Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
File:                     X6EtceluL4GPuSSQs3lvC3cBZW0.mft (raw, json)
Hash identifier:          Db/PMmV7Q+O015uDTCNviuN6qzEm16+jvKcfeq8qxmc=
Subject key identifier:   10:84:70:DA:F3:37:92:01:DF:43:FF:CB:7A:B0:D1:57:33:D6:33:FB
Authority key identifier: 5F:A1:2D:71:E9:6E:2F:81:8F:B9:24:90:B3:79:6F:0B:77:01:65:6D
Certificate issuer:       /CN=F3626FA1AF/serialNumber=5FA12D71E96E2F818FB92490B3796F0B7701656D
Certificate serial:       51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
Manifest number:          50
Signing time:             Tue 04 Nov 2025 06:43:26 +0000
Manifest this update:     Tue 04 Nov 2025 06:43:25 +0000
Manifest next update:     Thu 06 Nov 2025 06:43:25 +0000
Files and hashes:         1: X6EtceluL4GPuSSQs3lvC3cBZW0.crl (hash: lyev6VrI3ZMV7QEEHZuDVqKQPBU7jp1Gqf4qhXE59EU=)
                          2: 23AA3F847CB411F08F9595B0DAE4EC9C.roa (hash: 3MSrx7uq5AEGHOWAFB7THkIOfn/SgWoN7PEmoZN2Nzo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 06:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626FA1AF, serialNumber=5FA12D71E96E2F818FB92490B3796F0B7701656D
        Validity
            Not Before: Nov  4 06:43:25 2025 GMT
            Not After : Nov  6 06:43:25 2025 GMT
        Subject: CN=6909a08e-f34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:64:6a:2f:ed:41:6d:20:28:86:ad:b4:f0:
                    37:aa:38:0b:0c:b5:52:2e:45:04:78:f6:82:5a:eb:
                    eb:2b:91:df:1e:e2:0f:1d:01:43:a2:6c:68:a7:f5:
                    56:62:6b:ac:23:27:8a:b6:87:30:d0:45:5e:90:2d:
                    ea:88:8c:2d:97:12:f1:df:09:cd:19:fd:c9:0c:d5:
                    98:95:ac:09:82:8d:e4:f0:4c:15:eb:2c:f5:a5:f7:
                    eb:ba:e5:55:05:c2:62:af:ce:5e:92:81:d1:a5:a8:
                    96:0c:d8:0b:b8:bf:3a:bc:d4:d7:46:cc:ea:30:d7:
                    87:f0:72:04:5f:ac:82:e8:a7:3d:4c:07:58:b7:57:
                    02:67:1b:bc:86:5d:8b:56:5b:81:91:0c:9c:f3:8e:
                    e7:1c:17:3e:08:80:cf:93:37:6e:4d:fe:c4:c7:27:
                    02:c2:19:16:ad:b8:e6:1a:86:8d:5d:f3:6a:8e:ae:
                    37:20:85:0d:7b:7d:d1:a6:68:a3:48:8e:46:e6:82:
                    a5:90:1f:4d:c3:54:09:79:2e:80:d6:4d:92:be:0d:
                    ff:2c:63:91:8d:06:9f:ec:25:ec:82:01:e5:b4:d5:
                    f1:a1:81:4b:a7:39:1d:c3:73:0d:ea:b2:27:f3:40:
                    9f:d4:38:d8:9e:05:41:fe:d9:0c:c6:7b:9c:3f:8a:
                    b7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:84:70:DA:F3:37:92:01:DF:43:FF:CB:7A:B0:D1:57:33:D6:33:FB
            X509v3 Authority Key Identifier:
                keyid:5F:A1:2D:71:E9:6E:2F:81:8F:B9:24:90:B3:79:6F:0B:77:01:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b6:f3:fe:ec:95:86:0d:c9:aa:00:96:ef:1f:5f:8f:e0:9a:
         9b:8a:1f:2e:20:e5:fc:6e:5a:a3:ae:8e:8f:88:bb:d7:9c:47:
         53:88:c9:dd:60:02:fa:2b:9c:f9:03:9c:ac:94:8d:f2:14:79:
         3f:8b:e8:16:3e:c8:66:19:22:92:6c:e2:28:09:db:f7:bf:32:
         eb:53:c4:64:27:d4:ab:53:b0:23:fb:35:25:81:57:f3:79:b0:
         aa:ee:0e:8e:c4:94:5b:f3:7e:ee:71:96:a6:dc:3f:36:92:30:
         ee:d9:43:a8:cd:c6:34:fd:3c:16:5e:95:f2:e0:a2:4e:29:79:
         af:82:fd:85:b8:05:93:69:d9:79:cf:a3:5e:e9:7d:fb:dd:4b:
         31:ed:86:7a:f3:8c:25:b1:84:28:a1:2b:24:49:95:b5:af:54:
         2f:99:bb:be:b1:a5:d2:d2:eb:b2:fd:bb:53:83:92:08:7e:68:
         f9:c9:0a:67:88:6f:5e:c7:24:b4:ed:e4:c1:12:3d:f9:fc:6c:
         25:cf:75:0b:4d:d0:03:e9:3a:90:3f:af:47:9e:f0:cd:2a:84:
         37:10:84:4d:79:d3:d8:eb:f0:ca:b7:83:54:20:c2:c2:dd:82:
         13:41:53:d6:dc:fa:5a:0f:1d:38:fc:4d:89:46:d4:22:62:ab:
         8f:22:3e:19
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBUTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NkZBMUFGMTEwLwYDVQQFEyg1RkExMkQ3MUU5NkUyRjgxOEZCOTI0OTBCMzc5NkYw
Qjc3MDE2NTZEMB4XDTI1MTEwNDA2NDMyNVoXDTI1MTEwNjA2NDMyNVowGDEWMBQG
A1UEAxMNNjkwOWEwOGUtZjM0YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMsDZGov7UFtICiGrbTwN6o4Cwy1Ui5FBHj2glrr6yuR3x7iDx0BQ6JsaKf1
VmJrrCMniraHMNBFXpAt6oiMLZcS8d8JzRn9yQzVmJWsCYKN5PBMFess9aX367rl
VQXCYq/OXpKB0aWolgzYC7i/OrzU10bM6jDXh/ByBF+sguinPUwHWLdXAmcbvIZd
i1ZbgZEMnPOO5xwXPgiAz5M3bk3+xMcnAsIZFq245hqGjV3zao6uNyCFDXt90aZo
o0iORuaCpZAfTcNUCXkugNZNkr4N/yxjkY0Gn+wl7IIB5bTV8aGBS6c5HcNzDeqy
J/NAn9Q42J4FQf7ZDMZ7nD+Kt3UCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQQhHDa
8zeSAd9D/8t6sNFXM9Yz+zAfBgNVHSMEGDAWgBRfoS1x6W4vgY+5JJCzeW8LdwFl
bTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjZGQTEvMzhDRDEyRTg3Q0IzMTFGMEE2MEY2QUFCREFFNEVDOUMvWDZFdGNl
bHVMNEdQdVNTUXMzbHZDM2NCWlcwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWDZFdGNlbHVMNEdQdVNTUXMzbHZDM2NCWlcwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYyNkZBMS8zOENEMTJFODdDQjMxMUYwQTYwRjZBQUJEQUU0
RUM5Qy9YNkV0Y2VsdUw0R1B1U1NRczNsdkMzY0JaVzAubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAJy28/7slYYNyaoAlu8fX4/gmpuKHy4g
5fxuWqOujo+Iu9ecR1OIyd1gAvornPkDnKyUjfIUeT+L6BY+yGYZIpJs4igJ2/e/
MutTxGQn1KtTsCP7NSWBV/N5sKruDo7ElFvzfu5xlqbcPzaSMO7ZQ6jNxjT9PBZe
lfLgok4pea+C/YW4BZNp2XnPo17pffvdSzHthnrzjCWxhCihKyRJlbWvVC+Zu76x
pdLS67L9u1ODkgh+aPnJCmeIb17HJLTt5MESPfn8bCXPdQtN0APpOpA/r0ee8M0q
hDcQhE1509jr8Mq3g1QgwsLdghNBU9bc+loPHTj8TYlG1CJiq48iPhk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:36:38 2025 by rpki-client