Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
File:                     CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft (raw, json)
Hash identifier:          j9l9cr5uajxzd2mGA5OhNafmA+IOeJCRsxwiNQ61TmU=
Subject key identifier:   D3:04:3D:5B:92:3A:16:87:D6:DE:2C:09:BD:5F:96:93:2A:FD:97:C5
Authority key identifier: 09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8
Certificate issuer:       /CN=F363763AAF/serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
Certificate serial:       0482
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
Manifest number:          047E
Signing time:             Wed 05 Nov 2025 03:17:41 +0000
Manifest this update:     Wed 05 Nov 2025 03:17:40 +0000
Manifest next update:     Fri 07 Nov 2025 03:17:40 +0000
Files and hashes:         1: CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl (hash: HlOyZsgMXor+rPgFl6Azs3ETLK3PuD/AdJoz3NrOMcM=)
                          2: 0C17C5923C6511F0BEB31A91DAE4EC9C.roa (hash: Dk3egDXLcZWiCKWFaQebnI7KBH7G+aSO1771Cj6q3cY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363763AAF, serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
        Validity
            Not Before: Nov  5 03:17:40 2025 GMT
            Not After : Nov  7 03:17:40 2025 GMT
        Subject: CN=690ac1d5-56c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f7:a7:e2:34:b3:6c:7c:d3:58:7f:34:df:0d:
                    6a:92:45:a3:ff:a7:c1:ba:c1:a6:87:82:b8:10:e6:
                    f4:87:20:0e:d5:9b:17:11:b6:51:12:93:ff:07:d1:
                    02:7b:51:58:85:7f:0c:48:1d:b7:04:81:91:54:4b:
                    7f:61:49:38:c7:0c:ac:82:06:42:83:60:41:b8:4a:
                    b0:f1:66:51:07:f4:bf:7f:d3:c6:bd:45:d3:8c:62:
                    89:af:28:fa:af:13:51:70:41:d7:31:17:34:db:ed:
                    25:cf:3a:4a:53:af:d3:06:3b:0b:2e:5f:9d:b1:3d:
                    ab:25:4c:f3:85:cb:c4:5c:2b:bb:f7:1a:bd:06:ab:
                    4d:6d:c1:41:8a:2c:ad:0a:59:83:79:66:9f:bc:88:
                    29:c0:eb:91:d3:dd:42:a1:20:45:43:53:ee:e5:4c:
                    da:bc:a2:c0:58:43:af:20:db:ed:ad:90:6f:d2:dc:
                    80:d4:ac:bc:82:41:31:37:46:7f:91:34:40:6e:85:
                    1c:01:69:45:3b:f9:70:e2:8e:75:b2:80:1e:64:71:
                    0a:d0:5d:c8:fd:04:7c:0d:3f:26:96:f7:95:14:be:
                    d5:9e:fe:90:c6:9e:95:7c:03:59:73:a7:a4:c1:58:
                    e4:c5:22:be:ec:cf:44:fd:f4:0d:02:ea:3d:6f:26:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:04:3D:5B:92:3A:16:87:D6:DE:2C:09:BD:5F:96:93:2A:FD:97:C5
            X509v3 Authority Key Identifier:
                keyid:09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:0a:c1:e9:8b:88:4e:a9:0c:be:70:53:2c:21:e3:65:d9:31:
         3b:94:60:b4:2d:5c:c7:42:fa:95:d8:a9:94:b7:ba:e9:e0:8f:
         5f:7a:4e:2b:ad:f8:6f:f7:04:17:5e:86:0d:ec:e7:d8:bf:66:
         49:10:cd:6e:ab:4d:c5:70:52:31:7e:39:d9:a5:e3:96:88:f8:
         4a:3c:7b:b5:15:c0:b3:d2:5f:c7:42:f9:24:44:ef:7b:42:16:
         b3:a5:d1:68:82:5e:83:ae:70:50:5d:23:41:7f:1e:e9:50:39:
         bc:35:c6:3d:53:14:33:d9:e1:8e:6b:1a:a5:de:6a:e2:b5:e9:
         64:23:1f:19:ae:c2:32:67:84:ce:3e:76:2f:67:c9:a5:b9:4c:
         e6:91:3e:05:53:a2:08:ed:9f:17:3b:96:e4:d3:2a:f6:15:00:
         bf:bc:d9:83:37:62:6e:64:3f:41:c0:34:10:ee:fe:4c:4d:9f:
         dc:19:f2:d0:a2:bc:74:c3:a8:26:d1:44:d3:15:ad:af:97:93:
         66:55:e1:76:b3:7a:57:57:7d:e7:2e:a8:a7:c2:02:ab:a1:19:
         22:20:97:c6:f1:58:8a:f0:cf:86:6c:c8:dd:68:56:bf:a9:88:
         a0:4f:71:64:34:f0:d6:d5:84:0d:05:40:29:d1:ca:24:0f:34:
         c6:ef:0c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:29:27 2025 by rpki-client