Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
File:                     2_aMnFwB1o68DJDe5MB0naI6L9Y.mft (raw, json)
Hash identifier:          HzG+Np7SWnnE43tcWNt8voDX946ihIul1f6skrCL9u8=
Subject key identifier:   63:27:D7:04:CC:B2:82:C9:11:21:33:DA:69:8C:6D:3F:50:0B:9E:8F
Authority key identifier: DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
Certificate issuer:       /CN=F36576E8AF/serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Certificate serial:       04FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
Manifest number:          04F9
Signing time:             Wed 05 Nov 2025 03:03:23 +0000
Manifest this update:     Wed 05 Nov 2025 03:03:23 +0000
Manifest next update:     Fri 07 Nov 2025 03:03:23 +0000
Files and hashes:         1: 2_aMnFwB1o68DJDe5MB0naI6L9Y.crl (hash: bpHJzVTTijQ4nAVGQGPzbvS8J54NrUUxt3ECQE/aQv0=)
                          2: B3EE18F22BD011F08A7C27A2DAE4EC9C.roa (hash: LA8q+uNhXBWE2SjasyXDN1aUvOktsdxT0z0WdJkFsK8=)
                          3: E10AF0E22C4211EEB4DC88104AD9E6FC.roa (hash: 42KgK6RdN4y6CGvKncWwBdL1NNaaBRBg0A8wytUPgDU=)
                          4: 40EAC0D62BD411F0A36BE4B8DAE4EC9C.roa (hash: 9fvE1IFZCB+MmUfnvjTiAQ0VJX4n1Jw5PnZOQzfgAA8=)
                          5: 94A6F8682C4211EE9CAAB80F4AD9E6FC.roa (hash: o0TXx110b3JBiu3Cl6xOs7wBGLlTo9OQb+P0VILZhd0=)
                          6: 95E5589CFCF911EC91C59591F1222468.roa (hash: rnLUsfXlrYCyRp7IztJ9xzb5+MMJaSe1lmd7KitFfus=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 03:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1279 (0x4ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36576E8AF, serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
        Validity
            Not Before: Nov  5 03:03:23 2025 GMT
            Not After : Nov  7 03:03:23 2025 GMT
        Subject: CN=690abe7b-9994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a1:e2:3e:ff:8b:65:76:74:48:1b:a1:81:95:
                    3d:db:dd:13:95:ad:f2:fa:1a:99:87:55:bd:55:11:
                    e6:59:87:2d:af:84:0a:1f:0a:dc:9d:7b:4a:c7:6e:
                    47:70:62:af:f6:53:dd:af:6b:7e:7a:e6:80:39:c5:
                    94:d5:b3:f8:8c:68:96:26:e8:ef:f6:3c:a9:51:96:
                    9a:27:a5:ba:3c:b4:c2:62:e3:f4:3d:ec:d9:35:71:
                    6d:01:fb:dd:0f:64:db:ec:fb:d7:e7:ea:bf:16:f4:
                    e5:4a:a6:88:e3:e1:8c:61:3f:26:29:c4:53:43:d0:
                    40:72:2f:a9:99:1b:39:f8:44:dc:eb:66:bf:5e:4a:
                    9d:c6:06:2c:d3:16:16:76:83:66:16:95:c9:94:34:
                    8e:3b:62:ce:44:46:48:2a:e0:f3:af:69:aa:8f:50:
                    23:a8:7d:7e:4b:dc:c0:f9:c7:ed:dd:4c:05:c1:ea:
                    99:87:f4:6a:e7:f0:56:e7:7a:91:22:bb:65:72:01:
                    0d:1e:5b:43:b6:07:54:90:ef:22:e2:ea:86:b2:e9:
                    dc:27:65:04:7f:ee:0b:45:6e:4d:d5:b6:d9:c9:67:
                    29:9e:a2:12:8b:10:c0:1a:29:40:a8:09:35:89:cc:
                    37:70:32:2e:59:56:96:68:b5:fc:7b:1b:6f:b6:93:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:27:D7:04:CC:B2:82:C9:11:21:33:DA:69:8C:6D:3F:50:0B:9E:8F
            X509v3 Authority Key Identifier:
                keyid:DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:22:19:bd:f5:2b:06:16:57:2d:bb:b7:1f:52:3c:57:7d:52:
         de:fa:a3:1d:ac:32:6c:23:50:bc:a9:97:69:67:08:75:96:5b:
         8b:32:9f:8a:bd:1e:c9:0d:31:93:9a:bb:24:37:a9:87:ea:a1:
         70:11:9a:bc:f6:78:ce:1b:83:da:fd:85:df:86:8f:0e:fb:a4:
         1e:c7:87:e2:a7:54:4b:f8:c6:c0:22:c0:c6:0a:9b:61:7c:73:
         3b:0f:7c:9a:ea:d8:c3:28:43:0c:12:ba:38:93:41:46:0c:12:
         c6:92:39:00:09:1c:b1:0f:50:0d:57:6a:ab:ab:29:66:c8:f8:
         9b:ce:11:9d:90:34:ef:ae:7e:82:fe:28:fa:8a:2e:fc:74:ef:
         35:ab:a5:c6:2c:e6:c1:aa:e0:c2:42:ad:5b:b3:a4:89:8e:d3:
         bc:ac:10:43:06:90:83:e1:5b:7b:d2:32:1b:c0:3b:5b:6a:d6:
         35:0c:bf:8a:41:56:43:7f:a5:7f:c8:5c:16:80:e9:94:f9:27:
         e7:91:4b:a0:68:0b:30:fb:0b:4b:5b:dd:a1:ee:54:af:57:df:
         56:4a:96:16:56:e2:e4:08:67:19:e4:91:ed:49:de:2f:84:22:
         96:94:0d:94:9a:57:00:7e:9d:29:fd:f0:e3:e6:3f:77:ac:be:
         f3:c3:24:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:52:17 2025 by rpki-client