Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
File:                     agXQ7beSVTGJRs3ZHy36Wnh__xM.mft (raw, json)
Hash identifier:          qhmSsHaYD2y3vtDTCrt5cVx08tF+tIvURyhHW6QmPRw=
Subject key identifier:   F8:40:C6:0D:9E:C1:EA:32:7A:D5:51:1F:89:99:B8:75:78:DE:BC:93
Authority key identifier: 6A:05:D0:ED:B7:92:55:31:89:46:CD:D9:1F:2D:FA:5A:78:7F:FF:13
Certificate issuer:       /CN=F3658AF9AF/serialNumber=6A05D0EDB79255318946CDD91F2DFA5A787FFF13
Certificate serial:       57
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/agXQ7beSVTGJRs3ZHy36Wnh__xM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
Manifest number:          56
Signing time:             Tue 04 Nov 2025 06:41:57 +0000
Manifest this update:     Tue 04 Nov 2025 06:41:56 +0000
Manifest next update:     Thu 06 Nov 2025 06:41:56 +0000
Files and hashes:         1: agXQ7beSVTGJRs3ZHy36Wnh__xM.crl (hash: UspcBVArTkUehJlEro0XodkzHW6OPHmQo7kd1QDKN1k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/agXQ7beSVTGJRs3ZHy36Wnh__xM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 06:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9AF, serialNumber=6A05D0EDB79255318946CDD91F2DFA5A787FFF13
        Validity
            Not Before: Nov  4 06:41:56 2025 GMT
            Not After : Nov  6 06:41:56 2025 GMT
        Subject: CN=6909a035-af7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:12:fa:3f:97:5b:08:69:92:fd:be:bf:09:
                    15:eb:56:65:2d:6b:70:8e:dd:aa:a6:2c:81:a2:8d:
                    c1:f7:43:1a:63:d5:df:1a:8a:61:e7:5b:28:c3:e0:
                    e6:68:a5:b5:e3:69:6c:12:fc:3f:05:eb:aa:b2:af:
                    9a:9d:22:ca:18:d6:67:fd:d0:40:58:b9:1a:f4:64:
                    85:62:69:10:35:43:68:09:5d:7d:89:24:b4:62:ed:
                    0a:8f:90:22:9d:59:5c:b0:c1:35:47:0b:37:9e:7d:
                    03:85:23:94:a6:ae:33:b4:10:08:eb:af:71:00:d0:
                    31:2f:92:d0:6d:07:c6:fd:7e:ac:cc:59:13:42:10:
                    9a:36:9d:db:8b:1a:c8:a1:37:4d:24:74:a6:fa:7b:
                    c8:94:6a:83:14:b9:97:35:67:62:c6:08:5d:64:3d:
                    39:e2:bb:35:3d:1f:3b:ae:d6:43:a0:47:59:bb:6e:
                    d0:cd:2f:22:2b:20:a7:e0:84:01:3c:b9:80:cb:ab:
                    7c:10:79:3a:ce:b3:9a:a1:06:67:a4:1e:d0:7c:78:
                    53:40:05:a0:e0:1a:f3:16:19:b7:71:28:88:69:5a:
                    0e:5b:75:51:b7:9b:50:32:b6:b9:cb:f9:de:23:bd:
                    ea:d9:9f:bb:88:e9:66:28:e3:66:c2:2b:69:a6:af:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:40:C6:0D:9E:C1:EA:32:7A:D5:51:1F:89:99:B8:75:78:DE:BC:93
            X509v3 Authority Key Identifier:
                keyid:6A:05:D0:ED:B7:92:55:31:89:46:CD:D9:1F:2D:FA:5A:78:7F:FF:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/agXQ7beSVTGJRs3ZHy36Wnh__xM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/43946AB8783611F095F177E3DAE4EC9C/agXQ7beSVTGJRs3ZHy36Wnh__xM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:65:43:d5:ca:ca:de:31:31:62:f5:19:d3:d7:20:3a:ea:6d:
         cb:48:38:44:01:23:dd:c3:3e:a8:5a:fc:14:70:15:35:02:3b:
         42:e6:1f:b1:45:01:63:c5:00:cc:76:36:e5:fb:e7:97:d6:82:
         59:48:59:60:77:4b:cb:49:d3:d9:27:18:7b:c9:b5:a3:de:d4:
         12:40:05:44:ac:08:f9:ee:2b:11:6e:71:5b:86:8b:bd:5a:ae:
         a3:9f:1d:da:e9:27:eb:a5:22:db:6a:fb:fb:34:eb:e4:fb:4e:
         79:eb:eb:2a:5a:a1:2a:b2:db:37:de:58:33:8b:4a:e8:91:65:
         b1:52:75:3b:73:01:a6:6f:a2:79:40:67:fa:97:2e:6f:ab:57:
         93:71:e7:b5:39:bc:57:d1:6f:23:60:f1:61:cf:c0:0d:09:2e:
         28:cc:c6:62:b9:42:ce:a3:33:0d:ea:28:fe:7d:b4:df:c6:18:
         16:e9:43:8f:d2:0d:38:c3:64:ff:ee:b8:78:03:49:ad:82:c5:
         5e:33:7b:58:e4:63:34:a8:56:b3:3c:7a:70:27:6d:d5:0a:ad:
         79:c9:5a:03:4e:3d:c4:38:2a:94:1a:e4:1d:66:2e:b2:bf:53:
         c5:d5:ea:dd:2e:36:b2:00:8e:83:c4:0f:b5:32:9c:82:59:66:
         06:4f:e8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:36:22 2025 by rpki-client