Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File:                     FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier:          IKngmWXEe7HxHW1fmzJDMJNymqx/GcOpXUkOD2UCY7w=
Subject key identifier:   64:D7:53:C8:22:4A:0E:68:AC:AF:6B:6F:6F:5B:72:63:41:3A:F4:81
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer:       /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial:       0414
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number:          0411
Signing time:             Mon 27 Oct 2025 13:29:47 +0000
Manifest this update:     Mon 27 Oct 2025 13:29:46 +0000
Manifest next update:     Wed 29 Oct 2025 13:29:46 +0000
Files and hashes:         1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: 43wnaCYIYi3lU4LaopsL/uGHqcVoR0e+nfsqNj2vavI=)
                          2: CF8B10CE1DB711EFA609B0217DDC24C2.roa (hash: cUUrYIHHPxFgWnYQbOftBzdS94Gj26Vr5vz5884oWrA=)
                          3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                          rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Oct 2025 13:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1044 (0x414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
        Validity
            Not Before: Oct 27 13:29:46 2025 GMT
            Not After : Oct 29 13:29:46 2025 GMT
        Subject: CN=68ff73ca-c7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:01:06:72:5a:e1:70:d3:63:50:23:3f:77:36:
                    cc:62:11:ba:95:55:26:95:e1:d3:b5:94:6e:9f:bf:
                    ea:52:0f:32:14:1d:ee:58:0d:be:ed:6a:5a:c5:1d:
                    29:83:0d:6b:d6:cb:52:21:a3:e2:b8:91:1a:c1:49:
                    11:57:83:ce:ab:55:97:5b:41:7d:5c:e5:fe:d4:15:
                    56:3f:f3:b0:cf:d8:99:ab:4a:62:f2:a7:24:b3:87:
                    3a:18:f9:98:ce:32:4d:67:d8:02:cf:16:50:c1:b1:
                    89:05:05:f8:e9:3e:5a:8d:fe:fe:9f:8f:87:9f:bc:
                    b2:86:7c:ce:0a:08:87:25:94:0a:84:b1:7b:d1:c1:
                    6b:ef:58:23:26:91:d4:df:06:68:e1:eb:8b:57:18:
                    33:50:41:c7:ae:d7:00:a9:94:a3:0a:41:e1:ba:f6:
                    3c:20:e7:c7:23:8d:6d:e1:b6:00:1b:88:69:ae:9c:
                    8f:80:7d:fd:48:51:71:fd:9f:4d:f1:c1:57:d1:2e:
                    92:48:ad:9c:86:e7:4e:72:78:da:a2:f3:d4:2c:9b:
                    b8:07:86:49:87:36:e4:2e:69:9c:2f:06:bf:73:5c:
                    ee:31:57:ac:1d:7d:36:a0:c7:51:54:e3:e3:47:75:
                    9b:77:b3:d0:ec:00:9e:9f:8b:69:3a:d4:2b:33:8b:
                    18:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D7:53:C8:22:4A:0E:68:AC:AF:6B:6F:6F:5B:72:63:41:3A:F4:81
            X509v3 Authority Key Identifier:
                keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:84:ec:97:ca:8e:1d:60:da:47:81:35:f8:3e:ad:d1:d9:ef:
         ce:b0:09:47:f3:28:d2:7e:a4:cc:2f:52:02:81:d4:49:e8:5c:
         27:64:f3:79:35:76:14:05:72:52:dc:8e:58:c0:68:e3:11:ab:
         86:6d:b0:be:63:5e:72:0f:8b:ab:8d:e2:44:bf:fc:2c:74:be:
         57:eb:fe:8c:24:83:f6:0b:f4:70:0b:bf:46:bf:02:28:80:76:
         8a:7d:c9:47:53:e4:c8:d7:a8:c0:3c:ef:5a:63:9f:6e:e7:81:
         e9:d7:53:81:55:99:01:d2:b2:72:b1:71:4f:18:1a:36:e6:a8:
         8c:5a:cc:6d:98:65:9a:fa:a0:86:2f:10:c8:4b:43:b3:da:d9:
         28:f3:ff:41:87:99:0c:38:f3:2b:ab:00:db:51:9b:60:42:93:
         63:a6:c0:b1:b2:83:8d:27:9d:d6:3d:a5:91:9d:af:99:d1:f4:
         6e:17:8c:6d:d8:00:46:51:67:55:bf:07:fe:5c:dc:f2:d3:0e:
         28:29:0e:3b:d4:01:a0:ee:b0:b2:c5:1f:f1:21:8f:9e:ab:cc:
         5e:02:43:b1:93:5a:69:d3:ee:65:02:a5:7c:36:80:15:86:6d:
         51:3c:e3:09:bf:56:bd:67:d8:7e:4f:9c:bc:76:89:1c:af:94:
         2e:6c:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:44:32 2025 by rpki-client