Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
File:                     KyRChIF0qoiURpp3m5_X2klYxmk.mft (raw, json)
Hash identifier:          7dc+cLwaorZmqJmR0Mwu1f5uBN7UIUuXBo14nA+9kMY=
Subject key identifier:   B5:53:1B:A6:41:43:8B:A2:EA:D0:44:02:78:46:EB:37:BA:6D:4C:7A
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Certificate issuer:       /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial:       0EE5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
Manifest number:          0ED8
Signing time:             Wed 05 Nov 2025 00:55:51 +0000
Manifest this update:     Wed 05 Nov 2025 00:55:50 +0000
Manifest next update:     Fri 07 Nov 2025 00:55:50 +0000
Files and hashes:         1: KyRChIF0qoiURpp3m5_X2klYxmk.crl (hash: iuZXra5NRkFQj23ELLT1Q8N4zcwtN5oZ+nDNhPiNOqs=)
                          2: 7C0BFD26F4F511EFB3E4B9B5762E951A.roa (hash: 5wXs7RMJiyud6JyXFkR1o4z/jMZs+dRUug3mlkais2g=)
                          3: 603F44FEF4F511EF825958B5762E951A.roa (hash: Ba8AFZPMa3HGsyKURqI70r5EW0Munyy3hZ7Nh86XhXk=)
                          4: E90F871CA09811ECA7CC64845A40D577.roa (hash: oxWlZcS9cWEi0+CZBGrhmI9nrUQ78IAE+xwjMFu/v9A=)
                          5: BE403084F2A411EFA60BB451762E951A.roa (hash: ia48RiXRj/TS/ZIH2z01yABB9uM5rlXdHXcHKIZJfs4=)
                          6: 30DA2FD2D99011EBB3AFA075F8AEA228.roa (hash: p31uwZZBrdaLtBzico1EAerpqK+JUtNLbRhjPY74axU=)
                          7: E5D310BCF2A411EF9A7E2652762E951A.roa (hash: ZQkJvtNfrwoPVbwO+rTZ+tWRmqiD9tIx3HghRCOVm/Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3813 (0xee5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AF, serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Validity
            Not Before: Nov  5 00:55:50 2025 GMT
            Not After : Nov  7 00:55:50 2025 GMT
        Subject: CN=690aa097-734e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:61:02:e9:92:16:01:a9:b9:3e:7f:4f:f1:
                    99:3b:25:79:cf:fe:49:45:90:d6:3a:a6:59:6a:f5:
                    4a:09:6a:87:c6:bd:79:cb:ee:7b:6c:ee:69:3b:1f:
                    06:cb:33:dc:78:70:46:b2:55:1c:28:73:37:5a:aa:
                    85:91:04:85:67:86:ac:25:6c:66:4c:e2:e6:dd:9e:
                    7c:51:55:28:d4:9e:b5:35:80:2f:2f:65:48:ea:0b:
                    15:3c:89:1a:b6:39:2d:bf:5c:f5:5e:35:ce:5b:98:
                    a3:f1:4a:56:cf:fb:8d:4c:a0:a2:4c:bb:df:b9:1a:
                    f7:9d:37:7e:78:51:4a:c5:c8:33:30:ea:1a:c7:4a:
                    60:5a:23:c9:ac:ce:bc:a1:7f:6b:1f:eb:d1:1e:0e:
                    a8:f4:8b:6e:4a:c7:87:1a:40:48:42:c9:94:ab:c6:
                    b7:b5:9f:fb:f0:95:15:c6:b3:7f:5a:b4:7f:3c:92:
                    63:46:80:b9:95:76:97:8b:7e:b3:6e:05:c9:b9:75:
                    b5:29:f7:ae:6d:fe:50:df:40:6e:e5:ae:26:91:26:
                    d9:3e:6f:eb:20:33:20:9d:22:44:41:94:d1:53:15:
                    5e:d6:65:f1:d4:b2:8f:cd:4b:77:1f:93:a9:d1:0e:
                    97:a9:c5:b4:a7:59:48:68:df:f3:bb:c0:b9:8b:d8:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:53:1B:A6:41:43:8B:A2:EA:D0:44:02:78:46:EB:37:BA:6D:4C:7A
            X509v3 Authority Key Identifier:
                keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7d:8f:8a:1a:d4:31:64:13:d8:07:4c:a9:c4:6c:3f:a0:ad:
         5a:2a:e6:d4:34:35:bd:68:78:bd:b1:7b:b3:12:d2:bb:42:b5:
         2f:f2:bf:92:96:10:f0:24:44:a5:9f:43:ec:9f:3e:a8:88:9d:
         c9:b0:3e:76:a1:3c:01:c5:54:b3:15:e4:ce:49:17:15:b3:f3:
         40:ca:c3:49:9e:b0:6d:34:e0:b7:f2:a6:15:9a:e7:aa:05:d5:
         54:43:a2:e3:06:4b:39:a4:1a:44:6a:ed:f3:0f:81:16:22:fe:
         0b:e7:27:2b:27:06:bd:51:e9:f5:e6:52:f8:4d:f7:d4:06:b1:
         2b:c4:1e:7f:2b:58:f4:0e:1a:b1:02:12:3a:c8:e9:73:66:7f:
         8b:c1:e6:24:03:32:24:39:2f:1e:b1:45:f9:9f:dc:84:aa:10:
         c5:66:92:04:e9:fd:16:63:83:f2:07:1b:1c:12:9a:8b:23:d6:
         27:78:d7:eb:4e:82:4c:05:70:d9:22:20:f9:f6:44:89:09:b7:
         24:25:08:03:c3:4e:f6:78:c8:c2:1b:3e:8f:08:a2:d6:db:2d:
         33:68:f9:7a:41:36:3d:ed:ae:62:79:53:e8:97:87:42:25:f9:
         a3:8e:aa:1f:79:ed:55:6d:f5:29:e0:3c:64:7c:c1:95:45:58:
         3b:59:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:43:34 2025 by rpki-client