Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
File:                     h4TuSgLa-JcmVvEkUr8npJEcNik.mft (raw, json)
Hash identifier:          rG440O2aD0rpAYtWqQ4FnzEtE1NxN/K1t9IFSY6VBhc=
Subject key identifier:   4E:2A:42:7A:3C:2D:63:6E:71:38:1D:7E:C5:07:11:59:16:1D:9D:3B
Authority key identifier: 87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
Certificate issuer:       /CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Certificate serial:       0D6E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
Manifest number:          0D6A
Signing time:             Tue 04 Nov 2025 01:10:35 +0000
Manifest this update:     Tue 04 Nov 2025 01:10:35 +0000
Manifest next update:     Thu 06 Nov 2025 01:10:35 +0000
Files and hashes:         1: h4TuSgLa-JcmVvEkUr8npJEcNik.crl (hash: nH7HdSJvPCuGkWKEZwSYIymUDic5l3FEoPxJkhacKLk=)
                          2: D6B61570F80D11EF99734852762E951A.roa (hash: tfdDcGbQMsee5OOm9EW60V6hc91lxofJEctKITYoU8M=)
                          3: 322E59C89B8511ECA6E8B6A05A40D577.roa (hash: BnWYJ3FTlStYEMUn5ujbi/xmcBESttAp1iVk0y8JFFk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 01:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3438 (0xd6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AF, serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
        Validity
            Not Before: Nov  4 01:10:35 2025 GMT
            Not After : Nov  6 01:10:35 2025 GMT
        Subject: CN=6909528b-f95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1f:c9:e1:23:45:e5:e3:e0:75:0d:66:0c:5f:
                    ca:a7:8e:b4:2f:d6:ff:0b:c6:a0:1e:73:31:10:44:
                    a5:16:2a:34:40:1b:00:c6:d5:82:e1:90:f2:a0:2c:
                    c5:60:f0:ba:a0:3d:e4:1d:05:ef:ba:d0:45:fb:1a:
                    81:33:35:5a:e2:5e:64:70:9f:ac:72:c2:02:3b:45:
                    61:d0:94:32:94:75:4b:44:68:76:a1:7a:83:39:70:
                    69:26:6f:68:7b:42:5c:ab:6c:22:e6:da:32:72:7c:
                    a3:16:76:52:44:1c:2c:ab:90:bf:e7:8e:31:49:cd:
                    5d:a0:81:e2:77:1e:aa:f9:11:5f:f6:07:cd:b5:e9:
                    1f:27:91:42:86:84:82:c6:4e:16:d2:0f:74:71:77:
                    2b:97:91:23:96:71:7e:b6:05:71:b1:dc:75:83:19:
                    97:80:40:13:1c:d2:d5:71:21:69:d1:4b:c3:b9:f1:
                    f0:4d:13:62:d9:32:3a:78:13:94:ac:c0:e2:2e:9c:
                    94:a9:37:eb:d8:fd:fc:c1:61:04:f0:91:4d:3f:39:
                    41:aa:0b:c7:3e:a1:0d:7c:5a:1f:54:23:de:90:5a:
                    b3:73:5e:99:6f:e5:0e:9a:b0:ea:9a:2a:8f:6f:c9:
                    47:c5:49:77:70:e6:05:7a:17:44:73:7f:5c:db:b6:
                    f7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2A:42:7A:3C:2D:63:6E:71:38:1D:7E:C5:07:11:59:16:1D:9D:3B
            X509v3 Authority Key Identifier:
                keyid:87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a2:ce:df:14:10:20:72:f9:a3:9b:0e:14:ed:1e:d8:c8:42:
         e2:bc:12:6e:cc:ea:00:74:5f:5b:5c:e3:fa:b8:70:cb:19:e4:
         ee:4d:e5:7f:c5:df:e6:d5:7a:a1:4d:f5:62:9d:ca:ce:0e:de:
         f2:15:e6:aa:dc:9a:d3:79:35:d7:f4:46:cc:37:3a:f8:4c:37:
         1f:87:95:b8:60:6f:ba:4d:35:c5:0f:e2:82:71:ea:4a:0c:72:
         53:f0:74:c3:f3:3e:63:92:c2:16:a4:91:88:16:97:6b:8d:1c:
         35:48:c1:77:06:db:2d:01:da:1f:5f:0f:2c:6d:c4:1a:11:6a:
         65:93:1b:6a:7e:1f:3d:ab:bb:87:5d:db:3c:ac:fd:2a:86:b8:
         1f:96:5a:27:13:17:1a:c9:58:5e:37:36:cd:e6:90:36:1d:7f:
         71:b9:67:4b:93:7d:da:1b:dd:95:bc:fe:01:7d:d3:b6:19:7c:
         f7:cc:98:7b:f1:f8:e4:b6:bb:f3:ef:5a:f5:41:01:47:9b:28:
         75:9a:de:5d:d2:6d:79:89:38:31:c5:7a:cc:a1:41:07:a7:41:
         a1:a6:fa:89:b0:ac:13:9c:5f:7b:bd:3d:ee:26:c9:7e:83:f2:
         66:41:04:97:83:46:3c:e3:34:1e:65:de:ea:07:1e:32:a2:be:
         2d:53:be:c6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTFFNzNBRjExMC8GA1UEBRMoODc4NEVFNEEwMkRBRjg5NzI2NTZGMTI0NTJCRjI3
QTQ5MTFDMzYyOTAeFw0yNTExMDQwMTEwMzVaFw0yNTExMDYwMTEwMzVaMBgxFjAU
BgNVBAMTDTY5MDk1MjhiLWY5NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXH8nhI0Xl4+B1DWYMX8qnjrQv1v8LxqAeczEQRKUWKjRAGwDG1YLhkPKg
LMVg8LqgPeQdBe+60EX7GoEzNVriXmRwn6xywgI7RWHQlDKUdUtEaHaheoM5cGkm
b2h7QlyrbCLm2jJyfKMWdlJEHCyrkL/njjFJzV2ggeJ3Hqr5EV/2B8216R8nkUKG
hILGThbSD3RxdyuXkSOWcX62BXGx3HWDGZeAQBMc0tVxIWnRS8O58fBNE2LZMjp4
E5SswOIunJSpN+vY/fzBYQTwkU0/OUGqC8c+oQ18Wh9UI96QWrNzXplv5Q6asOqa
Ko9vyUfFSXdw5gV6F0Rzf1zbtvcdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTipC
ejwtY25xOB1+xQcRWRYdnTswHwYDVR0jBBgwFoAUh4TuSgLa+JcmVvEkUr8npJEc
NikwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUxRTczLzNDRjBFMDlBNzhDNDExRTY4NDhEM0EzMUY4QUVBMjI4L2g0VHVT
Z0xhLUpjbVZ2RWtVcjhucEpFY05pay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2g0VHVTZ0xhLUpjbVZ2RWtVcjhucEpFY05pay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTFFNzMvM0NGMEUwOUE3OEM0MTFFNjg0OEQzQTMxRjhB
RUEyMjgvaDRUdVNnTGEtSmNtVnZFa1VyOG5wSkVjTmlrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXos7fFBAgcvmjmw4U7R7YyELivBJu
zOoAdF9bXOP6uHDLGeTuTeV/xd/m1XqhTfVincrODt7yFeaq3JrTeTXX9EbMNzr4
TDcfh5W4YG+6TTXFD+KCcepKDHJT8HTD8z5jksIWpJGIFpdrjRw1SMF3BtstAdof
Xw8sbcQaEWplkxtqfh89q7uHXds8rP0qhrgfllonExcayVheNzbN5pA2HX9xuWdL
k33aG92VvP4BfdO2GXz3zJh78fjktrvz71r1QQFHmyh1mt5d0m15iTgxxXrMoUEH
p0GhpvqJsKwTnF97vT3uJsl+g/JmQQSXg0Y84zQeZd7qBx4yor4tU77G
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:02:23 2025 by rpki-client