Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
File:                     At3Avw90-WSo2yJsvjP3007bAFM.mft (raw, json)
Hash identifier:          nD6V3iSJYNLdLmVJirg6fFRk+42/fG+hzpfist8C5QQ=
Subject key identifier:   87:48:C1:58:1A:D7:78:C6:0F:15:54:C8:F2:49:4E:91:EB:69:E9:03
Authority key identifier: 02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53
Certificate issuer:       /CN=F36F51F8AR/serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
Certificate serial:       08E0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
Manifest number:          08DE
Signing time:             Tue 16 Sep 2025 01:33:56 +0000
Manifest this update:     Tue 16 Sep 2025 01:33:55 +0000
Manifest next update:     Thu 18 Sep 2025 01:33:55 +0000
Files and hashes:         1: At3Avw90-WSo2yJsvjP3007bAFM.crl (hash: ge49KcGnrscZTw5yYp8Plon7TVIlFwVkZwo1GSuXsSc=)
                          2: B0D116986C8D11ECA9758ACA5A40D577.roa (hash: lTLDiHShhMe4QavSzilaN/PR1KFjgS4fLvPFpQKkp0g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                          rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2272 (0x8e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F51F8AR, serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
        Validity
            Not Before: Sep 16 01:33:55 2025 GMT
            Not After : Sep 18 01:33:55 2025 GMT
        Subject: CN=68c8be83-513d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:6f:36:a7:d8:aa:41:0d:58:15:ab:30:56:
                    52:7b:2a:48:46:12:97:9a:bb:98:8e:34:82:14:24:
                    eb:d4:15:92:12:5d:7b:30:5c:a6:63:ee:0b:60:8e:
                    77:ea:5f:7f:73:6a:e1:60:cd:fd:7f:56:aa:01:d3:
                    49:2a:e1:c8:df:60:a3:b6:11:aa:89:03:5b:10:5a:
                    91:71:5a:64:00:86:8c:9d:6a:7c:f6:08:54:ae:2c:
                    e2:8b:0d:a8:ea:d7:d5:33:d3:fc:16:3c:ea:3a:46:
                    02:76:ab:a4:bf:86:93:c1:73:9f:bd:30:fe:46:7b:
                    f0:d7:5a:e9:95:c1:82:07:7c:b2:dc:2d:2a:fc:ce:
                    cb:98:aa:33:6a:9d:18:83:94:af:c1:86:85:2d:59:
                    96:ca:29:93:fe:55:49:6b:79:0f:5d:4c:f6:2d:24:
                    88:15:e7:d1:74:e2:dd:b4:a9:15:08:17:e0:dd:6c:
                    5e:5e:e3:ae:81:c7:a1:da:bb:5a:6a:d0:a1:44:31:
                    f7:30:96:33:ba:3f:d0:c6:8c:4f:fa:e0:a8:71:46:
                    d5:cc:4b:7a:81:f2:16:d1:fc:60:b4:eb:b3:a6:38:
                    39:34:96:a4:05:15:cb:70:bf:8b:a8:b6:c1:8c:a7:
                    41:30:65:c7:a3:d5:06:4d:d7:10:13:a2:e8:28:9b:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:48:C1:58:1A:D7:78:C6:0F:15:54:C8:F2:49:4E:91:EB:69:E9:03
            X509v3 Authority Key Identifier:
                keyid:02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:68:48:b9:15:df:37:07:b1:90:eb:ac:a5:f5:62:86:cf:1e:
         63:12:7d:9b:e7:0c:92:c4:0d:f6:7e:0e:25:83:8a:38:55:15:
         7e:a2:47:7d:4b:53:a6:f0:72:78:23:ea:06:74:1a:ad:06:b4:
         75:62:ac:04:6d:a2:96:31:e5:62:fd:b7:df:d4:cf:b5:c5:53:
         55:7a:04:dc:06:50:78:6c:4f:a5:d0:41:bb:29:50:12:21:ee:
         4d:66:53:fd:64:99:96:bf:9c:75:f5:7e:fd:ad:5c:d6:bf:d9:
         ce:ca:08:79:61:3a:e8:a4:9d:5e:ac:d0:dd:11:91:be:80:c9:
         dd:0a:ed:61:73:82:0b:32:2a:90:01:21:50:df:d4:1b:9a:91:
         f0:c1:d1:d7:1a:63:2d:47:9f:98:33:ef:bd:35:56:c0:e9:2e:
         04:fa:ef:c1:7f:35:f2:ae:db:ac:4e:2c:c6:d2:56:f4:e6:d3:
         50:41:dc:34:ca:5e:fe:94:10:b9:a2:ac:7c:e9:19:4f:ee:65:
         7a:c1:68:bc:2f:9b:c3:7c:f7:7b:4e:72:0b:19:ca:07:cf:af:
         1d:41:47:28:3b:c9:18:5d:3b:ff:21:fe:6c:dd:bb:d6:dd:0e:
         b7:c9:5c:3e:78:eb:fe:40:35:80:27:9e:e5:eb:3b:8b:34:73:
         b7:27:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:46:32 2025 by rpki-client