Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
File:                     _47Skrq7L4ZA7kbxs1kWS4BTj1U.mft (raw, json)
Hash identifier:          i7eL4QDUW8akcWoimkogxEqAL/RiLTwfjGGr3JKiUtw=
Subject key identifier:   88:51:00:3E:6E:88:64:F8:37:95:A4:CA:E1:2D:41:FB:CF:C8:30:E6
Authority key identifier: FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
Certificate issuer:       /CN=F3621C8AAF/serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
Certificate serial:       0675
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
Manifest number:          0671
Signing time:             Wed 05 Nov 2025 02:22:18 +0000
Manifest this update:     Wed 05 Nov 2025 02:22:17 +0000
Manifest next update:     Fri 07 Nov 2025 02:22:17 +0000
Files and hashes:         1: _47Skrq7L4ZA7kbxs1kWS4BTj1U.crl (hash: MPhJOVj1LXSlZsnSw7fnaYxpwjQRkKOMjXZ7y9LZbBI=)
                          2: 618DD2E6D4DB11EBAC678141F8AEA228.roa (hash: 2dfVxKybLHR5+MMwCeet4VquLas7BlSkUUwjxoFXr54=)
                          3: 48E2F93A1FFB11EDA58CC9C5F1222468.roa (hash: RjLPfzgkdN2ZwbGON57T6lSnUm+N9Sb9duXVeRoxO88=)
                          4: 054D3E6C47A511EC9E4F5452D8A014CE.roa (hash: V0jAJU4mkJ4wT+l9amx7r69aJYuX+Vg75J6DIl15pPI=)
                          5: 7D716E841FFB11EDA4F58EC6F1222468.roa (hash: kIA9AuRs7fJpR8S/gM+T8eNfvwqqEcS39yhbVal5TQM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1653 (0x675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C8AAF, serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
        Validity
            Not Before: Nov  5 02:22:17 2025 GMT
            Not After : Nov  7 02:22:17 2025 GMT
        Subject: CN=690ab4da-a23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:a5:37:eb:64:0a:03:7b:3f:67:e6:a5:97:
                    08:a6:a2:b1:da:85:98:31:49:ab:3b:db:b0:14:d4:
                    3f:07:fa:9b:d0:c4:f1:25:08:23:3c:5c:c7:ff:66:
                    02:8d:e1:82:59:09:3f:a4:32:a3:74:48:46:c9:4c:
                    ce:20:db:d5:a2:07:15:7a:f5:0a:5c:b7:a1:e9:ab:
                    35:65:64:d0:74:26:db:1f:25:0f:63:8f:54:0f:90:
                    46:ca:5a:93:dd:be:83:00:55:be:cf:13:a5:69:f9:
                    12:67:05:b6:f0:1a:ba:a2:b7:13:db:c0:c1:0b:4c:
                    ab:0e:0b:11:00:a6:06:ab:91:13:22:e5:89:2f:a0:
                    71:54:92:2c:6f:f8:6e:74:57:14:1d:de:3d:57:44:
                    53:dd:14:ca:8e:23:60:04:7d:e1:c8:5c:dc:c3:a2:
                    33:4d:a0:61:6d:aa:de:4e:39:03:4c:ca:f8:50:27:
                    d7:22:19:19:b4:f6:1e:b2:1b:7f:67:8f:4d:33:62:
                    da:16:7a:a4:4e:be:75:90:9c:bb:6a:60:58:22:c1:
                    f2:88:64:72:30:5b:59:e6:07:74:f2:d1:1e:27:0b:
                    b0:3a:7d:4a:ed:6c:3b:65:38:6c:a8:17:64:70:ce:
                    53:fd:ec:e8:d5:ea:ef:21:a1:d7:c8:4a:91:cd:0b:
                    80:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:51:00:3E:6E:88:64:F8:37:95:A4:CA:E1:2D:41:FB:CF:C8:30:E6
            X509v3 Authority Key Identifier:
                keyid:FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6d:7d:e0:a6:06:7e:ea:fa:53:d8:c6:c3:c8:b0:24:6d:9e:
         7f:21:0a:e0:29:05:7e:01:aa:ab:18:1c:5c:c4:f6:ee:c2:32:
         c0:39:f1:df:e3:21:63:0c:5d:f5:f8:6c:87:31:f2:0e:00:72:
         10:e2:cf:92:04:39:b2:a9:16:d1:26:31:51:ba:d6:b9:a8:67:
         00:ef:6b:d3:8d:15:f9:74:45:60:a3:a5:85:f9:50:c3:3c:60:
         aa:c3:25:f9:f1:85:ec:d4:f0:9f:37:10:d4:b3:37:7a:9f:c0:
         b7:de:36:e2:35:db:51:41:9b:72:fb:40:d2:06:7a:1d:b7:70:
         52:1c:9f:97:cd:bd:8f:fe:b3:c4:98:60:36:39:7c:26:93:54:
         f5:29:23:d5:0f:89:dd:b0:f1:43:6f:5b:2e:a6:9c:2e:86:44:
         2f:e2:d6:30:da:93:b6:96:65:8c:9a:e5:9d:af:ca:9d:25:0b:
         64:12:59:11:5e:79:e2:6e:b7:12:4d:fe:36:d0:00:9a:c3:db:
         15:cc:02:d6:7b:1a:d3:63:9d:02:76:b1:d7:5e:e8:18:84:bc:
         4c:72:24:54:7a:0b:0a:11:bb:97:d9:12:29:b1:dc:0a:3a:f2:
         05:11:e4:9a:90:30:28:de:1e:af:b1:20:3a:3c:ff:d0:b8:1c:
         a9:cb:42:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:08:24 2025 by rpki-client