Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
File:                     2XFO6UZLDHro1GvxAWN4ShYPcXI.mft (raw, json)
Hash identifier:          Lw36CXDS9Z0kNkjpIm9CAw4qsd/LCMKayZQjVJk6r9w=
Subject key identifier:   A3:82:55:5D:2B:83:B8:B9:A4:54:E7:FA:4C:88:1B:BA:54:A8:F0:2E
Authority key identifier: D9:71:4E:E9:46:4B:0C:7A:E8:D4:6B:F1:01:63:78:4A:16:0F:71:72
Certificate issuer:       /CN=F365461DAF/serialNumber=D9714EE9464B0C7AE8D46BF10163784A160F7172
Certificate serial:       50
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
Manifest number:          4F
Signing time:             Wed 05 Nov 2025 05:40:52 +0000
Manifest this update:     Wed 05 Nov 2025 05:40:51 +0000
Manifest next update:     Fri 07 Nov 2025 05:40:51 +0000
Files and hashes:         1: 2XFO6UZLDHro1GvxAWN4ShYPcXI.crl (hash: WUVEfYlAgQ/8gIKT/s3gv9exwkD3lc4Q2M9tDyJvLLo=)
                          2: 100568547E5E11F0A78B849ADAE4EC9C.roa (hash: PvZoBj2A7ENispwmai6nCrzzAnKO2XiSPBgvLBIB2QA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365461DAF, serialNumber=D9714EE9464B0C7AE8D46BF10163784A160F7172
        Validity
            Not Before: Nov  5 05:40:51 2025 GMT
            Not After : Nov  7 05:40:51 2025 GMT
        Subject: CN=690ae364-2696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ee:9c:3a:44:18:bf:8d:93:61:b3:ed:f7:94:
                    24:86:d5:8b:34:63:3b:fc:31:80:fe:de:4b:ec:f8:
                    2d:69:d3:a1:b6:8f:03:f5:51:93:c2:e7:17:29:cb:
                    a8:17:0d:a3:29:58:6e:b6:ee:64:21:31:f9:da:f8:
                    cd:43:3e:a2:f7:60:bc:0f:47:c3:3b:6b:bb:e3:63:
                    e8:f5:ad:d6:d2:3c:91:cf:63:26:7d:3d:33:16:9d:
                    7a:24:be:52:7d:8b:c4:e6:f9:2d:b5:ac:74:7f:8b:
                    f9:5c:ed:86:c8:2c:d5:f6:09:00:8d:f0:e5:f0:be:
                    59:c8:57:0f:38:68:9d:5e:28:95:4f:98:3c:57:0b:
                    84:a6:e0:4b:55:f4:e3:48:2c:db:a3:fa:84:89:9f:
                    45:8d:a3:c3:e0:1d:6c:98:6c:aa:16:2a:cf:a2:04:
                    d4:c5:03:9b:07:ae:50:d4:03:bb:fb:4c:13:d1:34:
                    a4:57:c6:f6:25:c5:ce:06:3b:e8:d2:80:b0:d2:44:
                    76:42:ca:02:0e:68:9d:39:5d:45:8b:ac:1a:82:72:
                    a1:8f:81:b1:a1:e7:78:fb:79:92:e3:a8:93:62:f0:
                    72:44:9b:8b:60:0f:a1:91:8c:4e:99:5b:f5:59:c5:
                    d6:74:5e:08:4b:02:c4:f4:26:8c:65:a8:ab:e6:cc:
                    99:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:82:55:5D:2B:83:B8:B9:A4:54:E7:FA:4C:88:1B:BA:54:A8:F0:2E
            X509v3 Authority Key Identifier:
                keyid:D9:71:4E:E9:46:4B:0C:7A:E8:D4:6B:F1:01:63:78:4A:16:0F:71:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:af:8d:e9:83:93:93:f7:da:c8:13:2b:5a:57:ef:33:ca:61:
         f1:f5:59:1b:94:a4:68:2a:a2:81:23:2d:a8:00:41:32:43:1e:
         c4:e7:c5:34:d7:4c:a5:3d:00:ef:e9:c7:d1:2e:c4:45:9f:2a:
         ea:1a:b0:f4:d9:79:d9:ed:2a:bd:94:a1:1e:60:6e:b4:df:52:
         4d:bd:2f:3e:28:bb:a5:45:fa:ed:d4:ec:d3:31:cd:f1:eb:bb:
         23:2e:8d:48:52:c1:55:32:78:f4:c4:71:8e:cb:5e:c1:bc:e8:
         9d:e6:72:0d:c8:34:07:16:f4:54:5f:71:4f:df:e3:b2:a3:c9:
         0c:70:b5:ca:31:a3:75:e3:e4:b2:f1:89:75:d4:a2:26:14:3c:
         5d:13:8a:0c:2e:3f:ae:55:6d:24:e4:34:9b:c6:f7:b3:08:95:
         d6:3d:34:85:61:84:05:75:f8:f3:62:19:65:29:b7:88:fc:73:
         4c:30:ab:96:a1:04:cd:67:f6:ce:79:f7:50:b8:4b:c8:d0:63:
         cd:9c:1c:60:69:26:f6:6f:67:1a:52:3e:3d:f6:9f:f2:d2:a6:
         fc:0a:f5:fd:44:79:db:06:68:c6:81:7a:a6:b5:3b:35:59:1a:
         09:c2:47:ae:d2:99:de:6d:9c:f0:35:be:7f:b5:02:ce:97:7c:
         27:52:1c:dd
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBUDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
NDYxREFGMTEwLwYDVQQFEyhEOTcxNEVFOTQ2NEIwQzdBRThENDZCRjEwMTYzNzg0
QTE2MEY3MTcyMB4XDTI1MTEwNTA1NDA1MVoXDTI1MTEwNzA1NDA1MVowGDEWMBQG
A1UEAxMNNjkwYWUzNjQtMjY5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOXunDpEGL+Nk2Gz7feUJIbVizRjO/wxgP7eS+z4LWnTobaPA/VRk8LnFynL
qBcNoylYbrbuZCEx+dr4zUM+ovdgvA9Hwztru+Nj6PWt1tI8kc9jJn09MxadeiS+
Un2LxOb5LbWsdH+L+Vzthsgs1fYJAI3w5fC+WchXDzhonV4olU+YPFcLhKbgS1X0
40gs26P6hImfRY2jw+AdbJhsqhYqz6IE1MUDmweuUNQDu/tME9E0pFfG9iXFzgY7
6NKAsNJEdkLKAg5onTldRYusGoJyoY+BsaHnePt5kuOok2LwckSbi2APoZGMTplb
9VnF1nReCEsCxPQmjGWoq+bMmRsCAwEAAaOCArgwggK0MB0GA1UdDgQWBBSjglVd
K4O4uaRU5/pMiBu6VKjwLjAfBgNVHSMEGDAWgBTZcU7pRksMeujUa/EBY3hKFg9x
cjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTQ2MUQvMjBCM0Y3NTI3RTVEMTFGMEI4OThCRjk1REFFNEVDOUMvMlhGTzZV
WkxESHJvMUd2eEFXTjRTaFlQY1hJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMlhGTzZVWkxESHJvMUd2eEFXTjRTaFlQY1hJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY1NDYxRC8yMEIzRjc1MjdFNUQxMUYwQjg5OEJGOTVEQUU0
RUM5Qy8yWEZPNlVaTERIcm8xR3Z4QVdONFNoWVBjWEkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKqvjemDk5P32sgTK1pX7zPKYfH1WRuU
pGgqooEjLagAQTJDHsTnxTTXTKU9AO/px9EuxEWfKuoasPTZedntKr2UoR5gbrTf
Uk29Lz4ou6VF+u3U7NMxzfHruyMujUhSwVUyePTEcY7LXsG86J3mcg3INAcW9FRf
cU/f47KjyQxwtcoxo3Xj5LLxiXXUoiYUPF0TigwuP65VbSTkNJvG97MIldY9NIVh
hAV1+PNiGWUpt4j8c0wwq5ahBM1n9s5591C4S8jQY82cHGBpJvZvZxpSPj32n/LS
pvwK9f1EedsGaMaBeqa1OzVZGgnCR67Smd5tnPA1vn+1As6XfCdSHN0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:34:20 2025 by rpki-client