Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
File:                     h-G7jI0reZLqTr7rMz_hQp5w7po.mft (raw, json)
Hash identifier:          wPsz3waou5HO9vAHkG1zsd5hGUgLfoNMYm8BAajn6oc=
Subject key identifier:   65:79:9F:1E:15:04:3A:F0:A7:4A:BF:C0:00:87:82:28:5C:F3:C3:62
Authority key identifier: 87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A
Certificate issuer:       /CN=F3646FFEAF/serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
Certificate serial:       0545
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
Manifest number:          0545
Signing time:             Tue 04 Nov 2025 03:58:39 +0000
Manifest this update:     Tue 04 Nov 2025 03:58:38 +0000
Manifest next update:     Thu 06 Nov 2025 03:58:38 +0000
Files and hashes:         1: h-G7jI0reZLqTr7rMz_hQp5w7po.crl (hash: QFPKrHjRRCLy9HAeMXLoSYDvj0tZ4Tq0vZDhdrBRga4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 03:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1349 (0x545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAF, serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
        Validity
            Not Before: Nov  4 03:58:38 2025 GMT
            Not After : Nov  6 03:58:38 2025 GMT
        Subject: CN=690979ef-e882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:bf:3f:91:32:56:a1:70:ed:58:3e:7e:7a:1c:
                    1c:74:c2:67:09:8f:92:11:4a:3a:1b:c0:4c:d7:1f:
                    b3:f7:1b:e5:6e:f6:38:8e:af:80:08:58:ab:be:46:
                    a2:1b:32:b6:3e:dd:9d:60:fe:32:3c:f4:08:e9:af:
                    38:92:ad:f1:97:af:ee:69:52:a4:38:02:5b:0b:c2:
                    d0:18:ed:2f:e5:3b:aa:34:31:dc:4c:10:aa:3b:27:
                    31:f4:4d:5a:af:62:80:2b:d3:d7:f1:6c:23:9d:19:
                    b2:60:dc:8a:18:36:d9:e0:d5:23:43:7c:f6:24:ba:
                    8f:1f:d0:b8:f6:d3:c5:69:b1:d2:9d:18:bd:fb:d1:
                    95:e6:4c:86:50:70:1e:d6:26:9c:25:bf:54:2e:44:
                    b7:37:cf:60:0e:5b:3a:72:5f:2a:be:bb:93:76:9e:
                    c9:de:9d:63:ed:0a:ef:4f:7e:3b:54:82:9e:17:38:
                    59:fb:05:9b:a2:dc:e0:cd:b7:51:ca:21:a9:8d:2d:
                    ac:d3:fb:2f:50:e0:c0:99:d1:c2:ed:cc:78:63:3d:
                    81:62:9b:c9:a6:f1:e9:b5:66:66:7a:f4:41:a3:f2:
                    fb:f3:f7:a8:43:0e:a3:25:97:e4:47:7e:55:e7:01:
                    d9:fe:9f:e7:7a:62:9a:0a:f4:09:79:92:87:b8:58:
                    42:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:79:9F:1E:15:04:3A:F0:A7:4A:BF:C0:00:87:82:28:5C:F3:C3:62
            X509v3 Authority Key Identifier:
                keyid:87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5e:12:2a:31:ef:e9:46:e6:f8:6d:88:5b:46:44:df:ad:d5:
         bf:0a:d3:55:d4:44:bc:e1:6b:1d:e4:e0:47:3c:57:44:b1:7b:
         90:87:b2:62:12:b5:c9:97:10:86:08:61:d8:9d:7d:7e:37:b9:
         8c:66:a3:36:56:00:c2:c6:af:7c:3e:c8:14:43:6a:a0:e7:14:
         bc:6e:d1:fa:cb:76:c2:14:a4:5c:8b:6c:d7:21:d6:7e:4c:93:
         39:4c:2d:1d:ec:fd:04:5d:c1:77:0e:ab:86:5a:af:d5:57:3f:
         0c:18:44:0e:5b:36:c8:b1:6b:7f:30:fb:67:99:9f:e2:c8:cd:
         8b:1b:d2:34:89:56:fb:99:70:a7:a9:02:e3:f5:4b:b2:18:b8:
         65:52:a1:2d:e3:68:ab:23:38:e5:bb:5a:00:15:83:c2:73:2c:
         2c:d5:56:30:c6:44:d6:4d:fd:78:32:9b:2a:e3:a1:63:d9:6e:
         77:30:be:38:8a:e0:81:04:da:5f:dd:5f:1f:4f:5f:53:9a:32:
         24:e8:80:3e:44:01:b7:00:9f:5c:94:57:1b:83:0a:0a:ad:e3:
         2b:6f:6c:b6:b3:81:cd:ab:47:d4:08:56:e6:09:f0:80:d4:6d:
         34:a4:ee:7d:05:1b:f4:cb:bf:72:fd:6d:6a:de:9e:5f:71:f8:
         c0:c1:b7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:17:26 2025 by rpki-client