Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
File:                     QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft (raw, json)
Hash identifier:          fRSDV41hgfw9VQY88m9JNJeMxS5Fvzvn4TXy90HgalQ=
Subject key identifier:   D5:CC:8F:42:A6:A7:A0:99:B0:48:01:8B:D4:51:A3:AC:C1:9B:25:C8
Authority key identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
Certificate issuer:       /CN=F36D2FA4AR/serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
Certificate serial:       85
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
Manifest number:          83
Signing time:             Tue 21 Oct 2025 05:00:05 +0000
Manifest this update:     Tue 21 Oct 2025 05:00:04 +0000
Manifest next update:     Thu 23 Oct 2025 05:00:04 +0000
Files and hashes:         1: QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl (hash: y5l4KjqvcLnsmNFCKQNI9BZcsGyjS+qjfx4BAIVLDUo=)
                          2: DD733EA6501911F081EC1BD5DAE4EC9C.roa (hash: pTSTw7CMzw5Tzo3x06Bd0K5rfFXqGfOJjDBXR7lNILg=)
                          3: 702497F0502311F0A0A1EC91DAE4EC9C.roa (hash: TKThQssce2usSG8fqrLv7uZqNWwbS2fbqTY3b7wi6xo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                          rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Oct 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AR, serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
        Validity
            Not Before: Oct 21 05:00:04 2025 GMT
            Not After : Oct 23 05:00:04 2025 GMT
        Subject: CN=68f71355-7725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:f9:80:1c:96:fd:1b:70:c4:ee:b7:35:fd:
                    f2:a3:5f:2d:8f:1d:ba:ce:ee:de:2f:62:b0:b0:b0:
                    3a:39:35:8e:c7:a8:bd:72:54:dc:30:86:23:51:97:
                    80:c9:ec:9c:ee:28:bc:4a:6a:0a:ad:c9:28:9e:e4:
                    bc:df:2e:74:f4:f9:d3:82:09:9e:73:25:4c:0e:8a:
                    7e:5f:b1:b1:0f:b4:ad:b0:ec:f4:f4:5b:43:09:93:
                    50:15:26:02:1f:44:86:92:60:9f:ab:c7:73:38:43:
                    63:ce:62:1e:73:4c:12:22:6c:24:eb:eb:10:53:34:
                    57:98:dc:eb:75:c7:dd:ef:54:e1:07:c4:7a:37:18:
                    c0:0e:38:7d:23:1e:dc:58:06:94:79:ac:2b:57:fc:
                    17:1f:13:4b:7a:ae:cb:32:77:c3:36:20:f0:93:fb:
                    be:6d:fd:e0:98:07:3e:5a:89:bc:cf:7e:5f:15:eb:
                    fb:d6:37:66:82:fc:a5:3f:2c:7a:ad:a0:0d:72:40:
                    51:ea:35:20:a1:68:39:c6:c6:f5:ab:f8:69:71:b2:
                    da:0b:a3:8e:8b:aa:7f:a2:14:34:90:44:2e:32:83:
                    01:b2:15:f2:47:21:7e:f5:1f:12:c3:0d:b4:f9:d6:
                    d3:f6:3a:61:4b:2b:69:2a:25:84:5d:88:df:d0:b3:
                    9a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CC:8F:42:A6:A7:A0:99:B0:48:01:8B:D4:51:A3:AC:C1:9B:25:C8
            X509v3 Authority Key Identifier:
                keyid:41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:75:66:42:5c:fd:fe:db:27:0f:68:79:8e:0f:18:2c:6d:fc:
         89:05:53:34:3d:e7:24:65:b2:a9:42:cd:56:36:8e:b9:45:2d:
         2b:48:0c:81:3a:f6:77:87:91:af:45:79:95:b2:76:f6:93:a9:
         3f:5b:98:07:54:5d:fd:4b:fe:f2:61:fb:04:61:d0:df:ca:42:
         10:b8:b5:a7:61:f1:8d:40:67:12:9b:02:ec:a7:1f:ed:b9:e7:
         9a:7d:78:b7:dd:8b:45:97:60:5f:e6:cd:d1:5e:3b:1c:13:94:
         4d:10:fc:e4:57:4e:6d:23:21:b9:0a:9b:a4:f3:12:22:a0:11:
         3b:3f:70:06:ba:9e:16:ad:a0:04:d5:5e:5a:92:00:fa:1c:05:
         85:a2:47:67:38:59:e1:f8:8b:5a:25:fd:ad:6b:22:f0:a6:6f:
         c0:2d:15:4b:e1:b1:f3:d9:06:de:57:8c:95:1c:e6:36:e7:ee:
         20:40:0e:77:82:6b:db:d6:4e:fe:aa:b1:83:6c:8a:b0:b2:95:
         8d:d8:ee:cc:c1:ac:2a:e8:82:19:cd:a7:4c:c3:15:d6:84:a5:
         fb:16:bf:7d:25:99:d0:77:7a:80:87:41:87:79:f9:5a:e5:90:
         3a:4d:4c:bd:36:83:67:e0:1c:83:c7:79:f9:2d:99:5f:13:62:
         c5:3e:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:25:25 2025 by rpki-client