Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
File:                     XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft (raw, json)
Hash identifier:          3yjjC2pa+V+nDsxpBeh7lJaurnW6sq+PuSlcbxL+Uso=
Subject key identifier:   D6:B0:96:65:D4:E7:5C:C1:AE:93:68:DE:EA:B1:E9:1F:AA:1A:38:73
Authority key identifier: 5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
Certificate issuer:       /CN=F3627065AF/serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
Certificate serial:       01D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
Manifest number:          01D5
Signing time:             Wed 05 Nov 2025 04:45:53 +0000
Manifest this update:     Wed 05 Nov 2025 04:45:52 +0000
Manifest next update:     Fri 07 Nov 2025 04:45:52 +0000
Files and hashes:         1: XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl (hash: HuCl02NIaUl3ileI07rFYqNRaWRn31w+S2ncT77be5o=)
                          2: 47D8021A53D411EFA7C83C74762E951A.roa (hash: QwK+XpG/BTzSdMaFzgcL2FXrrpo9GOI3wltkdoXtHnY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627065AF, serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
        Validity
            Not Before: Nov  5 04:45:52 2025 GMT
            Not After : Nov  7 04:45:52 2025 GMT
        Subject: CN=690ad681-3890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:b7:52:b7:dd:fe:04:0d:39:05:88:c6:a6:
                    32:07:df:aa:dd:b3:d1:cf:88:9e:96:52:9e:5e:e9:
                    7b:9e:59:6f:62:09:80:10:24:38:2b:fd:45:85:0f:
                    5c:00:b7:73:23:5a:57:8a:fc:1d:17:9f:36:17:2e:
                    c5:e6:59:6e:91:ee:f0:36:a4:82:dc:5a:19:a2:77:
                    1e:e1:7f:d2:36:ff:32:91:6a:fa:bf:e4:87:ca:dc:
                    7f:3c:b6:53:b6:a8:eb:ba:f6:f4:01:3a:64:95:e3:
                    bc:5b:5d:38:9d:b9:e9:68:73:b9:c4:25:fa:2c:5b:
                    c7:e9:43:bc:1e:d6:d6:51:88:e7:47:6a:02:6b:ab:
                    2e:60:b5:66:35:8e:05:b8:71:79:26:e8:60:7f:7a:
                    5f:46:1e:d3:28:95:1d:ed:83:17:f8:2f:c0:fc:61:
                    fa:cc:ef:85:44:b3:64:b3:5b:7d:87:98:d5:e1:3e:
                    d4:9e:5b:92:9b:dc:8c:23:d8:5c:66:34:f9:5c:eb:
                    ea:a2:cf:79:30:da:b4:91:9c:8f:2e:c7:d1:ed:11:
                    4b:a3:d4:25:f3:3b:73:5e:78:6c:89:17:2f:73:e7:
                    5c:11:f3:93:82:38:3b:4a:3a:72:cd:90:7d:97:ec:
                    92:ad:4c:c0:5f:c4:25:b0:3a:92:0f:8d:5d:bc:bc:
                    c2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B0:96:65:D4:E7:5C:C1:AE:93:68:DE:EA:B1:E9:1F:AA:1A:38:73
            X509v3 Authority Key Identifier:
                keyid:5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:fe:d8:cd:a9:ac:1c:77:35:80:fc:00:7f:b1:f9:23:9c:e3:
         93:67:51:73:45:f8:b7:23:9d:3c:8b:8b:d7:33:76:aa:d1:01:
         be:f8:42:b6:54:ef:e8:ad:cf:c9:26:28:68:93:79:82:af:55:
         3a:70:0c:7d:a7:05:72:55:03:1c:d1:cb:d4:1e:6c:12:10:17:
         e2:67:46:c1:d7:92:37:0a:cc:7a:7b:a4:78:fb:e1:52:3e:50:
         13:0d:63:23:6f:4d:8e:fc:16:25:3f:d3:5a:3c:da:37:3b:34:
         45:e3:44:ed:ec:7a:f2:e6:da:47:8c:3e:56:12:04:0a:10:29:
         14:22:30:1d:45:f0:23:0a:bd:8a:71:68:6f:81:2c:fd:35:0f:
         ad:a6:31:7f:37:db:13:56:9e:66:9f:70:89:fc:6c:1d:9e:9e:
         49:c2:95:dd:20:32:61:5f:05:66:90:41:0b:f3:15:60:55:8a:
         68:d6:b6:5a:4a:76:07:ad:63:23:bb:db:7f:c5:6f:93:bd:95:
         a0:97:82:40:d6:98:96:af:f9:14:b3:41:8c:37:d8:9b:ea:99:
         d6:c9:38:56:e8:76:5c:c0:f2:36:26:d0:6b:01:bb:fc:6b:97:
         db:a6:8a:da:9b:67:fc:0d:12:e2:6f:63:33:ff:02:1d:fb:2a:
         95:c8:a2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:00:21 2025 by rpki-client