Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
File:                     poVzBBtD85x4jvNbdksxjIhJyf4.mft (raw, json)
Hash identifier:          j2SI1DmtRqDZHDIoBrUZE6Ev9xdhUfC8f47Bdr1SW1I=
Subject key identifier:   EA:58:06:3A:4E:20:88:05:13:4D:F2:08:15:3E:74:D5:35:42:87:CA
Authority key identifier: A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
Certificate issuer:       /CN=F3632159AF/serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
Certificate serial:       0482
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
Manifest number:          0482
Signing time:             Wed 05 Nov 2025 03:16:28 +0000
Manifest this update:     Wed 05 Nov 2025 03:16:27 +0000
Manifest next update:     Fri 07 Nov 2025 03:16:27 +0000
Files and hashes:         1: poVzBBtD85x4jvNbdksxjIhJyf4.crl (hash: FkhEEc9ve4xyC8dWbkjd3xyBlpDpO5judtGS5qEN+sk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AF, serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
        Validity
            Not Before: Nov  5 03:16:27 2025 GMT
            Not After : Nov  7 03:16:27 2025 GMT
        Subject: CN=690ac18c-e5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cc:b0:cf:b0:1b:69:58:93:12:1d:3f:dd:af:
                    5e:f9:48:c7:60:cc:91:3c:b1:3e:18:05:66:54:13:
                    73:a0:34:c1:47:aa:bb:1f:51:10:0f:d8:49:ea:68:
                    a8:a1:98:a7:56:47:92:70:94:52:9e:b8:b6:75:16:
                    82:0e:6c:30:72:6a:d7:ea:cd:00:08:65:53:f5:02:
                    76:56:ae:c4:7c:44:81:71:3b:69:df:ce:b7:bf:e0:
                    ff:b2:77:92:ad:14:66:72:ed:bc:fe:bd:15:d4:b0:
                    00:62:59:66:4d:a3:a7:08:61:6a:df:2c:b0:ae:ed:
                    0b:5a:2a:99:4d:7c:c1:50:a1:99:39:0f:2f:1a:57:
                    64:66:60:fa:83:69:b1:3a:3d:d4:d5:70:11:4d:1d:
                    7f:ed:a4:e5:ca:59:69:fd:e1:f0:33:42:00:1f:b5:
                    f0:21:9e:e3:86:2c:58:7f:24:b8:23:13:6d:2c:49:
                    d5:66:ba:de:a4:d4:6f:a6:95:4b:e4:9a:21:57:79:
                    36:4a:7a:2b:df:db:18:c9:ed:8d:93:f6:14:06:e0:
                    f1:ee:62:c0:22:20:44:91:d6:37:38:aa:47:aa:1f:
                    31:8d:ae:2b:16:52:68:31:2a:ec:fc:68:b6:65:74:
                    1e:e6:ea:c8:66:66:f4:62:25:8b:40:1c:2c:6f:4b:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:58:06:3A:4E:20:88:05:13:4D:F2:08:15:3E:74:D5:35:42:87:CA
            X509v3 Authority Key Identifier:
                keyid:A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ad:92:12:cf:ad:bb:9a:92:3d:cd:9b:23:b0:d3:c8:0d:14:
         15:9e:df:91:5b:22:d9:c4:d1:c1:3c:6f:95:23:b8:42:55:a7:
         ab:f5:35:6b:4a:ed:59:be:8e:e5:39:f8:a1:c0:a5:65:1b:68:
         22:34:5e:5a:05:df:2f:85:ab:72:76:0e:63:fb:58:01:92:5f:
         c8:1c:48:ec:76:34:bd:4a:5c:67:46:9c:2d:d4:e4:68:b2:c1:
         f6:3b:22:ce:45:a9:78:fc:ef:3f:f8:77:5d:af:96:3d:52:62:
         a5:96:f6:cc:cc:81:0f:be:53:63:d2:65:b9:bb:42:24:43:81:
         48:0a:e3:53:59:8f:1b:17:2d:d1:b4:ce:a1:1d:4a:0c:d6:cf:
         cc:c4:6e:2c:40:00:dd:2e:79:83:ed:a1:e6:e0:a8:38:56:97:
         3b:f8:8a:75:e9:5e:95:4f:8f:bc:8e:f7:64:01:be:45:f9:58:
         56:ad:df:95:b6:c6:1f:5e:ad:a5:66:99:70:05:73:c3:2a:77:
         55:a4:84:0c:39:a2:1f:55:5e:fe:aa:b6:70:f7:77:07:20:fc:
         44:1f:aa:3f:8f:90:98:58:9a:ed:39:c7:89:24:9d:64:2d:ce:
         36:30:6c:ad:dc:78:0a:85:cb:0f:41:18:88:f1:9a:90:4b:69:
         13:71:94:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:41:25 2025 by rpki-client