Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft
File:                     H_M-JaMrRpH3I_hQENNsHRmtJhM.mft (raw, json)
Hash identifier:          Q2TqFm3uO5tuOrEIiN3zE1XpN3wJoAbrJD1cz9D6zUY=
Subject key identifier:   20:C5:D4:53:13:B1:A7:AD:38:DB:92:6E:4A:F5:2F:D9:E6:E5:75:C6
Authority key identifier: 1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13
Certificate issuer:       /CN=F36C65C6AR/serialNumber=1FF33E25A32B4691F723F85010D36C1D19AD2613
Certificate serial:       0676
Authority info access:    rsync://rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft
Manifest number:          0672
Signing time:             Sat 01 Nov 2025 02:20:27 +0000
Manifest this update:     Sat 01 Nov 2025 02:20:26 +0000
Manifest next update:     Mon 03 Nov 2025 02:20:26 +0000
Files and hashes:         1: H_M-JaMrRpH3I_hQENNsHRmtJhM.crl (hash: ZiSotQvCx1LXLIut8h3m1nZTu9f7Wg4hWwFw9NR/4Q4=)
                          2: 945DC79A23C111ED8AF760CAF1222468.roa (hash: oeRPpf6MWdOyBYB//e/bum3Rw2HHTIkr2se6ssnUJVc=)
                          3: FA9B731023BF11ED84295CC5F1222468.roa (hash: YC8KXYNCaCNhKTJ0A821cYNyvFRRYAF9H6w9FgItikQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft
                          rsync://rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 03 Nov 2025 02:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1654 (0x676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C65C6AR, serialNumber=1FF33E25A32B4691F723F85010D36C1D19AD2613
        Validity
            Not Before: Nov  1 02:20:26 2025 GMT
            Not After : Nov  3 02:20:26 2025 GMT
        Subject: CN=69056e6b-aaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:44:1f:ae:00:c5:1d:7c:11:58:6e:fc:dc:
                    fb:8b:ac:9e:c2:38:af:b3:97:10:9b:e1:dd:03:83:
                    92:60:e3:16:8c:35:27:84:35:c3:1d:37:de:6b:35:
                    00:f4:c1:13:c4:5e:1c:74:c0:03:f0:12:dc:66:d1:
                    c4:50:9a:03:7c:8b:54:3c:f9:cb:33:83:46:55:cc:
                    e9:dc:06:45:1f:70:9d:6a:72:6a:07:cd:98:2e:13:
                    9f:d2:4e:7c:24:bf:ac:25:66:40:25:82:82:c7:7f:
                    f9:18:8f:0f:fe:4c:04:16:ee:c1:1d:0d:e8:b2:5f:
                    4b:e1:8e:a9:47:68:6f:ad:06:30:98:5e:61:3b:8c:
                    7e:70:b2:ed:98:38:14:b6:be:f0:d9:ba:55:49:13:
                    80:65:e8:1a:71:02:8b:53:8c:bc:2d:07:43:14:f4:
                    48:81:c1:ba:20:7e:b7:cc:8a:11:1e:85:21:8a:a9:
                    62:c2:25:be:06:ce:c5:bc:5e:6c:1f:1c:15:f6:5f:
                    db:1e:69:80:00:21:36:53:b9:7f:d5:c8:0c:b9:b9:
                    75:a0:79:5e:ab:d7:9c:bf:e7:0d:22:03:63:bf:20:
                    d0:0d:35:8c:cb:f3:3a:f4:e5:78:14:b4:36:35:d6:
                    bb:1e:8d:5b:e9:69:3c:52:0f:53:a7:26:52:0e:c9:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C5:D4:53:13:B1:A7:AD:38:DB:92:6E:4A:F5:2F:D9:E6:E5:75:C6
            X509v3 Authority Key Identifier:
                keyid:1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:bb:6e:fe:f6:ca:6e:3a:aa:eb:53:28:3d:b1:b5:fc:18:4e:
         7b:92:40:0a:0e:0f:9b:f0:78:ca:02:9c:38:8b:fd:ae:51:42:
         7b:a8:ed:6b:16:d5:68:99:25:bd:fe:01:58:77:08:60:c1:2b:
         f1:3e:34:64:b1:0c:3a:95:40:c6:3b:f2:85:1d:b0:19:02:d6:
         ee:8c:44:82:66:bd:73:bc:a6:b2:c9:1c:48:ba:c3:5e:7b:05:
         18:b6:09:75:06:7e:f2:dc:86:6c:e6:b6:77:69:cc:81:ed:28:
         30:b5:b8:d2:0a:7e:ec:80:c8:a7:17:c4:13:e4:5d:bd:1a:6d:
         c9:89:a9:a3:1a:71:7e:af:cb:7c:e7:ed:e4:46:81:19:68:71:
         1a:9e:d5:38:b4:13:ae:b6:74:b8:91:cd:c4:ab:62:26:07:ee:
         b2:f2:89:26:bd:1f:fe:a9:c1:d2:ad:e7:08:44:40:18:98:4f:
         2f:e6:aa:b6:f3:0e:10:e9:6f:b3:d8:d3:d9:64:55:e8:35:4c:
         08:c7:52:76:09:c2:59:e9:e1:b1:bb:61:43:2e:fb:01:ec:53:
         a5:08:68:b8:c3:29:f5:f1:18:f2:31:2a:8e:14:2f:a3:3a:50:
         88:0d:93:e4:b7:c9:30:ff:5c:2a:63:00:04:cb:83:84:8c:8b:
         e9:3e:ad:4e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzY1QzZBUjExMC8GA1UEBRMoMUZGMzNFMjVBMzJCNDY5MUY3MjNGODUwMTBEMzZD
MUQxOUFEMjYxMzAeFw0yNTExMDEwMjIwMjZaFw0yNTExMDMwMjIwMjZaMBgxFjAU
BgNVBAMTDTY5MDU2ZTZiLWFhZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLnUQfrgDFHXwRWG783PuLrJ7COK+zlxCb4d0Dg5Jg4xaMNSeENcMdN95r
NQD0wRPEXhx0wAPwEtxm0cRQmgN8i1Q8+cszg0ZVzOncBkUfcJ1qcmoHzZguE5/S
Tnwkv6wlZkAlgoLHf/kYjw/+TAQW7sEdDeiyX0vhjqlHaG+tBjCYXmE7jH5wsu2Y
OBS2vvDZulVJE4Bl6BpxAotTjLwtB0MU9EiBwbogfrfMihEehSGKqWLCJb4GzsW8
XmwfHBX2X9seaYAAITZTuX/VyAy5uXWgeV6r15y/5w0iA2O/INANNYzL8zr05XgU
tDY11rsejVvpaTxSD1OnJlIOye4NAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUIMXU
UxOxp60425JuSvUv2ebldcYwHwYDVR0jBBgwFoAUH/M+JaMrRpH3I/hQENNsHRmt
JhMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2NUM2LzExRkY2NjUyQ0Y1QjExRUJCNEIzQ0UxNkY4QUVBMjI4L0hfTS1K
YU1yUnBIM0lfaFFFTk5zSFJtdEpoTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0hfTS1KYU1yUnBIM0lfaFFFTk5zSFJtdEpoTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzY1QzYvMTFGRjY2NTJDRjVCMTFFQkI0QjNDRTE2RjhBRUEy
MjgvSF9NLUphTXJScEgzSV9oUUVOTnNIUm10SmhNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxu27+9spuOqrrUyg9sbX8GE57kkAKDg+b
8HjKApw4i/2uUUJ7qO1rFtVomSW9/gFYdwhgwSvxPjRksQw6lUDGO/KFHbAZAtbu
jESCZr1zvKayyRxIusNeewUYtgl1Bn7y3IZs5rZ3acyB7SgwtbjSCn7sgMinF8QT
5F29Gm3JiamjGnF+r8t85+3kRoEZaHEantU4tBOutnS4kc3Eq2ImB+6y8okmvR/+
qcHSrecIREAYmE8v5qq28w4Q6W+z2NPZZFXoNUwIx1J2CcJZ6eGxu2FDLvsB7FOl
CGi4wyn18RjyMSqOFC+jOlCIDZPkt8kw/1wqYwAEy4OEjIvpPq1O
-----END CERTIFICATE-----
Generated at Sun Nov 2 03:42:18 2025 by rpki-client