Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
File:                     OudkbOatVp92Fuam9v07GYa-1Bk.mft (raw, json)
Hash identifier:          CGPlNGY14u34AAHOxyoE/SZfN4ctiiKO3rTtq2Xjoqc=
Subject key identifier:   99:F3:5E:68:FE:07:71:2B:3E:DB:F7:92:16:DA:E5:A0:C4:16:CF:0F
Authority key identifier: 3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19
Certificate issuer:       /CN=F366A2B2AF/serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
Certificate serial:       74
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
Manifest number:          71
Signing time:             Wed 05 Nov 2025 05:35:38 +0000
Manifest this update:     Wed 05 Nov 2025 05:35:38 +0000
Manifest next update:     Fri 07 Nov 2025 05:35:38 +0000
Files and hashes:         1: OudkbOatVp92Fuam9v07GYa-1Bk.crl (hash: U3dsjbMqgByp0LO/ZHTqgeREv7z5eqDuRTYMU+WzKYo=)
                          2: F8600BDE84B911F085AD04A3DAE4EC9C.roa (hash: DP8mnGerifLfSRadwXVvA2WZ6PCmE2usVrRlV28umhs=)
                          3: EF99DEAC66E711F0A50F79A4DAE4EC9C.roa (hash: 1ALkP5AE5BnLJ65DORy6a8qL9QHzH+dCAgd18lTAG+k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A2B2AF, serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
        Validity
            Not Before: Nov  5 05:35:38 2025 GMT
            Not After : Nov  7 05:35:38 2025 GMT
        Subject: CN=690ae22a-0c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:d8:3b:b6:c7:a3:ec:ab:3f:25:b7:11:55:
                    85:a9:70:43:4a:0a:07:7a:49:de:0c:27:88:dd:44:
                    24:a8:d1:a6:2d:6a:cd:15:ea:91:f3:61:33:d8:f6:
                    94:ca:c2:68:41:79:85:8d:19:02:3e:f2:8e:27:58:
                    3d:99:9b:cd:4e:52:25:e0:29:dc:a1:56:65:97:72:
                    25:eb:78:6b:ce:c4:da:4f:ac:ac:c5:e7:c5:49:f3:
                    fe:eb:b8:26:25:8c:82:8a:dd:49:ae:c6:1a:5a:13:
                    e9:4e:e2:a3:4b:fc:e5:df:d7:c7:6c:ee:bb:e2:1f:
                    dd:a7:b0:76:83:51:95:61:9f:ae:4e:76:e8:3d:5e:
                    49:e4:47:a8:24:c2:ee:85:65:20:6e:3b:7c:06:34:
                    60:73:22:d8:01:aa:f9:9c:c8:8d:f6:6d:36:89:fe:
                    27:b4:32:b9:a1:b7:da:6c:41:f2:1b:9e:e3:f2:9f:
                    49:97:bd:96:7f:51:fa:06:0b:a0:bf:7f:af:5c:ff:
                    5f:a3:0c:7d:6e:3a:33:0a:db:b1:73:22:20:d8:52:
                    19:71:ba:90:3f:cd:a9:94:e9:ea:dd:9b:2e:eb:03:
                    44:57:02:93:87:0d:34:9c:eb:81:df:17:39:1b:cb:
                    91:9d:c5:a8:4a:d3:a7:78:8a:a8:3c:0a:4f:49:26:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F3:5E:68:FE:07:71:2B:3E:DB:F7:92:16:DA:E5:A0:C4:16:CF:0F
            X509v3 Authority Key Identifier:
                keyid:3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f1:04:d1:e5:53:ea:04:66:1b:87:7e:87:0b:5a:47:cd:3e:
         20:33:81:6d:b4:d0:ff:92:7c:ab:c4:97:8e:b4:04:4d:d5:15:
         92:5b:8d:89:78:c7:cc:e7:23:20:81:d1:81:df:d1:76:d2:6a:
         90:4f:82:1e:8f:9e:6e:70:8d:a9:2d:c7:1c:70:8c:8c:79:38:
         50:b8:35:65:d3:e0:94:f9:47:d0:08:ff:e9:cc:3e:f5:28:a7:
         c0:d6:14:53:2c:70:9b:b1:6b:e1:5e:fa:bb:ab:07:0e:33:01:
         5f:30:db:b4:a4:61:d5:3c:94:38:20:34:c1:6d:42:d3:5a:26:
         5e:70:89:01:cf:ed:6e:e1:a2:b9:7f:d9:7d:c2:20:35:2f:73:
         65:12:d0:8f:f3:16:8f:f9:92:e5:d5:fa:ef:da:98:1f:5e:a0:
         5e:97:cf:e5:13:a5:bd:0b:8d:f9:bc:b5:06:b9:8b:9e:e2:a5:
         86:1d:d9:9f:d8:4a:30:81:95:03:62:9c:c6:3a:76:c7:db:94:
         c5:13:60:97:0e:29:36:0b:c0:cf:7c:f5:4e:96:6f:db:e1:3b:
         65:b9:08:c4:c5:dc:d8:da:5c:36:4f:c9:d1:03:ec:3b:a6:ab:
         b5:1b:41:f2:88:8c:c7:c4:8e:30:47:30:41:19:32:50:de:f8:
         69:0e:e5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:20:40 2025 by rpki-client