Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
File:                     ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft (raw, json)
Hash identifier:          dfen6OMSOOws0Tg6ovUMa7T0Eb2aH1gLnbtE5OFoNSo=
Subject key identifier:   65:88:8A:84:8E:1C:0C:05:C3:25:A5:EC:74:B6:80:2D:3C:21:9A:25
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Certificate issuer:       /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial:       0E2D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
Manifest number:          0E23
Signing time:             Wed 10 Sep 2025 01:00:38 +0000
Manifest this update:     Wed 10 Sep 2025 01:00:37 +0000
Manifest next update:     Fri 12 Sep 2025 01:00:37 +0000
Files and hashes:         1: ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl (hash: N58p3t9JTgl7hwkUzcKuYOUA7+K23zbnkHjvC2zsrGc=)
                          2: 8378B942986E11EBA9B2860AF8AEA228.roa (hash: DCXxXlW0spouErSs20DWzGFXGGBNaPXmr93oX+0glto=)
                          3: 90FDB810980F11EBAB14840FF8AEA228.roa (hash: ds3qrAkDtscjN+f/zFO0WydLzwA1BWtOcz3cojiECQw=)
                          4: 256DF7EC042E11EB8295AC11F8AEA228.roa (hash: oTPzm4i8uNZ00YlCZDea9uUazbu6kMoUCNcJkTTMdGU=)
                          5: B13DE26C980F11EBBA26A90FF8AEA228.roa (hash: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=)
                          6: 86F1AB563B6911EEA5032D7A4AD9E6FC.roa (hash: tXTkl36K5XLn7WgTr9rni780MBAg7Xu71NqmtnAIntU=)
                          7: 3FEDB4D43B6911EEA1EC28794AD9E6FC.roa (hash: Urr1+RPeSWBQ633dZAK+HE5qMEPCK2i7hu69WdCyFmE=)
                          8: 54554C04042E11EB814EE311F8AEA228.roa (hash: onUIXvOiTLaHtKeCxm3b6uqCM95dsnBo0FQxUaZDWI4=)
                          9: 159996B2082511ED8BA38C86F1222468.roa (hash: EKcGWQb8zxFfpKmxxPcqFEC27AcHuQOygLKxgR7xr7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 12 Sep 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3629 (0xe2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAR, serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
        Validity
            Not Before: Sep 10 01:00:37 2025 GMT
            Not After : Sep 12 01:00:37 2025 GMT
        Subject: CN=68c0cdb6-a7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:24:aa:8d:be:b9:24:e8:16:70:c4:14:57:a1:
                    6f:21:ec:ed:66:c0:9b:72:20:61:67:31:71:2c:73:
                    eb:3a:7d:77:36:8b:df:23:41:88:33:27:5b:fb:a8:
                    f0:ce:41:f8:f0:2c:d1:a9:de:8f:bc:f1:a8:f0:88:
                    0d:35:cc:36:be:2a:23:d0:67:35:c2:79:f3:14:01:
                    80:45:a2:2c:a4:06:26:9a:be:a3:c2:65:be:96:b9:
                    ea:b0:f6:8f:c1:54:de:c6:7c:fc:01:4c:26:42:d3:
                    f3:3e:77:f6:e2:6d:17:c9:c0:46:d8:ea:89:9b:fc:
                    93:e9:57:66:e4:a0:2c:c1:3b:24:60:d0:3d:9b:00:
                    7a:f5:1a:c7:7e:c1:84:a1:79:30:98:56:37:b9:07:
                    11:ef:6d:a1:1a:bd:40:83:c2:bf:c9:73:29:f6:dd:
                    8b:c3:37:34:79:b1:22:18:c5:ab:5a:aa:9d:f6:57:
                    cc:46:33:43:94:2b:eb:9f:93:f1:59:17:4b:64:0f:
                    7d:2e:5c:5a:13:d7:38:b2:e7:77:37:6e:90:bb:05:
                    f2:e0:d8:3e:01:36:af:d6:38:b2:b0:4a:13:1d:9e:
                    9d:6a:3b:27:68:af:31:42:63:52:41:83:48:6d:1c:
                    51:7d:ba:ec:6b:e9:a4:e7:37:8e:c5:08:b1:5c:91:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:88:8A:84:8E:1C:0C:05:C3:25:A5:EC:74:B6:80:2D:3C:21:9A:25
            X509v3 Authority Key Identifier:
                keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:36:c5:5a:ac:af:e4:4f:b8:11:bf:4a:f0:ed:46:db:d5:a6:
         2a:83:f6:9f:3e:08:d1:96:a6:d8:1f:90:39:ec:75:f2:a4:75:
         f3:36:01:b0:a2:40:1d:d2:2a:f3:02:76:07:48:9f:83:d5:e9:
         a8:34:9d:56:f2:eb:45:ea:d4:54:f2:14:e5:a9:11:8d:e8:86:
         35:2c:1a:ab:f1:08:65:0c:55:2f:67:4c:43:c1:30:38:cf:3a:
         7c:b2:2d:67:75:79:06:09:a5:bd:2b:f6:28:f2:05:10:15:cf:
         2a:1c:26:64:7c:97:0b:79:84:39:41:15:4b:3a:db:e1:22:c8:
         af:40:a3:87:6b:20:10:55:e0:d7:53:e6:14:40:05:0f:42:21:
         67:30:19:76:f5:64:9e:c5:eb:e9:36:d7:11:47:e9:ba:6b:17:
         9d:ce:32:d1:14:09:f5:4f:68:53:d7:05:70:91:82:88:f5:49:
         4f:01:bb:95:29:68:91:cf:2e:70:5d:94:5e:b4:b5:17:b4:1f:
         c0:3f:61:eb:ba:ff:ad:30:7d:b4:80:e4:55:2f:dc:cb:b3:c3:
         7f:60:c0:5a:89:fb:a7:ee:86:fb:ce:29:5e:a4:87:c9:52:b6:
         01:14:7d:8a:58:be:5e:99:68:7d:41:79:25:d5:1a:21:b0:92:
         26:db:f2:f1
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDi0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTlCOEVBUjExMC8GA1UEBRMoOEE5Rjg2MDUwQjRBNEU0RTkyNURFNkZGRDkyQUMz
NDgzMzNFMDcxMjAeFw0yNTA5MTAwMTAwMzdaFw0yNTA5MTIwMTAwMzdaMBgxFjAU
BgNVBAMTDTY4YzBjZGI2LWE3YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnJKqNvrkk6BZwxBRXoW8h7O1mwJtyIGFnMXEsc+s6fXc2i98jQYgzJ1v7
qPDOQfjwLNGp3o+88ajwiA01zDa+KiPQZzXCefMUAYBFoiykBiaavqPCZb6Wueqw
9o/BVN7GfPwBTCZC0/M+d/bibRfJwEbY6omb/JPpV2bkoCzBOyRg0D2bAHr1Gsd+
wYSheTCYVje5BxHvbaEavUCDwr/Jcyn23YvDNzR5sSIYxataqp32V8xGM0OUK+uf
k/FZF0tkD30uXFoT1ziy53c3bpC7BfLg2D4BNq/WOLKwShMdnp1qOydorzFCY1JB
g0htHFF9uuxr6aTnN47FCLFckYP3AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUZYiK
hI4cDAXDJaXsdLaALTwhmiUwHwYDVR0jBBgwFoAUip+GBQtKTk6SXeb/2SrDSDM+
BxIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5QjhFLzBFNDczODBDQjEyMzExRTU5MTQ0NjE0QUY4QUVBMjI4L2lwLUdC
UXRLVGs2U1hlYl8yU3JEU0RNLUJ4SS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2lwLUdCUXRLVGs2U1hlYl8yU3JEU0RNLUJ4SS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTlCOEUvMEU0NzM4MENCMTIzMTFFNTkxNDQ2MTRBRjhBRUEy
MjgvaXAtR0JRdEtUazZTWGViXzJTckRTRE0tQnhJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqNsVarK/kT7gRv0rw7Ubb1aYqg/afPgjR
lqbYH5A57HXypHXzNgGwokAd0irzAnYHSJ+D1emoNJ1W8utF6tRU8hTlqRGN6IY1
LBqr8QhlDFUvZ0xDwTA4zzp8si1ndXkGCaW9K/Yo8gUQFc8qHCZkfJcLeYQ5QRVL
OtvhIsivQKOHayAQVeDXU+YUQAUPQiFnMBl29WSexevpNtcRR+m6axedzjLRFAn1
T2hT1wVwkYKI9UlPAbuVKWiRzy5wXZRetLUXtB/AP2Hruv+tMH20gORVL9zLs8N/
YMBaifun7ob7zilepIfJUrYBFH2KWL5emWh9QXkl1RohsJIm2/Lx
-----END CERTIFICATE-----
Generated at Wed Sep 10 19:30:05 2025 by rpki-client