Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
File:                     At3Avw90-WSo2yJsvjP3007bAFM.mft (raw, json)
Hash identifier:          nlL77bCnjJV2Svc1j3rw5hdDnLI2fi/ZrArEMIC5yuI=
Subject key identifier:   94:30:0A:E9:B6:FF:79:C9:13:49:B1:C1:6E:E3:95:C9:9E:32:73:18
Authority key identifier: 02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53
Certificate issuer:       /CN=F36F51F8AR/serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
Certificate serial:       0919
Authority info access:    rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
Manifest number:          0917
Signing time:             Tue 11 Nov 2025 05:48:39 +0000
Manifest this update:     Tue 11 Nov 2025 05:48:38 +0000
Manifest next update:     Thu 13 Nov 2025 05:48:38 +0000
Files and hashes:         1: At3Avw90-WSo2yJsvjP3007bAFM.crl (hash: R5s01XkgtHfwiyBYYM6tSP6NKr0jAyaenbbU4kHRdvc=)
                          2: B0D116986C8D11ECA9758ACA5A40D577.roa (hash: lTLDiHShhMe4QavSzilaN/PR1KFjgS4fLvPFpQKkp0g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                          rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 13 Nov 2025 04:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329 (0x919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F51F8AR, serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
        Validity
            Not Before: Nov 11 05:48:38 2025 GMT
            Not After : Nov 13 05:48:38 2025 GMT
        Subject: CN=6912ce37-acc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b8:1b:6f:2f:ce:7f:74:f7:30:9b:77:ca:75:
                    80:58:ad:06:29:45:4d:28:74:62:3f:87:d9:c4:32:
                    f4:7d:4a:43:49:6d:55:c3:e2:7a:39:ee:10:07:c2:
                    f1:38:74:ae:af:06:d8:ad:ad:a4:42:c6:d4:bf:07:
                    bc:83:ef:a8:35:14:0f:6e:e1:af:fe:ce:3c:08:09:
                    a8:cd:d9:60:9e:4b:18:7c:6b:2a:01:45:b2:d2:61:
                    75:d0:11:60:5a:75:67:ae:a9:98:0b:1f:f1:7a:2a:
                    fc:b7:be:0f:76:6e:80:5e:6d:af:b5:37:f9:72:66:
                    33:7d:36:e7:5f:42:8b:57:21:97:ec:93:07:88:27:
                    83:8d:46:13:1f:e6:1e:6a:4a:e5:b2:02:9b:4e:57:
                    2a:4c:2d:db:6b:e0:40:20:ac:41:c6:a0:33:d7:bb:
                    6e:69:f9:a7:92:a7:05:f2:f0:fc:b6:2f:3b:f0:a2:
                    9d:b4:91:18:8d:2d:9b:52:17:de:83:78:21:9c:8a:
                    24:38:15:2f:b4:a8:24:aa:bb:f0:5f:99:9b:28:31:
                    19:de:6a:f6:f8:f7:d8:49:a7:db:cd:ea:f1:20:64:
                    86:a7:7b:a0:27:dc:a0:15:1d:ab:53:3b:81:a2:b0:
                    0f:56:f7:e6:1d:fa:7e:da:04:9a:63:93:9a:e0:9e:
                    16:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:30:0A:E9:B6:FF:79:C9:13:49:B1:C1:6E:E3:95:C9:9E:32:73:18
            X509v3 Authority Key Identifier:
                keyid:02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:88:c4:31:c8:3f:80:1c:39:3f:54:99:df:35:20:2a:37:be:
         13:b9:fe:aa:68:a9:c8:4f:1f:17:d5:43:37:87:01:f0:db:84:
         78:4d:fb:9c:8e:30:a3:67:d5:9c:78:61:fe:09:73:6c:1a:3a:
         0f:f3:3a:16:94:0b:21:fb:ba:3f:97:df:c5:fb:6c:ea:b4:e9:
         43:61:87:92:3f:c9:49:af:6c:b2:86:63:69:cb:e9:48:17:ba:
         a9:55:5f:5e:76:da:05:d4:da:7f:11:0a:b7:00:e4:61:a3:b5:
         5f:90:e6:38:c4:dc:81:5a:47:05:65:d2:64:7d:94:80:6d:6b:
         90:49:d8:ea:5c:37:b5:8b:89:02:7c:1d:97:26:66:1f:38:81:
         25:b1:04:e5:9a:f0:68:8f:e6:46:53:47:f1:1b:21:d4:78:ed:
         d8:1c:6c:5b:10:99:0d:c5:86:8a:f1:40:54:b1:2b:75:87:ff:
         34:98:97:1c:5c:38:70:81:99:2e:49:27:dd:bb:5e:9e:4d:b3:
         18:20:7e:15:30:19:ec:07:03:f3:49:9a:68:07:a1:07:7c:f2:
         60:47:f3:6b:69:4f:f9:41:71:a8:68:64:73:0c:fc:d0:67:19:
         f7:c2:c1:5e:77:13:8b:68:3d:96:4c:d8:96:aa:b5:97:10:a7:
         73:33:ea:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 22:19:46 2025 by rpki-client