Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
File:                     2pwGSilziJ8Q063Z_fEqiDYTZL8.mft (raw, json)
Hash identifier:          Oow9JJt/psPs0FD943oS1xkgzi2s+ERKGVi/+/Wpo7c=
Subject key identifier:   0C:72:ED:EF:9F:65:72:8F:06:C0:B3:81:C0:80:DA:9E:78:F4:FF:61
Authority key identifier: DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF
Certificate issuer:       /CN=F3654E24AF/serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
Certificate serial:       056F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
Manifest number:          056E
Signing time:             Wed 05 Nov 2025 02:44:58 +0000
Manifest this update:     Wed 05 Nov 2025 02:44:57 +0000
Manifest next update:     Fri 07 Nov 2025 02:44:57 +0000
Files and hashes:         1: 2pwGSilziJ8Q063Z_fEqiDYTZL8.crl (hash: 1rszcUJ18hnMMmmKnlHJNVYSCxm+JKXVwC4mNFY6uyE=)
                          2: 58BE8A3A92FD11EC9A66148E5A40D577.roa (hash: p/Nwn6WbMbiqBh52brLCSrPTezSi2w7+mCvrJxVr0pE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1391 (0x56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654E24AF, serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
        Validity
            Not Before: Nov  5 02:44:57 2025 GMT
            Not After : Nov  7 02:44:57 2025 GMT
        Subject: CN=690aba2a-003a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:f0:61:6b:b9:5c:06:ae:0e:c1:46:ac:48:
                    91:8b:26:94:94:5a:e4:49:26:d4:14:e1:5b:7d:68:
                    a0:21:6d:b5:2f:82:c7:56:f2:c8:6c:d1:7c:a4:cf:
                    48:6b:1d:96:bf:b9:a8:97:13:e4:71:5a:e6:aa:13:
                    c1:af:c0:82:e7:f7:5d:7b:82:61:dd:c6:99:49:3e:
                    41:af:30:ad:95:35:cb:1e:f4:2a:66:d0:db:60:44:
                    55:32:27:97:76:e4:52:1a:81:02:28:fb:c0:2a:c7:
                    7e:2e:63:61:4d:53:0d:51:79:7d:bd:7f:f9:a3:a5:
                    4d:54:07:48:59:67:d1:3e:6d:eb:06:45:8d:81:f8:
                    a1:63:47:57:85:10:17:6e:b7:9a:b3:fd:eb:cf:8e:
                    57:cd:f6:bb:03:cb:51:08:06:e6:74:18:d5:40:c2:
                    a0:35:8a:b9:c5:86:2b:d5:0a:65:97:9e:32:20:ad:
                    93:26:77:a1:ef:b4:53:ab:cf:3e:b2:46:b3:51:50:
                    eb:59:f7:b9:2e:de:6d:55:1d:83:6f:9e:aa:3f:c1:
                    df:f7:01:7e:d4:ca:f2:27:de:b7:da:4d:e4:91:6a:
                    11:7e:7e:06:9e:b5:7d:51:fa:6e:b6:96:57:c0:16:
                    f8:ec:3a:b2:18:e1:0e:db:ad:82:e2:41:ca:cc:9d:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:72:ED:EF:9F:65:72:8F:06:C0:B3:81:C0:80:DA:9E:78:F4:FF:61
            X509v3 Authority Key Identifier:
                keyid:DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:da:9c:a5:86:d5:c2:3a:fa:b4:16:5a:3f:a5:2c:1a:8b:e1:
         40:9f:32:9e:ce:8c:fa:47:95:d0:ea:46:22:89:27:2f:73:bb:
         5a:75:41:66:ae:06:37:1c:58:04:47:35:96:1d:da:cb:4c:fd:
         32:96:97:ac:0f:b7:cf:25:e6:5d:dd:a7:3d:ee:15:7b:ca:ca:
         33:fb:c4:1b:fd:c1:30:da:76:70:78:b6:ad:5b:f6:1f:89:af:
         86:4d:c5:3f:d2:f1:a6:59:a6:f6:d0:63:2f:87:dc:b3:4e:88:
         90:32:d4:f5:ca:bb:9c:84:03:de:65:04:3c:22:5a:20:51:d4:
         1c:62:33:13:8f:c7:ee:a9:fd:4d:f0:95:cc:a9:9b:49:61:1e:
         e3:dd:3e:82:6d:33:04:66:db:af:80:1c:b3:0d:f1:3e:37:3f:
         e1:84:2f:6e:07:f2:04:da:b7:02:66:03:f1:99:70:6b:5d:cf:
         59:5d:27:3c:2a:08:bb:5d:30:6b:99:44:64:5d:75:2a:2b:1e:
         f2:1f:27:7e:d6:24:5d:74:ea:f0:e5:90:06:60:8f:01:d1:5a:
         28:f4:2f:9c:6f:c6:4b:27:24:75:d1:e4:2d:e9:08:e5:1b:3e:
         bc:a0:ee:dd:cf:24:17:0e:76:35:87:98:2c:68:76:26:ed:46:
         29:9e:c1:0f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBW8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTRFMjRBRjExMC8GA1UEBRMoREE5QzA2NEEyOTczODg5RjEwRDNBREQ5RkRGMTJB
ODgzNjEzNjRCRjAeFw0yNTExMDUwMjQ0NTdaFw0yNTExMDcwMjQ0NTdaMBgxFjAU
BgNVBAMTDTY5MGFiYTJhLTAwM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4MvBha7lcBq4OwUasSJGLJpSUWuRJJtQU4Vt9aKAhbbUvgsdW8shs0Xyk
z0hrHZa/uaiXE+RxWuaqE8GvwILn9117gmHdxplJPkGvMK2VNcse9Cpm0NtgRFUy
J5d25FIagQIo+8Aqx34uY2FNUw1ReX29f/mjpU1UB0hZZ9E+besGRY2B+KFjR1eF
EBdut5qz/evPjlfN9rsDy1EIBuZ0GNVAwqA1irnFhivVCmWXnjIgrZMmd6HvtFOr
zz6yRrNRUOtZ97ku3m1VHYNvnqo/wd/3AX7UyvIn3rfaTeSRahF+fgaetX1R+m62
llfAFvjsOrIY4Q7brYLiQcrMnYCJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUDHLt
759lco8GwLOBwIDannj0/2EwHwYDVR0jBBgwFoAU2pwGSilziJ8Q063Z/fEqiDYT
ZL8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0RTI0L0EzMThBMTA4OTJGQjExRUNBNzE0MTE4OTVBNDBENTc3LzJwd0dT
aWx6aUo4UTA2M1pfZkVxaURZVFpMOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJwd0dTaWx6aUo4UTA2M1pfZkVxaURZVFpMOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTRFMjQvQTMxOEExMDg5MkZCMTFFQ0E3MTQxMTg5NUE0
MEQ1NzcvMnB3R1NpbHppSjhRMDYzWl9mRXFpRFlUWkw4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAB2pylhtXCOvq0Flo/pSwai+FAnzKe
zoz6R5XQ6kYiiScvc7tadUFmrgY3HFgERzWWHdrLTP0ylpesD7fPJeZd3ac97hV7
ysoz+8Qb/cEw2nZweLatW/Yfia+GTcU/0vGmWab20GMvh9yzToiQMtT1yruchAPe
ZQQ8IlogUdQcYjMTj8fuqf1N8JXMqZtJYR7j3T6CbTMEZtuvgByzDfE+Nz/hhC9u
B/IE2rcCZgPxmXBrXc9ZXSc8Kgi7XTBrmURkXXUqKx7yHyd+1iRddOrw5ZAGYI8B
0Voo9C+cb8ZLJyR10eQt6QjlGz68oO7dzyQXDnY1h5gsaHYm7UYpnsEP
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:14:26 2025 by rpki-client