:9E:24:11:24
            X509v3 Authority Key Identifier:
                keyid:9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ce:0e:15:db:10:f7:b6:c4:c4:5e:09:cf:f6:c6:bb:d2:43:
         5f:75:ba:65:f7:17:df:b9:92:0c:ca:eb:50:f0:81:7e:11:cd:
         00:38:f0:7a:89:1a:4e:9b:bb:b0:b0:ce:2a:d5:ac:09:bb:41:
         ab:90:8f:37:ff:e4:6a:ca:06:03:09:54:c6:1b:61:0a:e0:f9:
         8e:89:65:b8:40:ff:94:63:40:bb:13:47:ed:34:e5:15:2c:b4:
         dd:b2:5e:8e:9d:50:d0:6a:03:1e:64:b5:d7:04:2e:27:f7:93:
         45:c3:c3:4c:7a:fc:3b:a1:67:10:0b:64:f6:30:0c:57:0e:f8:
         c5:43:6c:7b:91:6b:9a:26:47:20:7f:90:f1:35:25:f6:5e:4b:
         31:cc:dd:93:37:21:72:aa:11:a4:18:6c:0d:c2:96:7b:36:60:
         94:2e:a7:a9:86:92:46:62:4a:04:02:78:58:9d:6e:30:6a:75:
         a4:8a:37:95:b6:7c:c0:af:ef:a8:27:2d:70:cd:ce:5d:40:dd:
         cf:c6:59:7e:2e:f2:e9:ac:9e:d8:aa:bc:9a:54:88:2e:23:2e:
         2a:c0:87:59:7a:11:d5:07:f4:65:bc:99:dc:44:68:24:f1:b4:
         b9:0e:03:cc:30:85:f4:68:c8:3b:2e:bd:8d:9b:fa:2b:ee:ea:
         7d:61:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:51:11 2025 by rpki-client