Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
File:                     NaE6RzFmxUdFBUsur-85WeOenW8.mft (raw, json)
Hash identifier:          OSeO6IyuZEVhTdDrxK8t1EqsVNZ8WsrM+sHbrEBZwB0=
Subject key identifier:   0A:E1:79:CD:15:5D:5E:21:AE:86:BE:86:9F:E5:BB:15:A7:2B:81:8D
Authority key identifier: 35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
Certificate issuer:       /CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Certificate serial:       0567
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
Manifest number:          0564
Signing time:             Wed 05 Nov 2025 02:47:23 +0000
Manifest this update:     Wed 05 Nov 2025 02:47:20 +0000
Manifest next update:     Fri 07 Nov 2025 02:47:20 +0000
Files and hashes:         1: NaE6RzFmxUdFBUsur-85WeOenW8.crl (hash: 824QmaI+7OzrFU7Xfi2nPAOn/6JXM1VkAh0mg7u9L+U=)
                          2: 99A1984E57F311F086ED54DEDAE4EC9C.roa (hash: ZM8T8/0Cbu1okxArEtkbxlaS5j1+sO4e39kgIitch78=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1383 (0x567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666101AF, serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
        Validity
            Not Before: Nov  5 02:47:20 2025 GMT
            Not After : Nov  7 02:47:20 2025 GMT
        Subject: CN=690ababa-7d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3f:c2:73:ae:53:9c:fc:c2:b7:92:9b:c6:45:
                    46:5c:d3:94:01:8e:20:1d:96:c9:04:77:8f:bb:e5:
                    d5:c8:29:5f:aa:81:92:f2:f7:65:35:2d:d9:39:cf:
                    3b:be:a8:39:fd:ed:0a:50:33:74:fb:30:cb:a3:fe:
                    dd:ed:b5:64:cd:7d:61:4d:61:62:02:7c:40:c8:e0:
                    c1:e2:de:ed:fd:3d:70:81:0c:e9:05:2c:8b:49:70:
                    b5:3c:73:1f:a2:4f:00:fe:f3:a4:12:20:ed:5c:38:
                    7b:1c:36:08:34:33:b2:af:8d:98:f6:af:42:aa:17:
                    94:18:2e:a1:b7:e8:89:32:c5:37:93:16:8f:2d:13:
                    d8:6b:ce:82:e9:7c:aa:2d:3d:2d:e6:f9:01:ef:47:
                    6f:fc:19:68:8d:76:5f:6f:1f:7f:25:22:9c:7a:b8:
                    b9:cb:9d:99:d4:85:17:c9:35:6b:ed:92:48:1c:3b:
                    ec:c8:03:c3:69:04:9e:6a:b0:6f:4c:95:89:7f:62:
                    89:75:16:cc:95:9a:07:1c:be:4d:20:98:6c:c5:8e:
                    19:29:ee:18:e5:9d:cf:86:f2:0b:81:a8:48:93:a8:
                    f5:84:33:42:8a:41:ca:fc:bb:70:a4:7a:02:ea:2d:
                    27:ca:f7:31:0e:88:96:e9:71:e8:4c:c0:9a:1d:10:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E1:79:CD:15:5D:5E:21:AE:86:BE:86:9F:E5:BB:15:A7:2B:81:8D
            X509v3 Authority Key Identifier:
                keyid:35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:9b:11:58:a1:42:80:7d:95:8f:4e:55:ec:20:88:f4:9a:5b:
         99:c6:f0:02:7e:2a:9b:a1:f8:c0:89:10:cc:ee:88:f4:1b:eb:
         d1:c1:f4:58:0e:77:a8:41:09:2f:2c:55:bb:70:14:09:da:a7:
         3e:6f:80:5c:53:1b:f1:24:bb:0e:cb:cd:f7:eb:8b:26:ec:da:
         61:a3:4a:f2:6c:71:e9:55:69:01:fb:c9:65:45:0f:07:7a:35:
         25:05:e0:75:8d:ae:20:25:27:e3:8b:89:22:c5:e6:9f:06:85:
         b5:57:ad:0e:c8:16:c4:59:a9:17:a6:6b:30:f0:c6:56:4f:49:
         b5:4e:6f:06:a7:c8:85:8b:d0:a1:fa:81:40:1c:31:75:2f:90:
         7b:26:ef:81:e2:05:68:49:66:15:8a:49:d2:41:bf:45:09:c3:
         3b:27:0f:c5:1a:00:6a:47:13:ff:35:33:1e:c0:b1:d6:27:39:
         67:e8:9b:72:76:24:4e:be:e0:80:22:da:db:06:80:d9:37:0d:
         60:bd:17:79:b1:a8:9d:96:e9:f9:2a:03:5d:80:2a:3f:fa:04:
         a8:d1:82:24:00:b0:97:78:2a:2a:7f:92:70:38:3b:0d:98:c1:
         5b:0c:7a:80:9b:dd:df:37:a5:0c:9a:64:c6:ba:73:1c:89:94:
         69:77:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:51:25 2025 by rpki-client