Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
File:                     Pw7qWRltFKMq812hcQ8VDV-d3dg.mft (raw, json)
Hash identifier:          fOFh87MZ2uEaV/EZbjrH9sUgU1fQB6ZH0aeVYYzmD3I=
Subject key identifier:   11:9D:B5:E3:15:DD:22:78:DD:83:EA:DD:7F:FE:19:8F:4C:CD:60:33
Authority key identifier: 3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
Certificate issuer:       /CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
Certificate serial:       02D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
Manifest number:          02CC
Signing time:             Tue 04 Nov 2025 05:15:11 +0000
Manifest this update:     Tue 04 Nov 2025 05:15:11 +0000
Manifest next update:     Thu 06 Nov 2025 05:15:11 +0000
Files and hashes:         1: Pw7qWRltFKMq812hcQ8VDV-d3dg.crl (hash: lQgAUOim5xzG+hBG7u31yleAswbaCzaiW/vlgpnlFUA=)
                          2: D15451B8AEF411EE804D56A3775412E6.roa (hash: YBWjlP8F+YdvA9ozU69TQggPOcEWkXW+zdvhhb0CYsA=)
                          3: 9DB45F1AAEF411EEBD21E1A2775412E6.roa (hash: zk4qjNpUR6ox7pi92CW344nHF3kKf96YYdu89XzhQ3o=)
                          4: B918F940B04E11EEBBD2E697775412E6.roa (hash: ZrUlsRanFtsZhQlEVluoYbwWKfggdoIE9yZOZzdy4S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652C3AAF, serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
        Validity
            Not Before: Nov  4 05:15:11 2025 GMT
            Not After : Nov  6 05:15:11 2025 GMT
        Subject: CN=69098bdf-54d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:62:e5:4f:6c:5f:79:7d:20:82:ed:bd:02:
                    c0:2c:67:c4:e8:97:df:d8:30:4a:86:ae:4d:d5:e9:
                    ba:7c:ff:83:1e:52:b0:10:19:8b:5d:e2:d6:1c:29:
                    7c:fc:44:b4:bf:bf:24:a3:f3:8c:8e:63:bc:e6:58:
                    48:e7:b6:2b:df:0e:7c:04:ec:e3:9a:1e:18:b8:82:
                    bc:18:08:fc:53:07:22:d6:f2:51:e4:fd:e5:8b:58:
                    ae:6d:a8:53:4f:e5:f3:da:20:1c:2d:f8:aa:cb:59:
                    da:60:a6:57:89:b1:3b:5a:b1:ff:aa:99:db:ae:1f:
                    9d:3c:83:5a:26:43:ca:18:2d:63:06:d8:fd:b1:45:
                    93:36:68:94:bb:66:39:9e:99:58:15:9b:c3:97:87:
                    da:0e:cd:98:3b:70:7c:89:a6:57:0b:e1:de:6d:06:
                    d4:00:89:73:35:15:dd:4a:53:89:4f:2b:b4:b2:fa:
                    e8:c5:c3:ae:e9:0c:a3:0a:a0:e2:62:c7:ce:03:be:
                    e0:ba:6c:56:dd:84:12:10:41:72:c7:88:c2:ef:67:
                    f3:5a:0a:6c:5e:2c:64:e4:1d:bd:b8:dd:c1:1b:b4:
                    26:ca:6f:0d:5b:f6:67:a7:06:d9:01:fb:f0:36:6f:
                    95:97:33:64:68:91:69:6a:92:63:79:c0:63:18:13:
                    ec:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9D:B5:E3:15:DD:22:78:DD:83:EA:DD:7F:FE:19:8F:4C:CD:60:33
            X509v3 Authority Key Identifier:
                keyid:3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f5:0e:1c:d1:18:51:1b:07:c4:ae:98:fa:16:44:a1:40:b8:
         2e:85:21:7a:5a:77:22:ff:0c:b4:f6:00:6b:64:ea:8b:1a:da:
         b6:47:f8:f1:eb:46:ee:97:40:04:2e:00:a8:27:c9:81:2f:36:
         63:2d:d4:aa:a3:f8:01:b8:4a:8b:8b:db:d7:51:35:6c:c3:b3:
         30:06:6f:3c:49:10:a3:42:72:27:2f:7a:41:fa:53:cc:a0:7b:
         7f:8b:62:9a:69:51:b4:ba:bd:34:8c:33:92:1a:7f:e6:e7:b2:
         46:b1:a8:1e:7c:c0:97:b1:a1:24:26:b3:66:19:c3:ca:07:30:
         4c:8a:f0:69:91:27:26:64:89:19:8e:75:58:71:0c:22:b0:b1:
         bc:86:56:e9:ce:72:e9:cf:d5:98:fb:a6:58:cb:e7:7e:2a:20:
         a0:67:69:31:7a:de:48:94:af:a1:b9:ce:8d:66:94:fe:ed:6a:
         e9:47:bb:39:71:30:7d:c5:78:da:cf:b7:37:a6:f9:2d:d5:a7:
         48:c2:22:57:5d:44:a1:08:0b:86:48:eb:16:2a:fe:78:a6:4c:
         12:3c:2b:82:3d:90:18:03:07:6b:2f:af:32:90:c0:04:61:f4:
         e3:bf:f6:5a:5e:e5:92:4c:09:c7:5f:8b:12:9c:38:d5:96:04:
         1e:51:f8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:38:14 2025 by rpki-client