Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
File:                     6J7-NR5gJSomJW2N7o9p53JMrVo.mft (raw, json)
Hash identifier:          zHTadYWm/DUxFWBczREekIalLwf8yH2H0fmPabK6qfk=
Subject key identifier:   DB:4B:51:2D:46:4D:27:01:2D:DB:A1:CB:58:56:CC:23:DF:F3:90:2D
Authority key identifier: E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
Certificate issuer:       /CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Certificate serial:       0441
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
Manifest number:          0433
Signing time:             Wed 05 Nov 2025 03:25:01 +0000
Manifest this update:     Wed 05 Nov 2025 03:25:00 +0000
Manifest next update:     Fri 07 Nov 2025 03:25:00 +0000
Files and hashes:         1: 6J7-NR5gJSomJW2N7o9p53JMrVo.crl (hash: pO7YEH5BnWcTRknRTxM9ILnkmGK3y0FnzhwQvDmsUng=)
                          2: C70E15E690A611F0BA37EFC8DAE4EC9C.roa (hash: afhLw0Uh3icsBTOuNawgGYosgUqCE0Qye6EXKXcIrws=)
                          3: 5853244A4E9611F082A2187CDAE4EC9C.roa (hash: BjWsYHunCpGazJaSX7YroZ5H4AtJQ65jDY0lzxf2ugk=)
                          4: 738BAA144E9811F0A9D2BB89DAE4EC9C.roa (hash: ck6Hfa9o+rOyWD/476KdJpzgAepi3ZyVmrVELgOsXy8=)
                          5: 85CD27B24E9711F09324FC84DAE4EC9C.roa (hash: MJo/Fmjp6Om1z6KmVpCasQfCype9BDqhT5uExmuvCzs=)
                          6: BD24CD4C4E9611F09E12877EDAE4EC9C.roa (hash: ggKg7XcyWtRTXjtI3HZCnjewbp3+38BSFVAZmv0E9Mc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089 (0x441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FF0AF, serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
        Validity
            Not Before: Nov  5 03:25:00 2025 GMT
            Not After : Nov  7 03:25:00 2025 GMT
        Subject: CN=690ac38d-fdd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:38:9e:93:d9:50:4d:cb:33:96:ee:6f:3f:51:
                    a0:c2:a1:6a:10:3c:3f:04:c4:8b:1d:e9:7e:51:06:
                    d2:41:6b:d7:e5:e5:ab:96:c4:ec:7b:17:f2:33:d2:
                    b5:e8:bd:7b:08:be:5a:34:cf:d0:c2:5e:06:27:b3:
                    a8:5c:68:e2:fa:9e:6f:bb:f1:1d:b7:7e:a9:22:fc:
                    76:90:59:ab:6d:7b:c9:7b:aa:37:e5:c0:aa:3d:b9:
                    32:6a:5e:64:81:fd:31:b3:69:31:94:24:42:2d:1b:
                    29:9f:77:dd:8a:c0:f2:5c:0d:a9:48:45:43:c8:90:
                    05:da:98:e4:b3:34:99:d1:9c:1d:99:ce:1e:4f:f8:
                    25:dc:98:6f:e5:b2:ac:d5:d8:9d:96:1e:1f:a7:83:
                    df:6f:9e:f8:4b:79:15:00:49:f3:30:52:82:a4:6b:
                    8d:52:72:32:f9:52:6a:d5:80:a0:52:f3:26:8e:58:
                    0c:5b:72:93:eb:25:fe:16:95:e1:c1:e6:68:8c:fe:
                    f6:f1:b0:66:a3:ed:f0:55:36:63:2d:54:2f:f5:67:
                    bb:11:e4:f4:2c:ee:c7:a4:05:f6:1a:d8:5c:bc:ea:
                    c1:08:95:ed:8c:08:0c:d0:47:c8:ac:36:45:f0:fa:
                    84:aa:21:20:15:3d:21:14:df:eb:69:a6:eb:21:10:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4B:51:2D:46:4D:27:01:2D:DB:A1:CB:58:56:CC:23:DF:F3:90:2D
            X509v3 Authority Key Identifier:
                keyid:E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:4e:91:80:b2:68:35:06:6d:5c:69:d6:7b:f4:30:cb:da:2c:
         a6:b2:25:c6:85:00:f0:7d:27:23:c7:b0:3a:83:8e:33:17:56:
         47:2c:23:d9:fc:9f:11:e2:5b:0f:04:0c:1a:7b:3b:47:cd:4e:
         45:fb:28:26:6a:eb:ac:c4:d2:8a:75:bc:2b:ef:29:7c:4e:f4:
         f0:6b:46:7c:52:c3:f6:d6:2d:bb:76:66:4d:b1:ea:39:8b:d7:
         f0:6b:5f:7a:e5:3f:ec:7f:36:fa:12:59:8b:fd:78:c9:e6:ea:
         d0:b8:87:97:fe:8a:34:6c:c4:19:04:a0:27:2b:df:b1:a6:c6:
         b2:0b:aa:c6:cb:29:58:e6:dd:41:9a:fa:7c:1f:22:e8:cc:f0:
         82:f6:43:75:64:1d:b1:62:99:e8:18:02:08:2b:f8:aa:37:c4:
         47:a7:80:fa:19:0a:63:f2:9e:33:90:4f:0c:77:f4:b2:80:8d:
         e0:53:a7:af:1a:08:00:b0:88:98:39:90:85:ea:a6:7e:6b:fa:
         16:71:8a:bd:79:97:c4:f6:11:83:9c:72:3d:11:94:e5:3e:a1:
         d1:3b:22:49:66:5a:eb:74:47:99:27:38:23:1e:15:89:8d:38:
         2a:74:5e:55:24:2a:e7:fd:95:2b:59:0f:e7:45:1b:55:e3:13:
         7c:0f:13:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:19 2025 by rpki-client