Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
File:                     Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft (raw, json)
Hash identifier:          zPIJMLTkjzJDcVM7cwbb0Kj0vBimFte+UwfAjrBKMTA=
Subject key identifier:   B2:D5:63:DA:CB:BA:2A:35:A1:A3:AC:54:88:B6:B9:2A:8F:5E:A0:2B
Authority key identifier: 5F:3D:45:48:D0:49:4C:B3:EB:B6:5F:B0:A7:9F:E0:99:A5:A1:2C:EA
Certificate issuer:       /CN=F362E278AF/serialNumber=5F3D4548D0494CB3EBB65FB0A79FE099A5A12CEA
Certificate serial:       A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
Manifest number:          A5
Signing time:             Wed 05 Nov 2025 05:27:59 +0000
Manifest this update:     Wed 05 Nov 2025 05:27:59 +0000
Manifest next update:     Fri 07 Nov 2025 05:27:59 +0000
Files and hashes:         1: Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl (hash: 8LJ9Lcr5G9s0YH3d3WbP/ldlLBoEfHvhQervraqw8dg=)
                          2: 76A1AD86424D11F089D462E9DAE4EC9C.roa (hash: 920Pq5gLXNEK7ec2oQwBasEvZAmSump0pVGWoebeoI4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E278AF, serialNumber=5F3D4548D0494CB3EBB65FB0A79FE099A5A12CEA
        Validity
            Not Before: Nov  5 05:27:59 2025 GMT
            Not After : Nov  7 05:27:59 2025 GMT
        Subject: CN=690ae05f-9770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:9a:b0:db:0b:ff:c8:f7:1d:5c:4a:6e:5f:
                    d4:0b:66:2c:46:b2:33:bb:d6:4e:1e:c2:f6:a2:b1:
                    b3:08:95:83:91:88:c8:b0:ba:77:d8:10:2d:d3:25:
                    b5:60:65:1e:7b:83:42:f4:36:b4:53:6c:e2:e2:c4:
                    d0:1a:0b:82:53:69:f1:11:3a:00:1e:0b:82:ef:6c:
                    80:2b:0f:45:ae:b9:c9:8c:bf:4f:7e:ef:b1:9c:9e:
                    eb:13:60:2a:74:f4:af:c8:5f:2b:d6:88:c8:2d:8a:
                    b4:db:ba:4f:19:f3:b3:98:58:74:9e:29:36:06:18:
                    53:f9:8a:ae:f3:dc:6b:2c:5a:03:e6:0c:1c:a2:af:
                    a5:1e:65:8e:a6:e3:30:14:1d:8a:dc:50:ab:86:6c:
                    db:7f:cf:2f:13:bc:3a:ae:50:02:2c:9b:8a:94:3a:
                    f8:3e:1c:3b:2d:bc:c6:25:1a:5f:0c:c3:ad:f8:f8:
                    f4:a3:a4:3f:97:e9:78:ba:f3:89:33:da:8f:d9:f3:
                    71:4e:99:e4:f6:82:3e:1d:a6:24:d9:e4:2a:4b:a4:
                    b9:8d:2c:96:46:96:be:d4:b4:d9:67:bb:93:8a:01:
                    c8:b7:8e:02:30:89:c2:87:5c:83:67:a5:ec:00:3b:
                    0a:90:91:59:66:d4:42:c7:e5:0b:28:a8:f2:8b:77:
                    67:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D5:63:DA:CB:BA:2A:35:A1:A3:AC:54:88:B6:B9:2A:8F:5E:A0:2B
            X509v3 Authority Key Identifier:
                keyid:5F:3D:45:48:D0:49:4C:B3:EB:B6:5F:B0:A7:9F:E0:99:A5:A1:2C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9f:32:61:ae:4a:ad:a2:33:b3:43:ec:6a:2e:b3:5d:ef:38:
         3c:37:46:94:3c:22:5b:65:b0:44:74:c0:b5:7f:a5:00:fe:c7:
         bd:6b:dc:dc:fb:a8:fe:09:b8:3a:89:27:84:33:d3:26:05:a0:
         8b:a0:0f:11:39:2c:14:97:52:5c:4c:15:6a:99:50:dc:b6:e7:
         43:81:31:1b:2c:c1:50:b6:c2:62:ea:25:6b:a8:b9:60:70:2f:
         7d:8f:a0:76:fa:78:05:b6:06:a5:64:63:0a:2c:c0:b5:93:dc:
         86:27:4e:9b:e9:ee:9d:e6:ce:90:5d:0a:4f:7d:8d:49:9d:e7:
         ca:dc:b4:29:20:7f:91:cf:db:a4:a3:e5:e0:0f:9c:86:f2:5b:
         35:e5:13:47:a2:e5:75:88:70:9a:4e:5e:33:b7:66:5b:c0:be:
         fb:17:e2:d0:8f:85:18:f8:cd:2b:8a:87:d7:08:03:57:87:73:
         82:e6:cd:ea:d7:c4:0f:67:82:a2:b3:7a:6f:85:c2:40:7d:10:
         16:cd:2e:c5:29:2f:25:b9:4a:48:fe:0b:40:7f:4e:73:89:eb:
         c7:d1:5e:8b:e4:fc:24:a9:0b:27:e9:d1:48:02:79:06:0c:f0:
         7d:2a:9b:9a:5d:36:c0:18:10:ba:e6:a9:ec:ad:9d:c7:9c:d9:
         45:a8:8d:7a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkUyNzhBRjExMC8GA1UEBRMoNUYzRDQ1NDhEMDQ5NENCM0VCQjY1RkIwQTc5RkUw
OTlBNUExMkNFQTAeFw0yNTExMDUwNTI3NTlaFw0yNTExMDcwNTI3NTlaMBgxFjAU
BgNVBAMTDTY5MGFlMDVmLTk3NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0T5qw2wv/yPcdXEpuX9QLZixGsjO71k4ewvaisbMIlYORiMiwunfYEC3T
JbVgZR57g0L0NrRTbOLixNAaC4JTafEROgAeC4LvbIArD0WuucmMv09+77GcnusT
YCp09K/IXyvWiMgtirTbuk8Z87OYWHSeKTYGGFP5iq7z3GssWgPmDByir6UeZY6m
4zAUHYrcUKuGbNt/zy8TvDquUAIsm4qUOvg+HDstvMYlGl8Mw634+PSjpD+X6Xi6
84kz2o/Z83FOmeT2gj4dpiTZ5CpLpLmNLJZGlr7UtNlnu5OKAci3jgIwicKHXINn
pewAOwqQkVlm1ELH5QsoqPKLd2f9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUstVj
2su6KjWho6xUiLa5Ko9eoCswHwYDVR0jBBgwFoAUXz1FSNBJTLPrtl+wp5/gmaWh
LOowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFMjc4LzJDNkE1MzBBM0M2RjExRjA5NzZBNDhEMERBRTRFQzlDL1h6MUZT
TkJKVExQcnRsLXdwNV9nbWFXaExPby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1h6MUZTTkJKVExQcnRsLXdwNV9nbWFXaExPby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkUyNzgvMkM2QTUzMEEzQzZGMTFGMDk3NkE0OEQwREFF
NEVDOUMvWHoxRlNOQkpUTFBydGwtd3A1X2dtYVdoTE9vLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7nzJhrkqtojOzQ+xqLrNd7zg8N0aU
PCJbZbBEdMC1f6UA/se9a9zc+6j+Cbg6iSeEM9MmBaCLoA8ROSwUl1JcTBVqmVDc
tudDgTEbLMFQtsJi6iVrqLlgcC99j6B2+ngFtgalZGMKLMC1k9yGJ06b6e6d5s6Q
XQpPfY1JnefK3LQpIH+Rz9uko+XgD5yG8ls15RNHouV1iHCaTl4zt2ZbwL77F+LQ
j4UY+M0riofXCANXh3OC5s3q18QPZ4Kis3pvhcJAfRAWzS7FKS8luUpI/gtAf05z
ievH0V6L5PwkqQsn6dFIAnkGDPB9KpuaXTbAGBC65qnsrZ3HnNlFqI16
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:57:14 2025 by rpki-client