Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
File:                     AIjURX5EJgLXZtupDh_CJL1-i7Y.mft (raw, json)
Hash identifier:          8DnbI90WFKhtiFtwJddHnayNaziZFLIIEOUGWFu2Dbo=
Subject key identifier:   E4:3C:61:2B:26:F4:73:EC:F5:66:21:B2:3D:B0:92:83:D5:C0:D3:90
Authority key identifier: 00:88:D4:45:7E:44:26:02:D7:66:DB:A9:0E:1F:C2:24:BD:7E:8B:B6
Certificate issuer:       /CN=F3640D65AF/serialNumber=0088D4457E442602D766DBA90E1FC224BD7E8BB6
Certificate serial:       6F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
Manifest number:          6E
Signing time:             Wed 05 Nov 2025 05:35:13 +0000
Manifest this update:     Wed 05 Nov 2025 05:35:12 +0000
Manifest next update:     Fri 07 Nov 2025 05:35:12 +0000
Files and hashes:         1: AIjURX5EJgLXZtupDh_CJL1-i7Y.crl (hash: +0dd+mpQm6O4q1zvDPGM8y7K0MQEcYKYHFX3v6kMo24=)
                          2: AF736D22669511F0AE6F0B7FDAE4EC9C.roa (hash: z5Q6Me8+hrh2wppVl3E0nnD4XDb7iRxKouJNGG6mdYs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640D65AF, serialNumber=0088D4457E442602D766DBA90E1FC224BD7E8BB6
        Validity
            Not Before: Nov  5 05:35:12 2025 GMT
            Not After : Nov  7 05:35:12 2025 GMT
        Subject: CN=690ae211-e3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:a2:a1:4c:14:2a:bb:2a:57:e9:8c:b4:ef:
                    63:1c:c2:4a:65:7c:2b:86:73:10:0d:77:d6:f8:7a:
                    f6:85:aa:67:a5:a6:cf:f5:eb:d2:5c:dc:9b:44:c3:
                    5c:37:25:c5:eb:46:b2:fe:2d:44:3f:c7:07:92:57:
                    a6:90:36:54:0f:0e:1c:9e:1b:a8:a2:44:2a:2a:71:
                    17:5b:0d:25:23:0b:fe:5d:28:90:c3:cb:06:27:4c:
                    c0:0e:0e:f6:12:02:3c:07:2e:f3:84:42:3e:fd:7c:
                    03:bc:95:df:d5:31:cf:25:f9:82:77:29:e5:2a:93:
                    c7:e9:79:ff:2b:90:b2:5e:16:6f:88:03:45:ea:d1:
                    09:0e:de:55:8d:28:c9:2b:98:0d:20:92:4b:01:fc:
                    33:a6:42:6b:4a:18:e5:48:2f:f7:64:6b:ce:b3:4a:
                    d9:7b:eb:40:f3:18:3d:62:06:67:30:9b:fb:e5:a1:
                    81:b0:5b:7b:6e:8c:15:1f:1a:f0:3a:a4:e1:93:0d:
                    d0:cd:9f:2c:27:b9:45:2d:ac:af:4e:8b:c9:b4:fe:
                    da:25:43:0e:df:c8:37:8f:f4:9e:2a:a4:c6:98:f5:
                    bd:75:aa:aa:e0:65:1a:b7:24:48:f7:c5:64:20:fe:
                    f5:1a:18:bd:20:5c:ef:23:50:1e:2c:15:61:14:b0:
                    8d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3C:61:2B:26:F4:73:EC:F5:66:21:B2:3D:B0:92:83:D5:C0:D3:90
            X509v3 Authority Key Identifier:
                keyid:00:88:D4:45:7E:44:26:02:D7:66:DB:A9:0E:1F:C2:24:BD:7E:8B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ad:d6:ce:23:e6:c1:14:c4:cf:04:24:a2:30:4f:c8:c2:2f:
         3f:f9:70:7d:22:2f:a7:33:88:2d:7e:79:03:00:5e:11:66:7c:
         68:cd:37:f0:69:49:22:72:63:8e:2b:79:30:44:5b:08:7a:d4:
         66:43:c6:40:e9:b9:c1:84:01:cb:3a:fe:91:91:86:22:bf:23:
         c4:65:fe:4a:39:b8:fe:24:9c:56:7a:fd:b9:6f:d6:47:93:5e:
         8d:e1:b6:09:6d:ef:c6:eb:d5:ea:d0:1d:9a:b1:72:3f:a9:0e:
         05:c9:03:09:24:9b:48:7d:3d:3b:a2:7c:e9:13:24:47:a1:58:
         a6:e7:e8:3e:98:7b:4a:2b:a1:7c:a4:6d:07:e9:26:98:27:bd:
         28:2d:14:fd:58:cd:73:b3:33:fb:dc:4a:85:f1:14:aa:c3:3d:
         5e:59:68:a7:1c:37:aa:3a:c4:65:76:be:5a:2d:e3:2f:72:4e:
         25:89:9c:52:e6:85:41:78:68:6f:32:24:e8:1a:46:cd:71:0f:
         9e:07:2b:1e:2d:64:82:45:93:9f:28:61:ec:4e:b9:76:79:4f:
         77:65:96:88:b6:94:e3:de:ae:75:63:2b:ab:7a:a0:5b:06:26:
         5c:3f:38:4d:2a:d6:86:e6:5d:72:7e:1a:13:81:28:c3:2d:a7:
         5d:4d:4b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:53:10 2025 by rpki-client