Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
File:                     TFQzRWcaPQxAiChKkfx3-2zGsGg.mft (raw, json)
Hash identifier:          1Me+K6f2ypA1kd7Q3fCvtf8MOwsr0bzZtPNjB5lTHyU=
Subject key identifier:   8D:8B:7D:7A:0B:22:DF:C9:E0:D9:D2:1D:BD:05:9A:2A:17:0F:1B:8D
Authority key identifier: 4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68
Certificate issuer:       /CN=F3668231AR/serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
Certificate serial:       0BE8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
Manifest number:          0BE7
Signing time:             Tue 16 Sep 2025 01:09:29 +0000
Manifest this update:     Tue 16 Sep 2025 01:09:29 +0000
Manifest next update:     Thu 18 Sep 2025 01:09:29 +0000
Files and hashes:         1: TFQzRWcaPQxAiChKkfx3-2zGsGg.crl (hash: 6/HNu64NQzLhqEa/oeYKawyBrvNCeo67cacq05Q0MbE=)
                          2: DA08B89A6B8E11E7952D2166F8AEA228.roa (hash: rve7QOec9FqmRJKLI6WNqhqnq4CSIGF+XgPlE64aa9A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
                          rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3048 (0xbe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AR, serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
        Validity
            Not Before: Sep 16 01:09:29 2025 GMT
            Not After : Sep 18 01:09:29 2025 GMT
        Subject: CN=68c8b8c9-65e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:0a:8d:71:9f:df:28:cc:d8:6d:23:83:64:
                    47:2b:21:75:f6:82:9f:5d:d8:0a:df:fd:0b:57:6c:
                    b7:4a:cb:f3:0f:95:ea:b5:e9:ae:0b:05:86:f5:18:
                    c8:56:a0:60:66:49:8e:54:ae:48:df:f8:ce:be:c8:
                    db:4e:4e:d5:14:b9:5d:9e:44:e8:67:27:80:27:8e:
                    26:bb:78:9a:08:1c:35:c6:df:69:b7:e3:14:4b:f3:
                    4b:52:07:51:67:f1:44:c8:8a:4d:67:bf:eb:16:50:
                    1d:24:70:ba:44:d8:cb:87:4a:1c:38:21:c6:69:5f:
                    33:0c:0e:93:d3:11:75:80:27:b7:f2:1c:e4:58:aa:
                    19:a7:cb:a1:28:8b:05:9f:ee:18:ee:0a:e9:d4:7e:
                    0b:fd:47:5f:99:a6:3e:1a:43:7c:1c:ed:98:db:1d:
                    e1:7e:36:ac:72:cd:0b:3a:4a:cc:0c:d0:df:32:99:
                    bf:d7:56:a5:ea:d6:95:9e:42:ab:c1:cc:34:98:1c:
                    9e:e5:a5:30:f0:44:24:a6:ca:cb:6a:e9:60:b2:eb:
                    2c:fe:53:10:5b:62:7d:ae:51:47:1a:7a:eb:ac:f7:
                    5b:82:83:f4:98:7d:37:d9:3a:1a:76:f9:37:1b:f0:
                    b3:d5:ed:f4:89:39:f1:16:5c:db:1f:40:8d:49:c8:
                    d4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8B:7D:7A:0B:22:DF:C9:E0:D9:D2:1D:BD:05:9A:2A:17:0F:1B:8D
            X509v3 Authority Key Identifier:
                keyid:4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:85:8c:7a:04:79:68:48:c9:b6:40:d5:0d:e1:fb:12:9c:a9:
         df:84:80:46:55:f7:7d:9d:80:0c:90:07:01:0a:f1:5a:40:ed:
         9d:c0:91:55:7b:df:3b:9d:9d:e6:f5:ee:51:94:1a:42:1f:ff:
         1f:a8:8e:b2:06:03:e5:9e:4c:89:73:c2:7c:11:85:83:21:63:
         c3:df:f5:6a:b2:ed:cc:84:fb:a1:f8:20:84:15:e9:40:87:92:
         26:ef:c5:d3:84:f7:1c:10:53:8e:d6:45:e3:d7:7c:9c:58:ca:
         90:c6:ab:0c:37:7a:96:f6:c5:89:1d:05:ff:08:1b:cf:4e:3b:
         c3:76:6b:4e:93:77:d1:2c:96:c4:e3:48:30:33:cd:57:a2:ad:
         d2:79:bb:5b:8c:14:c5:b7:aa:85:59:c5:89:b3:3a:92:81:40:
         72:21:37:83:02:8a:ac:e5:e6:13:62:2a:35:32:23:b1:5d:f5:
         46:a0:ab:46:8c:8c:ab:64:61:7e:8e:71:0f:44:cc:f6:3e:21:
         69:c2:a5:d1:6f:a8:00:1d:47:f4:85:e8:20:a7:ab:32:3f:02:
         52:46:4c:c9:ad:c9:bc:6e:66:8e:02:38:0c:8a:43:91:e0:5b:
         8c:67:dc:7e:e4:a4:45:12:71:9b:4e:8f:96:97:ac:80:a3:1a:
         b7:99:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:14:45 2025 by rpki-client