Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
File:                     JJfLAcvhH34S4q3Y1P8jILlpA20.mft (raw, json)
Hash identifier:          jyzbk7xSL71O5kEcKVgbFDfTo0LWFXAL7keUXymihhU=
Subject key identifier:   11:70:27:A7:3C:1B:C1:F6:76:B8:2A:B3:63:5B:68:12:A0:45:13:3E
Authority key identifier: 24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D
Certificate issuer:       /CN=F3628CF1AF/serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
Certificate serial:       0325
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
Manifest number:          0323
Signing time:             Wed 05 Nov 2025 03:57:24 +0000
Manifest this update:     Wed 05 Nov 2025 03:57:23 +0000
Manifest next update:     Fri 07 Nov 2025 03:57:23 +0000
Files and hashes:         1: JJfLAcvhH34S4q3Y1P8jILlpA20.crl (hash: JkPG6OQHm/eCpotMRXKWqXct9mINfk9YKZiXRPG0jFk=)
                          2: D5189642585A11EE959ED9784AD9E6FC.roa (hash: KsQ50yFvchQtrtq3TNZ2t0VHuQZ3asdeMse4z12DwNw=)
                          3: 0525AE88585B11EEA76861794AD9E6FC.roa (hash: 7rp3+TdgE0k+yfnwL23onTrWLktoLa5cPkFU5dKOKQ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805 (0x325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628CF1AF, serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
        Validity
            Not Before: Nov  5 03:57:23 2025 GMT
            Not After : Nov  7 03:57:23 2025 GMT
        Subject: CN=690acb24-4742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1b:e9:26:44:4e:0e:a3:a7:a7:69:49:a9:df:
                    a6:56:10:84:7c:60:4e:58:59:90:c4:f7:31:97:8c:
                    ac:42:9c:93:ef:0e:39:80:54:53:b2:5d:d6:f9:4c:
                    05:20:b4:7d:cf:6c:db:03:36:1a:44:74:f2:9e:6b:
                    51:65:d6:1e:b7:ac:5a:fa:61:40:98:67:26:d1:0a:
                    27:3d:04:a1:65:54:0e:ec:79:2b:e0:1d:fa:ee:d1:
                    c6:5f:12:07:e5:e6:e1:26:ae:5d:38:de:a8:9f:de:
                    b6:1e:3a:4a:aa:a4:fa:17:83:69:f1:71:ae:4a:96:
                    89:28:f4:4c:f1:69:a1:02:ca:64:40:c4:4c:ba:2a:
                    51:fb:43:61:ce:c6:37:08:38:57:7e:32:4e:50:8f:
                    41:65:c7:7b:15:e8:44:b9:5b:15:8f:a5:9b:8d:71:
                    4f:be:16:0c:ed:ae:4e:f6:38:93:49:46:8a:63:db:
                    c6:d5:55:4a:34:cf:b7:86:c0:d1:57:ba:12:a4:c4:
                    d4:82:f8:a3:92:a8:77:b7:04:81:2e:39:fd:6e:d0:
                    26:d9:fe:47:e9:d8:0c:6d:b9:98:6f:19:a8:83:91:
                    74:9a:d6:c9:e7:88:56:49:e4:c5:50:94:38:67:86:
                    82:18:af:67:a4:e9:43:dd:34:2b:c3:37:7c:41:8d:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:70:27:A7:3C:1B:C1:F6:76:B8:2A:B3:63:5B:68:12:A0:45:13:3E
            X509v3 Authority Key Identifier:
                keyid:24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:95:71:7e:4d:3b:da:6d:b9:69:03:c2:0b:88:38:83:bd:13:
         ca:de:ea:61:75:57:15:3e:db:07:04:72:ad:89:db:44:fd:10:
         2b:fb:5f:5a:49:7a:40:f2:a3:70:5d:85:c9:5f:99:80:60:21:
         aa:8a:ea:18:e6:f4:0b:db:f9:3f:ba:90:12:72:53:e7:81:34:
         9f:ff:03:67:0e:08:c6:c4:37:f6:5d:67:b6:94:3d:8d:63:f2:
         98:cc:38:f0:a7:7c:98:f5:ee:da:25:44:ad:1e:15:28:53:ab:
         c2:a7:5d:23:ee:45:ae:ab:f7:1f:bc:34:bf:53:1d:51:dc:82:
         bf:69:e7:49:18:61:23:52:e4:31:00:fe:bb:5f:47:0e:5a:71:
         c3:ff:73:67:a6:a0:4b:02:95:e8:74:a5:2b:57:16:f2:6b:8d:
         2e:6c:f6:9b:ce:6c:36:6f:d7:da:99:95:dd:39:27:32:ca:23:
         c0:28:64:a1:a3:f8:ff:19:6c:81:6b:66:85:5b:bf:20:d4:0b:
         8c:41:88:3a:c5:72:2c:81:33:2f:96:ae:47:3b:d4:a1:10:c4:
         58:6d:9f:ab:ae:b7:3d:80:1a:cb:1c:1b:3f:f2:5b:48:a6:9e:
         a7:26:4d:99:64:4e:d0:cd:0b:53:9b:bd:ae:ee:3b:cd:8a:89:
         01:ad:77:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:06:54 2025 by rpki-client