Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.mft
File:                     0BDpIA7Z7cna8sP23VVz1wVhII8.mft (raw, json)
Hash identifier:          abekcZIDP41+/NpEKuu92Ir6Q2XjDBlmMBi/5rx9H+E=
Subject key identifier:   1F:44:1B:77:F0:FB:6E:60:B4:32:D8:D6:9F:90:29:4A:CC:9B:A9:CA
Authority key identifier: D0:10:E9:20:0E:D9:ED:C9:DA:F2:C3:F6:DD:55:73:D7:05:61:20:8F
Certificate issuer:       /CN=F362C1A2AF/serialNumber=D010E9200ED9EDC9DAF2C3F6DD5573D70561208F
Certificate serial:       0389
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0BDpIA7Z7cna8sP23VVz1wVhII8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.mft
Manifest number:          0386
Signing time:             Wed 05 Nov 2025 03:44:30 +0000
Manifest this update:     Wed 05 Nov 2025 03:44:29 +0000
Manifest next update:     Fri 07 Nov 2025 03:44:29 +0000
Files and hashes:         1: 0BDpIA7Z7cna8sP23VVz1wVhII8.crl (hash: /lvsjuUl3xH8ns37h5as92w1ZDIAglxGkz6ECB7NFTU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0BDpIA7Z7cna8sP23VVz1wVhII8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C1A2AF, serialNumber=D010E9200ED9EDC9DAF2C3F6DD5573D70561208F
        Validity
            Not Before: Nov  5 03:44:29 2025 GMT
            Not After : Nov  7 03:44:29 2025 GMT
        Subject: CN=690ac81e-b14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d6:56:a1:8d:84:b4:fb:2e:52:88:a6:03:33:
                    dd:26:8e:54:fb:99:00:2f:d5:55:fb:a1:b8:92:eb:
                    bf:d0:df:fc:69:d2:9a:a9:31:6a:ff:3d:cb:7e:33:
                    d4:37:24:f4:4a:85:c1:c5:5d:eb:54:92:0b:f1:de:
                    14:bf:b4:fc:45:2d:14:56:b4:2c:4e:87:f9:1f:50:
                    8e:e6:14:e8:19:03:3b:2c:88:b7:91:fe:03:95:32:
                    94:7d:04:0a:d5:1e:8d:6f:a8:4c:46:b5:d4:eb:65:
                    e1:f3:2e:6e:cb:5b:c6:41:cf:ad:7e:22:4e:41:aa:
                    b5:7c:fa:7a:b9:49:b1:9b:53:91:21:e8:a4:09:2b:
                    16:b7:00:51:d6:67:a1:6b:a6:8e:92:c9:57:99:0a:
                    2c:21:8a:73:af:6d:2b:59:3d:8f:c9:89:61:ef:b0:
                    9f:7d:19:8c:85:3a:32:5e:00:09:73:b7:4f:f3:6b:
                    6a:9c:1c:4d:a4:dd:2e:2e:6d:7e:8a:1f:c2:5d:53:
                    b1:de:d2:de:44:37:73:9d:e9:5d:47:d1:49:7c:e6:
                    68:7a:11:0d:2f:35:15:c7:e9:34:31:50:5c:db:6a:
                    05:37:08:25:83:92:47:45:7f:9c:00:9d:c1:99:75:
                    f7:3f:d2:1d:51:44:b6:c5:52:83:48:33:65:d6:00:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:44:1B:77:F0:FB:6E:60:B4:32:D8:D6:9F:90:29:4A:CC:9B:A9:CA
            X509v3 Authority Key Identifier:
                keyid:D0:10:E9:20:0E:D9:ED:C9:DA:F2:C3:F6:DD:55:73:D7:05:61:20:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0BDpIA7Z7cna8sP23VVz1wVhII8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:72:d6:1f:55:02:ce:69:bb:95:fc:f3:d9:cf:b1:63:39:dc:
         ef:00:e8:90:af:31:04:ef:0b:07:ff:8e:d5:3b:44:7a:58:9d:
         ec:1a:92:0f:ba:66:35:d4:21:35:ee:48:fd:3e:1a:49:ce:af:
         1f:ec:84:a7:5d:31:f7:7a:87:84:af:fc:f4:48:bd:dd:93:c1:
         dc:40:99:22:c0:3c:31:cb:89:e2:53:6c:a8:40:a2:dc:a3:ba:
         88:5e:9f:04:97:34:f7:45:4d:c9:72:36:42:01:cf:4e:a0:69:
         4a:36:04:f1:71:16:ac:d8:da:cd:a0:be:a3:50:c0:e0:32:59:
         15:47:5a:59:fb:90:eb:15:fc:5d:fb:f9:b6:61:09:79:a3:95:
         a0:d5:10:cb:fc:58:28:a5:de:1b:77:75:4a:c9:80:29:f5:fb:
         43:7e:d7:03:fa:d9:f1:57:8b:ca:6d:fb:65:94:aa:96:77:57:
         f4:d4:56:86:94:8f:e2:5e:c8:0a:a1:b7:5f:84:13:bb:70:83:
         12:e5:8d:7e:f6:48:e9:df:2b:6c:7d:55:57:2e:95:8b:10:8f:
         ed:e4:ee:7d:80:ed:df:64:59:57:fc:3f:b5:65:14:85:7d:13:
         a0:82:b5:48:d4:26:bb:d3:88:09:45:68:e2:d2:15:1f:74:d0:
         02:ab:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:26 2025 by rpki-client