Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
File:                     QoqJMY5QZ92cjs9n5355xf2jeSs.mft (raw, json)
Hash identifier:          XWpcENWZ1mG9/Yrx+vXvRRGvRO2lraB5sdMr07dCnQw=
Subject key identifier:   37:F5:EC:4C:D8:3C:E5:60:05:4D:34:BB:73:98:86:E4:9D:64:BE:10
Authority key identifier: 42:8A:89:31:8E:50:67:DD:9C:8E:CF:67:E7:7E:79:C5:FD:A3:79:2B
Certificate issuer:       /CN=F3643835AF/serialNumber=428A89318E5067DD9C8ECF67E77E79C5FDA3792B
Certificate serial:       0909
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
Manifest number:          0903
Signing time:             Wed 05 Nov 2025 01:35:50 +0000
Manifest this update:     Wed 05 Nov 2025 01:35:49 +0000
Manifest next update:     Fri 07 Nov 2025 01:35:49 +0000
Files and hashes:         1: QoqJMY5QZ92cjs9n5355xf2jeSs.crl (hash: hWLsd7n5Qrwu3S25M52VULAUqTzKnj7PXVqcVlke4z0=)
                          2: 96F143A4E4E711E9B8915410F8AEA228.roa (hash: zm3YN7AFZ7BWxdBhPzmjQdqjaH4X6z5W4MSW9J0ipCo=)
                          3: 06790CE8E4E811E9A6E7B210F8AEA228.roa (hash: 3FK+sU9EsywdjoaV3PADXyQzo9SoU1mDVNi/r4tmF6E=)
                          4: 5E4429F4E4E711E995912310F8AEA228.roa (hash: CSKEv24WJq2rSIqhdKHY7ezulnm1GEl0XlEPfSauyvI=)
                          5: 8F85BED4D55F11E9A0A39B43F8AEA228.roa (hash: 6Uo+JJP2STlyRtTl2viFHjgVYtIrz3te0pfJXrN3Em4=)
                          6: D6CFCEFAE4E711E98D4D8510F8AEA228.roa (hash: c7DaldmCVPjpuumPlhE9K/tUWBg94JNU91iBaGrs7WA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313 (0x909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3643835AF, serialNumber=428A89318E5067DD9C8ECF67E77E79C5FDA3792B
        Validity
            Not Before: Nov  5 01:35:49 2025 GMT
            Not After : Nov  7 01:35:49 2025 GMT
        Subject: CN=690aa9f6-6984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:74:21:a9:93:af:37:0d:17:f3:ec:11:e5:db:
                    dd:67:38:7d:94:e0:67:fb:73:3f:65:a6:2f:fd:ab:
                    c8:b4:b1:6c:69:ad:05:2f:c0:14:ca:2d:ea:93:6e:
                    f7:1a:0f:b7:5d:82:e6:d3:58:07:40:df:23:93:80:
                    ba:2b:10:24:e0:6a:1b:14:63:7d:84:be:cb:c4:13:
                    fd:df:e5:bc:10:3b:ea:2b:bc:9c:56:96:54:3d:ed:
                    0d:06:4e:e4:96:8b:39:34:72:39:5c:ef:39:02:25:
                    24:f0:29:aa:b9:a0:e5:39:cb:ae:b2:7f:84:51:aa:
                    f0:43:fa:8e:13:a5:04:21:68:10:26:09:a3:64:5c:
                    ba:d2:7e:da:ec:da:b1:9b:4d:2c:7a:e1:c1:e8:d9:
                    7c:3f:38:14:d4:76:97:e3:37:dc:8d:1d:c8:b8:9d:
                    67:e5:56:b1:dd:a7:5c:77:ce:3f:b2:a7:05:6f:b6:
                    3f:d3:71:97:a2:82:75:ff:54:be:a3:f6:4c:e0:0d:
                    b1:94:b9:7c:3f:5e:0b:d1:ac:18:ee:57:9c:3e:63:
                    b0:2f:18:36:6c:b6:91:39:28:9c:1b:6b:4b:ea:ca:
                    23:00:0b:db:4a:5b:69:f7:58:50:9a:a8:e8:cc:e2:
                    c3:1d:96:91:b2:c5:98:c3:22:19:cf:d4:e0:ba:76:
                    4d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F5:EC:4C:D8:3C:E5:60:05:4D:34:BB:73:98:86:E4:9D:64:BE:10
            X509v3 Authority Key Identifier:
                keyid:42:8A:89:31:8E:50:67:DD:9C:8E:CF:67:E7:7E:79:C5:FD:A3:79:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6a:b3:49:86:f5:f0:0d:96:a1:56:83:47:2b:ef:af:cb:f5:
         c0:ee:d9:67:e9:6f:ae:4e:f3:eb:25:f4:0f:56:93:8f:92:3c:
         d8:9e:76:66:9e:43:41:fa:7f:02:da:f8:34:42:0c:f5:dd:ac:
         1e:70:5d:d7:8e:6e:89:c4:f1:5e:bd:ee:68:a3:18:dc:e5:d3:
         fd:c1:c1:ec:15:59:f4:80:d6:42:db:f6:63:c6:0c:d9:36:2c:
         18:9a:eb:f0:f0:c6:8b:1b:ec:6c:fe:c5:29:45:de:a7:a2:86:
         e0:70:3c:e8:21:a0:75:d9:4f:14:57:2d:26:83:67:be:57:9d:
         27:c4:d1:de:bb:7b:de:df:0c:a8:c7:3f:c3:a4:ec:61:fb:a1:
         ce:dd:8e:f2:38:ae:30:29:20:af:a4:92:60:3b:40:0a:3c:bd:
         ed:01:8d:f5:4e:36:09:9f:8b:a6:f7:52:9b:8a:90:00:25:e2:
         f2:72:d7:9a:f5:38:2c:c9:09:2c:cf:b3:e0:80:68:da:55:78:
         4c:d6:87:4f:ee:f1:0c:cc:bc:40:2a:f6:9a:bb:33:94:a8:81:
         75:fb:11:06:f3:cc:05:6b:da:a5:b7:26:a9:e0:7a:e6:95:6d:
         37:8a:3e:07:10:88:4b:92:b0:86:2b:f8:ed:fc:d2:68:0d:1f:
         bc:7e:13:f3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCQkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDM4MzVBRjExMC8GA1UEBRMoNDI4QTg5MzE4RTUwNjdERDlDOEVDRjY3RTc3RTc5
QzVGREEzNzkyQjAeFw0yNTExMDUwMTM1NDlaFw0yNTExMDcwMTM1NDlaMBgxFjAU
BgNVBAMTDTY5MGFhOWY2LTY5ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDrdCGpk683DRfz7BHl291nOH2U4Gf7cz9lpi/9q8i0sWxprQUvwBTKLeqT
bvcaD7ddgubTWAdA3yOTgLorECTgahsUY32EvsvEE/3f5bwQO+orvJxWllQ97Q0G
TuSWizk0cjlc7zkCJSTwKaq5oOU5y66yf4RRqvBD+o4TpQQhaBAmCaNkXLrSftrs
2rGbTSx64cHo2Xw/OBTUdpfjN9yNHci4nWflVrHdp1x3zj+ypwVvtj/TcZeignX/
VL6j9kzgDbGUuXw/XgvRrBjuV5w+Y7AvGDZstpE5KJwba0vqyiMAC9tKW2n3WFCa
qOjM4sMdlpGyxZjDIhnP1OC6dk0jAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUN/Xs
TNg85WAFTTS7c5iG5J1kvhAwHwYDVR0jBBgwFoAUQoqJMY5QZ92cjs9n5355xf2j
eSswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzODM1L0Q1Qjk5NEE4RDU1RTExRTlCNzU3MTA0M0Y4QUVBMjI4L1FvcUpN
WTVRWjkyY2pzOW41MzU1eGYyamVTcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FvcUpNWTVRWjkyY2pzOW41MzU1eGYyamVTcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDM4MzUvRDVCOTk0QThENTVFMTFFOUI3NTcxMDQzRjhB
RUEyMjgvUW9xSk1ZNVFaOTJjanM5bjUzNTV4ZjJqZVNzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5arNJhvXwDZahVoNHK++vy/XA7tln
6W+uTvPrJfQPVpOPkjzYnnZmnkNB+n8C2vg0Qgz13awecF3Xjm6JxPFeve5ooxjc
5dP9wcHsFVn0gNZC2/ZjxgzZNiwYmuvw8MaLG+xs/sUpRd6noobgcDzoIaB12U8U
Vy0mg2e+V50nxNHeu3ve3wyoxz/DpOxh+6HO3Y7yOK4wKSCvpJJgO0AKPL3tAY31
TjYJn4um91KbipAAJeLyctea9TgsyQksz7PggGjaVXhM1odP7vEMzLxAKvaauzOU
qIF1+xEG88wFa9qltyap4HrmlW03ij4HEIhLkrCGK/jt/NJoDR+8fhPz
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:28:18 2025 by rpki-client