Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
File:                     UsjVbfSu4mPoplESmKYZzpjIrA4.mft (raw, json)
Hash identifier:          ot8qL9tKBIosr2up8Iv5K2ElsyU1x82h5yt0mxvCqlI=
Subject key identifier:   99:45:55:79:10:17:B6:12:35:72:12:A2:6C:7E:A1:26:B2:B3:04:97
Authority key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
Certificate issuer:       /CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Certificate serial:       03DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
Manifest number:          03DA
Signing time:             Wed 05 Nov 2025 03:33:42 +0000
Manifest this update:     Wed 05 Nov 2025 03:33:41 +0000
Manifest next update:     Fri 07 Nov 2025 03:33:41 +0000
Files and hashes:         1: UsjVbfSu4mPoplESmKYZzpjIrA4.crl (hash: Cd/ZrvhcMCk1BLBknBSIaZcwfUXUPJZzmTcNEWzYiJ4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986 (0x3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BF9EAF, serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
        Validity
            Not Before: Nov  5 03:33:41 2025 GMT
            Not After : Nov  7 03:33:41 2025 GMT
        Subject: CN=690ac596-a8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a2:21:8d:9d:38:7b:05:20:80:93:41:c3:c0:
                    d7:fb:92:45:3f:30:ed:13:c1:73:29:41:d7:ba:93:
                    3d:e5:15:69:ff:4d:90:80:c9:80:9c:70:1e:ce:09:
                    85:80:21:1f:47:da:3c:ee:e5:26:f2:df:e9:85:59:
                    5f:ff:45:3c:aa:df:9e:e7:e6:3d:9a:07:05:3f:a5:
                    81:db:55:b9:47:ef:4d:77:9e:70:61:bb:15:fb:e3:
                    60:08:bd:bb:19:31:6c:03:0b:0e:4e:1e:74:fc:9f:
                    a2:7c:ac:70:6b:2c:43:00:32:a7:b5:b8:50:4a:b5:
                    ab:29:26:5c:8e:2f:d4:08:71:ca:4f:e3:0c:61:c9:
                    24:c2:bf:11:01:48:86:e5:19:d9:a4:ef:cf:2f:88:
                    ff:2b:ed:de:a0:ad:cc:fe:4a:a4:5c:27:d8:29:b0:
                    4f:c2:d6:aa:cb:e1:c2:0f:8b:f4:b4:24:4d:b1:17:
                    6a:14:b4:d3:b0:33:e9:a7:ab:6c:84:86:5d:de:4b:
                    b7:61:46:df:0c:f5:00:d3:e3:fb:97:f1:7b:0f:2c:
                    e8:47:2d:0d:a3:26:12:76:4f:ef:02:f6:d9:df:6c:
                    ef:3a:b6:96:07:7f:28:64:bd:bb:cc:f7:3d:92:83:
                    da:c0:15:c4:ea:35:c6:f1:12:9c:0f:e4:a1:ae:95:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:45:55:79:10:17:B6:12:35:72:12:A2:6C:7E:A1:26:B2:B3:04:97
            X509v3 Authority Key Identifier:
                keyid:52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:df:11:2c:6c:a2:48:86:e0:fe:59:94:51:f0:90:89:42:ac:
         da:c9:04:4b:4a:c9:a9:da:4f:cb:be:61:e4:1f:83:70:2a:ea:
         46:b8:69:e0:f7:08:05:20:41:1d:ad:00:10:d5:d7:61:b0:27:
         10:ac:bf:60:d4:58:b9:e0:a3:64:d8:dd:1d:0c:f7:63:4e:79:
         d9:95:93:27:5a:1d:d1:41:9d:f3:98:10:38:ad:1b:3d:41:d9:
         99:67:e7:6f:9f:27:98:f8:5d:cd:a9:23:c5:a3:f4:68:d1:9e:
         70:7a:1a:e4:f8:8b:a4:34:bf:4d:b3:05:10:bb:89:fb:07:49:
         8a:ee:f3:38:4e:63:1d:0c:09:f0:b4:1d:ee:30:d9:4a:fd:82:
         b3:d0:2f:c2:39:ad:a8:c0:2d:dd:1b:9e:3d:14:43:f6:74:03:
         1e:72:44:55:93:3e:6b:13:29:44:96:72:8f:49:5f:5a:ac:5a:
         c4:75:ae:0d:d9:c0:cc:37:25:7c:a7:4d:6a:63:60:dd:6c:1e:
         00:61:94:50:3f:8f:5c:eb:36:e0:65:ea:cb:27:37:f8:8e:31:
         ee:33:65:80:38:16:34:a4:00:c1:59:a4:60:bf:0d:d4:7b:d7:
         8d:c6:33:a6:b9:80:fd:ed:b1:64:d5:39:01:f1:80:ad:b0:9d:
         d5:3a:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:52:10 2025 by rpki-client