Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
File:                     qO2f3Jdp7203QbndrnI9MYFl51A.mft (raw, json)
Hash identifier:          fmDmdqgo7aLdiFfJNokv71RbJgu2wafLuh/ey7HTdrs=
Subject key identifier:   E9:5E:9D:02:76:A0:5F:5D:10:1D:9E:77:05:FD:78:A0:A0:B8:1A:A6
Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
Certificate issuer:       /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Certificate serial:       0586
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
Manifest number:          0584
Signing time:             Wed 05 Nov 2025 02:43:57 +0000
Manifest this update:     Wed 05 Nov 2025 02:43:56 +0000
Manifest next update:     Fri 07 Nov 2025 02:43:56 +0000
Files and hashes:         1: qO2f3Jdp7203QbndrnI9MYFl51A.crl (hash: MeEq7cqBiyrR6z7IHLP6aXgnpd2I5nnlubuvgGWxTS0=)
                          2: B4CDDFBA096511F09EE29CA4762E951A.roa (hash: AGjlXws4tctUuB4WUyHecSclAJY+HCC3k/CqmlHphvQ=)
                          3: 4A7BCEDE833411ECA330C8B25A40D577.roa (hash: w7j8NF07MRPRcWLZHO+fmpCs8k7Jimz6EpCqZnbOkz8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1414 (0x586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628E9AF, serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
        Validity
            Not Before: Nov  5 02:43:56 2025 GMT
            Not After : Nov  7 02:43:56 2025 GMT
        Subject: CN=690ab9ed-d720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ee:72:d5:d1:fb:25:7a:00:ab:b6:0b:f7:b5:
                    f9:44:fd:6b:bc:c5:4e:1e:c8:38:69:0f:2c:54:e3:
                    6f:8b:d7:9d:45:63:b9:c7:63:dc:a5:2b:55:da:19:
                    67:93:21:22:3e:f4:31:05:2e:81:fc:be:ff:38:52:
                    ad:0d:0d:dd:e7:cf:0a:0f:15:b9:d2:4a:04:3f:ff:
                    17:64:67:41:2e:a5:bd:f8:e2:0e:13:60:6f:b8:0f:
                    bf:b8:ce:d3:9f:f1:ea:43:20:a1:93:5c:e2:0f:7e:
                    d6:c1:cf:37:c5:c6:75:ca:6a:27:1c:bb:10:0d:c4:
                    78:2a:48:b3:ff:58:2a:db:13:86:c8:60:28:a7:68:
                    64:4b:3c:4e:30:67:4f:4a:dc:52:53:99:46:ef:db:
                    63:27:6d:f9:43:cd:c7:b1:b4:a4:20:d3:cb:d0:9e:
                    89:ee:cb:b5:54:75:92:9f:51:d6:30:b8:c6:eb:e4:
                    9d:7e:1f:f2:df:55:d5:8a:e8:18:93:b9:df:b1:14:
                    cf:5b:8e:ee:c2:4d:28:48:b3:3e:03:fc:b5:91:c8:
                    c3:72:2b:55:4e:0b:b5:f4:1b:e8:a6:61:bf:b8:7f:
                    22:19:0c:84:56:50:5f:af:5b:c1:c7:ac:86:6e:2c:
                    9f:0a:d5:d5:b0:03:71:da:95:6c:ec:6e:d3:59:08:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5E:9D:02:76:A0:5F:5D:10:1D:9E:77:05:FD:78:A0:A0:B8:1A:A6
            X509v3 Authority Key Identifier:
                keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:77:4a:40:2f:d0:2d:10:b2:ab:1e:23:00:42:04:38:2f:20:
         26:ef:4f:e7:35:6b:64:1e:a6:4f:e4:77:d3:6f:49:28:36:3a:
         d4:6d:45:4a:33:a5:3d:45:5f:cc:a1:dc:08:73:fe:9e:cd:6b:
         98:fe:33:ac:aa:08:2f:c7:bb:97:6f:11:52:88:e6:bd:54:2f:
         ca:e7:ca:41:59:4a:0c:59:00:9a:0c:4b:b2:45:ea:fc:cc:fa:
         83:c6:a0:3a:2e:90:3d:32:97:f0:a9:bf:47:13:4e:fa:a8:37:
         fa:f8:1a:2e:0a:a4:ee:f9:0a:a9:2d:28:df:f3:fc:80:57:37:
         55:2e:d9:b0:de:97:f2:ed:7f:0f:f6:3d:51:00:0c:21:7c:06:
         99:61:72:d2:28:58:48:eb:47:b9:28:e4:3a:06:22:7f:12:de:
         8b:d0:20:4b:05:ae:e3:bb:3b:7c:2f:8a:87:1d:0b:94:c4:83:
         79:28:ed:18:43:42:ea:6a:42:59:d6:ff:8d:06:26:0b:45:a4:
         90:79:29:e4:c0:91:94:58:8f:9f:7a:c4:ac:e7:7c:0d:c3:80:
         ef:50:00:fb:c2:df:45:bd:75:2a:20:c0:b4:58:57:e8:80:11:
         b8:78:37:7d:46:20:bf:7a:54:c4:c5:8a:79:21:31:36:e8:d3:
         cc:22:06:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:21:18 2025 by rpki-client