Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
File:                     Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft (raw, json)
Hash identifier:          5DkOsg5LJcPdvNt12Ww+I7BQns2tLb4FTQO7f68eOdc=
Subject key identifier:   68:3A:D6:74:1D:C1:E0:28:EA:C0:0D:6B:75:0E:B1:1D:8B:B0:51:80
Authority key identifier: 22:CD:6F:18:77:75:C2:3E:27:51:5B:2F:E3:80:82:E4:BF:EA:8F:F4
Certificate issuer:       /CN=F365AA12AF/serialNumber=22CD6F187775C23E27515B2FE38082E4BFEA8FF4
Certificate serial:       0685
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
Manifest number:          0684
Signing time:             Tue 04 Nov 2025 03:22:10 +0000
Manifest this update:     Tue 04 Nov 2025 03:22:09 +0000
Manifest next update:     Thu 06 Nov 2025 03:22:09 +0000
Files and hashes:         1: Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl (hash: V8uHpfh7gJ7vtPVqdr+boVxlPyk5qxdcJIVie1/oPGI=)
                          2: B663D9A8C37B11EB8DB89456F8AEA228.roa (hash: BanY5OoiK/H0UyDozciFZEgNwlpeFk96ik1kdsHY5gM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365AA12AF, serialNumber=22CD6F187775C23E27515B2FE38082E4BFEA8FF4
        Validity
            Not Before: Nov  4 03:22:09 2025 GMT
            Not After : Nov  6 03:22:09 2025 GMT
        Subject: CN=69097162-e59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:07:7d:5a:ad:f1:4d:51:05:ba:3a:f1:d3:
                    b0:e0:0f:6a:84:df:b4:78:90:57:a7:05:c9:4c:3b:
                    ee:a1:f6:a7:e3:d0:82:98:36:65:2b:f8:12:99:6c:
                    c1:74:5b:7b:d7:73:30:7c:c4:17:49:6a:1b:b0:cb:
                    9c:48:95:62:64:9a:e6:ba:da:a5:8d:52:20:5a:1f:
                    fd:e0:34:d6:c6:82:2d:53:34:2a:6d:b1:33:d7:8c:
                    09:b3:dd:de:95:bd:05:87:15:5f:e0:ba:cd:7a:3b:
                    19:cb:c5:86:d1:55:62:48:2a:88:47:2a:08:b9:97:
                    49:2e:b4:80:93:e3:4b:e8:ce:77:f9:67:29:10:ce:
                    89:f3:4e:45:b4:8f:61:4e:a6:c6:04:52:6e:15:31:
                    f7:31:52:d9:ae:ac:81:82:95:81:2e:15:03:22:5b:
                    0e:cf:63:f7:a3:c5:ad:a3:79:70:80:63:04:d6:74:
                    57:c9:77:d4:a3:71:a2:21:34:0b:5a:66:e3:92:34:
                    2a:75:2c:9f:45:5c:ad:6e:db:ff:a3:04:16:ef:8d:
                    36:00:2d:de:74:e0:9a:39:94:a3:90:8f:a1:a0:55:
                    6b:50:6f:38:38:4f:fb:b5:1c:af:ec:b2:a8:89:1a:
                    e2:80:9f:65:47:8b:9d:3c:9e:13:50:25:a2:14:5b:
                    f1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3A:D6:74:1D:C1:E0:28:EA:C0:0D:6B:75:0E:B1:1D:8B:B0:51:80
            X509v3 Authority Key Identifier:
                keyid:22:CD:6F:18:77:75:C2:3E:27:51:5B:2F:E3:80:82:E4:BF:EA:8F:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:13:8d:02:be:d7:d5:f0:8c:51:f1:bc:8e:bb:fa:65:05:43:
         32:d1:59:a3:ac:bd:a4:0c:b5:02:5b:e4:9b:4c:12:3d:e2:1b:
         a0:32:e3:ce:49:f8:d1:61:95:2b:ef:26:84:20:61:ad:f7:7d:
         ac:29:6a:7b:91:c0:cc:5e:b0:64:1f:3b:40:f8:fc:76:37:cd:
         dd:54:a5:a7:bc:42:04:e5:e2:1c:57:90:4f:83:14:c3:10:c2:
         5b:77:85:57:9f:01:2f:57:3e:2a:06:b3:fe:6e:80:b8:a0:1e:
         88:7c:7d:9f:59:5e:8c:58:d7:83:68:e4:d6:75:1a:32:20:63:
         e8:3d:2e:52:92:47:85:ad:57:cf:9e:a1:1a:53:70:56:b7:c7:
         85:47:ad:09:3d:db:a6:67:56:97:6a:07:dd:49:44:95:ba:24:
         7c:a5:19:af:30:dd:7f:e9:34:e1:5f:76:4f:06:fd:27:7a:08:
         90:6e:50:61:f3:8b:af:a0:22:bc:25:fd:b4:f5:da:d8:5a:6b:
         64:f5:c0:48:23:07:ec:23:bc:6d:60:60:49:ca:07:ec:85:1c:
         0c:3f:61:a9:f6:df:79:5c:29:13:c7:90:66:e5:12:5e:50:ce:
         54:ca:02:bf:4e:85:27:a3:c5:88:80:5f:a7:03:72:30:72:4d:
         b9:be:62:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:16 2025 by rpki-client