Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
File:                     CNLFTntRy8c0NN0AYFFFEi8ay2c.mft (raw, json)
Hash identifier:          cdLj0+953S5BbOtXo4rOxvQAWf/+oEdt2mWqxizSQyo=
Subject key identifier:   F9:2F:93:6E:C6:A2:C5:DF:3C:69:F1:24:13:D0:F7:EE:9E:A0:F4:9C
Authority key identifier: 08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
Certificate issuer:       /CN=F3625A15AF/serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
Certificate serial:       09D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
Manifest number:          09D6
Signing time:             Tue 04 Nov 2025 01:23:34 +0000
Manifest this update:     Tue 04 Nov 2025 01:23:33 +0000
Manifest next update:     Thu 06 Nov 2025 01:23:33 +0000
Files and hashes:         1: CNLFTntRy8c0NN0AYFFFEi8ay2c.crl (hash: 8NPZVAIMAW/DPMa1BeuUQgaaotqHRMJAIjlSxwpD+FE=)
                          2: 6F1DB8E692A611EEAD363E72D25BE465.roa (hash: U9BUtJsAMRe8LhMXpRX7x5DD1wtXY7iOI00OaJrVYBU=)
                          3: B785A0A892A611EEAC80BD72D25BE465.roa (hash: 0EcQiKXcB6upVmjNjOVseGG+e+e/Qe8GkvIuWAlYYX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2520 (0x9d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625A15AF, serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
        Validity
            Not Before: Nov  4 01:23:33 2025 GMT
            Not After : Nov  6 01:23:33 2025 GMT
        Subject: CN=69095596-0825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:b1:5a:44:72:5a:e3:6e:72:ea:b4:7c:76:
                    de:72:2c:80:a4:05:dc:5b:f3:2e:1f:62:48:f3:1e:
                    80:9b:28:f5:32:03:0b:de:72:e7:6c:64:48:df:eb:
                    b3:75:f6:fd:4a:9d:11:0d:f9:c3:87:6b:52:23:29:
                    d5:be:2c:b1:cc:ee:c1:a1:fa:cf:c1:25:be:d3:f2:
                    24:cf:b2:c0:09:e2:e5:b4:73:ab:ef:62:65:f2:a8:
                    db:d0:0f:f6:3d:bc:ec:1d:b1:5a:7f:e7:f5:95:d9:
                    94:d3:44:b7:3f:99:f9:d5:5e:ab:96:9c:a3:dd:d0:
                    09:21:31:e4:b8:24:46:7f:ff:4b:0c:bb:04:bf:40:
                    85:e9:61:b8:61:ae:59:c7:f8:4f:ba:dc:28:70:bc:
                    7b:08:a4:9a:19:26:ad:3a:31:28:13:e2:01:99:50:
                    a0:c9:03:73:7d:ba:5b:00:9a:49:8b:cb:2e:74:8b:
                    12:5b:7a:89:f5:5a:e6:55:30:ba:3f:11:35:d0:06:
                    46:8a:b5:33:08:09:a2:64:88:bb:b6:c4:a3:2f:f9:
                    5a:76:59:76:ad:0c:c8:ff:d7:25:b9:03:63:56:10:
                    e0:ca:dc:3c:fd:42:99:9d:79:3c:28:31:50:44:f3:
                    f5:00:dd:af:b1:f2:0b:e8:18:24:5f:b5:72:11:cf:
                    b3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2F:93:6E:C6:A2:C5:DF:3C:69:F1:24:13:D0:F7:EE:9E:A0:F4:9C
            X509v3 Authority Key Identifier:
                keyid:08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b8:c6:7f:21:54:0e:b5:6d:60:be:d5:72:91:3d:cd:3d:4f:
         9c:30:76:63:b9:1a:53:d6:ed:30:fc:ad:b3:b9:5d:10:8b:2c:
         aa:dc:6e:11:27:cb:77:98:af:f4:83:c2:e4:4b:9c:77:a0:fe:
         60:52:a5:6a:85:bf:70:1c:75:a2:69:d0:bf:0f:2c:61:1c:77:
         d6:2f:54:4b:69:af:5a:16:bf:af:ad:ba:6d:9d:dc:95:c3:e7:
         81:de:16:bb:62:58:0c:f5:0b:f3:1a:69:3d:93:f5:57:59:d3:
         f2:3e:e0:67:ee:76:ff:4b:1a:38:cb:18:ed:9e:bd:58:d2:16:
         84:34:0a:36:32:dd:79:1e:2a:14:0e:88:c5:46:74:76:c7:26:
         6a:28:0a:c7:b5:ad:12:34:aa:32:b3:f1:93:ad:6f:94:49:ed:
         bb:9d:0a:9b:46:6d:18:67:36:24:23:62:e9:aa:6b:4b:0e:98:
         45:23:ef:8e:01:1f:37:0b:ac:6d:a5:21:9a:79:38:e5:cf:50:
         bd:29:8c:a9:0e:1b:6a:83:3a:1c:c9:a7:99:68:38:80:12:66:
         3a:76:76:1d:5f:89:90:69:7e:6d:c5:dd:36:a5:c4:69:e6:fa:
         12:88:c9:18:f2:71:3c:f4:47:2c:e1:97:e7:88:4c:3b:51:73:
         cb:6f:07:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:07:30 2025 by rpki-client