Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
File:                     opdOZzBDJDiMiIAucX1rkoGlJjI.mft (raw, json)
Hash identifier:          1HfyBf1nRB9pwJ6a3deJZuypVXhX1I3wUpLJOtBEt68=
Subject key identifier:   93:3F:A0:E7:33:C2:12:07:87:FC:0F:DD:11:6C:2A:82:36:4E:B4:30
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Certificate issuer:       /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial:       04AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
Manifest number:          049B
Signing time:             Wed 05 Nov 2025 03:17:04 +0000
Manifest this update:     Wed 05 Nov 2025 03:17:04 +0000
Manifest next update:     Fri 07 Nov 2025 03:17:04 +0000
Files and hashes:         1: opdOZzBDJDiMiIAucX1rkoGlJjI.crl (hash: 5Y0Qoul7e6kDKTl4fns2x3aBF3LVvuAgpclQM3IBNA8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1195 (0x4ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364819CAF, serialNumber=A2974E67304324388C88802E717D6B9281A52632
        Validity
            Not Before: Nov  5 03:17:04 2025 GMT
            Not After : Nov  7 03:17:04 2025 GMT
        Subject: CN=690ac1b0-9485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:6e:1e:93:5a:fa:b2:42:12:64:b1:5f:35:
                    53:c4:c9:63:b6:b5:01:51:b9:1f:54:a0:9c:b2:48:
                    d1:34:5e:88:76:74:b0:c5:e9:b7:dd:9a:09:71:3e:
                    6b:9b:4c:c6:9f:75:04:03:6a:33:05:c5:04:d6:47:
                    14:9a:49:65:f7:55:63:ef:ef:99:a4:8e:e9:80:42:
                    b3:27:61:16:1b:f1:85:6d:31:ed:9f:fa:6c:59:33:
                    8a:90:67:4e:fe:b4:f8:ae:1c:36:31:e5:03:67:28:
                    e5:c1:6b:20:7c:02:12:f0:5c:d7:62:4e:6e:f1:a5:
                    f7:d5:8a:d4:34:91:6a:1f:c1:3c:8f:b0:6c:97:5f:
                    09:0d:8a:fe:55:aa:24:cd:56:a1:a1:02:69:17:c4:
                    06:09:8c:79:da:16:8c:cc:a6:b6:e9:52:b9:49:6b:
                    23:7e:a2:35:b4:b7:6a:4e:f1:c2:8a:90:d7:6b:ff:
                    1a:a7:e9:49:5e:f1:57:ec:85:0c:e7:65:8b:4d:b6:
                    63:4c:f0:88:4b:5f:b3:39:31:ee:97:b7:69:e6:42:
                    24:6a:33:22:50:fc:29:62:e3:34:40:b9:f2:f8:22:
                    47:73:7d:2a:80:6c:aa:05:74:b7:75:03:ad:4c:da:
                    4e:99:ec:20:f8:cd:2b:c4:42:60:77:9f:e5:8a:ce:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3F:A0:E7:33:C2:12:07:87:FC:0F:DD:11:6C:2A:82:36:4E:B4:30
            X509v3 Authority Key Identifier:
                keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f2:62:fd:a5:b8:80:b2:36:29:72:fa:fb:ea:5f:de:71:33:
         bc:53:5c:95:28:5e:a1:11:5f:58:be:50:26:ae:b9:b2:71:58:
         ed:f3:e9:45:04:86:d9:ba:fd:4e:69:02:3f:f0:12:85:63:60:
         32:03:5a:d4:e6:7d:62:3c:a7:77:ff:72:72:33:5b:eb:75:70:
         fb:eb:ed:cd:aa:ec:b7:a3:4d:13:44:ce:6e:2d:4d:c1:4f:d0:
         85:ba:c5:d5:02:73:a0:ab:32:0d:a2:43:c7:b5:c3:66:3a:a2:
         34:03:0e:49:d3:1e:d5:ad:b1:a6:de:1d:4e:03:55:15:34:fd:
         08:5a:5c:cd:e1:ec:e0:ff:50:be:02:32:fd:56:3d:7e:f2:97:
         f0:e7:e6:24:c6:3c:57:13:2a:99:8d:0b:1a:5d:fa:03:b0:ca:
         d8:ae:33:57:08:f9:ca:cc:f3:bd:16:44:57:34:c6:09:e6:a7:
         12:36:40:8b:4a:bc:7f:9b:02:82:a0:e0:ef:6f:52:6d:6b:91:
         c2:06:96:e0:87:b0:89:48:d3:87:60:cc:fe:f3:51:07:40:4b:
         e7:f2:ee:dd:92:c9:28:e4:fb:2a:88:0c:4a:42:22:9d:95:a4:
         2d:23:db:d8:8e:e5:37:65:95:d3:db:dd:68:5a:85:5c:10:94:
         22:c4:7d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:47:13 2025 by rpki-client