Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
File:                     POdKxSWrybUFEx5W069Lqgyoa8c.mft (raw, json)
Hash identifier:          OFWR52Dw9B9IpLLNZglBS3s1jAk7VdlhtqsgYU1x7fk=
Subject key identifier:   3A:FE:15:04:27:CD:0E:5F:E5:E8:15:AB:35:B6:30:D0:1C:CE:13:32
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Certificate issuer:       /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial:       02FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
Manifest number:          02FA
Signing time:             Tue 04 Nov 2025 05:08:34 +0000
Manifest this update:     Tue 04 Nov 2025 05:08:33 +0000
Manifest next update:     Thu 06 Nov 2025 05:08:33 +0000
Files and hashes:         1: POdKxSWrybUFEx5W069Lqgyoa8c.crl (hash: LAN+PVrm5QxWLJfHwx6Uqs9P6xRMf8/yDcacFAR2whQ=)
                          2: AF323FA6BEB611EE92751B56775412E6.roa (hash: GK2/9/UfmXeWntRnu6M2Z7FCwh1Nn+0g0buRneYltSM=)
                          3: 40F84818776811EEA27107754AD9E6FC.roa (hash: nFqZ/v55EZimpFy2xDwmiE1oDV8eSlURy0csO3fvt1E=)
                          4: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (hash: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614DFDAF, serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
        Validity
            Not Before: Nov  4 05:08:33 2025 GMT
            Not After : Nov  6 05:08:33 2025 GMT
        Subject: CN=69098a52-3485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:74:cf:49:ff:64:85:28:2b:da:42:40:3a:
                    db:e8:25:ca:33:91:ad:5c:07:51:f1:20:e0:1b:3c:
                    fb:15:26:18:b4:a3:4e:15:11:15:6b:b8:39:95:7f:
                    36:7f:98:91:5d:5a:9d:90:3d:0e:e6:8f:8e:14:59:
                    5c:f2:d1:45:16:ce:74:76:34:ed:6d:be:8e:fb:cf:
                    13:da:da:b6:7a:27:61:5b:08:f2:7e:5c:04:2f:9c:
                    28:41:bf:70:df:18:fc:d1:a9:33:c1:4f:1e:c0:9f:
                    1b:c0:5a:90:1b:fd:e8:73:2b:33:14:69:4c:95:16:
                    44:98:88:52:a4:0a:b0:bb:56:8a:72:6d:17:87:ea:
                    c5:c6:c7:af:eb:d6:85:d0:8c:b5:03:39:c5:af:7f:
                    83:8d:68:e8:b6:27:aa:02:30:11:ae:23:6f:7e:97:
                    6c:d1:f4:49:06:5d:1e:b4:18:bb:dc:55:59:ee:9a:
                    5d:54:2a:08:12:dd:dd:5d:c7:4f:67:a3:f6:ce:df:
                    be:cc:54:19:f7:55:05:b6:b4:b5:98:20:8f:b6:63:
                    6d:b1:2c:80:0c:f2:92:24:59:27:91:5e:c7:5a:08:
                    86:75:77:c1:62:8f:bc:f3:5f:5d:8d:b8:8a:e2:b6:
                    0e:75:9c:5f:b4:cb:a1:10:05:f0:79:f1:77:26:06:
                    4d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FE:15:04:27:CD:0E:5F:E5:E8:15:AB:35:B6:30:D0:1C:CE:13:32
            X509v3 Authority Key Identifier:
                keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:0d:98:0e:c0:e5:e7:22:d8:11:c8:6f:05:59:ee:5e:d9:
         1c:3e:43:e0:33:7c:fc:a4:ea:28:cc:e5:60:01:96:1f:f1:3c:
         0e:6e:37:2f:3f:d9:9d:9a:db:af:5a:7b:d2:b7:94:ab:b5:3b:
         2b:47:87:a8:3c:6b:42:eb:d6:ad:91:05:e2:0f:76:2d:9c:2a:
         16:1f:64:4d:ea:dd:5d:60:b8:05:37:18:d7:00:94:fb:6a:9b:
         f6:9b:10:a1:6d:3b:c3:ee:a4:64:30:f9:e0:83:59:ed:99:72:
         e3:5c:36:e6:4b:1d:29:31:ec:b1:67:f8:38:09:d9:b6:7f:5b:
         7d:dc:53:cc:95:08:68:87:3e:b8:63:96:4c:ec:bb:88:41:58:
         15:d7:fb:ec:e1:64:75:26:6c:d4:2b:55:d4:fb:75:1d:ad:d2:
         b8:2d:81:bd:31:24:6b:5b:26:22:02:d2:17:62:e3:9b:99:95:
         73:74:f0:89:c3:9c:4c:7a:a2:7d:a9:67:8b:6d:da:0f:21:d8:
         95:84:7e:5d:1c:6d:4c:95:70:c0:85:f2:81:60:ed:03:13:50:
         be:89:84:8c:fa:46:1a:7e:c9:79:17:be:e7:b3:58:6d:a9:c7:
         e9:14:d9:8c:45:af:ff:ae:61:f5:12:d5:19:73:b4:2e:6b:b6:
         94:46:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:20:36 2025 by rpki-client