Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
File:                     hv7S7RnCBnpIIiG2RdYMRaTVap0.mft (raw, json)
Hash identifier:          m3JBrO9nFAA3jXd4OZvo4ncKsocElYmTfd8mZzZqOTI=
Subject key identifier:   7B:C5:95:A7:EF:D4:36:38:66:3F:8C:F1:B0:21:C0:64:20:87:0E:F3
Authority key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D
Certificate issuer:       /CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
Certificate serial:       0EEA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
Manifest number:          0ED8
Signing time:             Wed 05 Nov 2025 00:56:03 +0000
Manifest this update:     Wed 05 Nov 2025 00:56:02 +0000
Manifest next update:     Fri 07 Nov 2025 00:56:02 +0000
Files and hashes:         1: hv7S7RnCBnpIIiG2RdYMRaTVap0.crl (hash: z3CmXISfVH47w+vnq4QwEnxgVw3u2YdqOSYlQAz0Vh4=)
                          2: 655F290413AE11F09DCA6CAC762E951A.roa (hash: MtTA05if95p/mNtRLM4nlSrYgGLQ7Pky8WnDGWJT8Mc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3818 (0xeea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36472E5AF, serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
        Validity
            Not Before: Nov  5 00:56:02 2025 GMT
            Not After : Nov  7 00:56:02 2025 GMT
        Subject: CN=690aa0a3-e86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:90:00:73:6d:b2:e7:ef:21:b5:3f:31:09:df:
                    bf:ac:a9:80:2a:1f:a8:10:86:49:7a:16:a1:ca:df:
                    d2:80:24:e0:71:81:ea:cf:7d:f1:05:67:a4:da:7f:
                    87:ef:6f:96:fa:b4:19:01:ca:c0:e9:5d:43:58:81:
                    aa:ca:ad:fb:3a:e6:8f:f2:1b:b3:58:37:71:a8:9d:
                    74:8b:37:89:35:e1:8f:90:f5:a5:7f:2e:c3:9d:26:
                    12:5a:05:e6:c6:5f:37:af:eb:b3:97:14:66:52:f0:
                    24:ea:a1:72:02:92:ac:f8:00:52:1b:50:3c:5d:a8:
                    85:db:25:ab:2d:de:88:26:a3:cb:30:8a:e9:0d:3f:
                    e8:fe:27:74:c2:28:c4:ef:66:3c:06:61:d0:b3:7a:
                    c3:28:14:3c:fd:29:9a:14:5f:84:cb:7e:44:12:08:
                    99:97:d3:82:13:0a:ee:52:01:14:0b:38:48:98:35:
                    b9:f2:84:18:81:51:4a:a7:e6:96:5e:c2:8a:53:8b:
                    28:65:d2:01:1c:37:5a:cb:08:b3:a2:1d:07:2f:e0:
                    fc:5b:62:d9:93:d3:03:79:43:30:9b:cc:87:6d:e4:
                    41:ea:4c:df:3f:95:af:e4:7f:d8:9d:0e:50:cc:41:
                    57:2b:ff:28:0f:b2:8d:4d:01:76:cf:9b:d2:28:d7:
                    4e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C5:95:A7:EF:D4:36:38:66:3F:8C:F1:B0:21:C0:64:20:87:0E:F3
            X509v3 Authority Key Identifier:
                keyid:86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:da:ce:11:91:85:ba:2e:13:2b:eb:f1:65:97:f4:33:a7:bc:
         01:dc:49:0b:95:28:05:2e:99:2f:b9:95:52:55:fe:03:65:65:
         b9:b5:ec:9e:27:d2:c9:87:7d:f4:57:f3:b9:21:9f:17:c3:a3:
         db:0f:cb:e1:cf:39:6f:10:19:92:8d:7d:6b:d3:68:ad:7b:54:
         9a:46:09:09:14:94:47:35:cf:08:13:8e:6e:23:e3:64:3c:74:
         8f:4c:f6:f7:6f:19:dd:29:6d:05:67:a5:85:1d:51:49:01:46:
         cc:62:a6:49:80:06:33:c9:58:c8:2c:1c:26:e0:38:9f:a0:6b:
         82:5d:ab:15:41:08:0f:a7:f6:cc:b6:e5:d9:ff:d0:3b:1f:a1:
         50:4a:b6:a3:44:b0:d9:c0:6e:1e:d8:07:9b:1b:e2:be:1a:c9:
         4c:59:d7:c5:a1:59:41:13:f9:2e:44:27:c1:cc:4d:d1:b4:d1:
         0e:4f:7b:81:68:ad:ed:b4:28:65:38:00:79:e0:15:53:66:fd:
         e4:53:dc:c1:08:23:fa:6b:84:a1:2d:92:22:b4:52:22:1d:ba:
         df:55:d0:3b:e9:60:6d:98:35:cf:61:fe:e4:54:57:54:7e:8f:
         4d:47:6d:f8:9c:cf:f3:02:c5:28:5c:8a:9b:db:67:2a:3f:b5:
         11:33:0b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:49:37 2025 by rpki-client