Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
File:                     OV0yW2nyp6M_rgog4SIm0pgbsF4.mft (raw, json)
Hash identifier:          umAKHg++pRTNBTKd64f5nIvTbEFafy+NeBJMrKCllwg=
Subject key identifier:   AD:B4:0F:34:39:6D:04:E1:33:58:7E:62:B4:CA:08:B0:2E:20:88:98
Authority key identifier: 39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E
Certificate issuer:       /CN=F366AE59AF/serialNumber=395D325B69F2A7A33FAE0A20E12226D2981BB05E
Certificate serial:       024F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
Manifest number:          024F
Signing time:             Wed 05 Nov 2025 04:28:21 +0000
Manifest this update:     Wed 05 Nov 2025 04:28:20 +0000
Manifest next update:     Fri 07 Nov 2025 04:28:20 +0000
Files and hashes:         1: OV0yW2nyp6M_rgog4SIm0pgbsF4.crl (hash: S/5X/pkG4NaZyjuU4BHTdiubSE/KQ+zg9Z2ZDusMbjk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AF, serialNumber=395D325B69F2A7A33FAE0A20E12226D2981BB05E
        Validity
            Not Before: Nov  5 04:28:20 2025 GMT
            Not After : Nov  7 04:28:20 2025 GMT
        Subject: CN=690ad265-680e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:fc:98:49:53:84:c3:f7:a4:08:76:5e:c6:
                    ac:b7:a7:c8:78:9e:a8:78:fc:7c:af:92:40:66:6f:
                    c7:7c:de:ca:b9:24:7f:46:ff:43:cc:fa:38:62:56:
                    4e:9c:67:34:dd:83:ab:cd:eb:a8:4e:89:d4:f8:be:
                    c6:48:23:43:74:6b:98:78:70:e2:b4:3c:c7:9a:d9:
                    a8:fe:c6:c8:ec:77:12:3b:bf:48:74:01:58:0d:dd:
                    6f:c8:1d:6c:a8:c5:5d:98:18:2a:f7:d1:60:19:ca:
                    f9:68:56:18:8a:79:1d:a7:1e:62:d7:3e:16:18:1a:
                    fe:b3:57:72:36:dd:ff:9c:32:b7:54:84:89:5d:fb:
                    27:44:a7:62:23:a4:31:3e:97:4d:65:38:0a:71:19:
                    81:29:c4:a1:b6:b1:ea:76:1e:ae:74:59:e4:65:a2:
                    82:93:7f:31:04:17:68:2f:a7:99:50:13:12:9b:74:
                    d7:92:db:52:b9:59:f2:6e:79:b1:62:9a:e0:c4:93:
                    f7:6a:e1:af:65:8f:7e:e0:1e:21:5b:d0:ba:58:e0:
                    a9:61:ea:e2:af:45:fa:32:7b:a2:30:46:fb:30:b2:
                    b1:15:c0:ab:a1:cc:95:97:48:ef:ee:ea:eb:ac:1e:
                    99:9d:04:5d:f2:b9:2c:31:e9:4a:20:85:9b:79:bb:
                    bc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B4:0F:34:39:6D:04:E1:33:58:7E:62:B4:CA:08:B0:2E:20:88:98
            X509v3 Authority Key Identifier:
                keyid:39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:92:43:6d:2f:93:95:8a:d2:b8:1a:26:5c:51:5c:fa:c4:04:
         72:c2:b9:94:07:65:da:c2:2b:65:b1:4d:ef:5e:19:cb:40:8e:
         aa:bb:66:7a:9c:0b:ed:fc:47:54:a8:81:83:3a:25:85:41:32:
         b8:d6:e7:42:01:1f:e2:ae:f4:cc:7f:be:c1:a6:94:ad:cf:cb:
         b2:f2:fd:3d:53:fe:d5:c8:06:92:e8:7e:2f:2d:5d:1c:0e:3e:
         5f:b9:31:57:0c:25:de:06:c8:e7:93:0a:b5:30:db:25:bd:23:
         70:63:fa:0e:eb:e9:29:85:63:6b:18:f8:0e:dd:79:15:58:45:
         0a:21:68:5a:83:15:51:49:36:6f:cd:95:e3:33:08:3c:45:64:
         82:08:85:61:50:46:a9:9d:24:20:e1:cc:b2:29:be:ce:af:2f:
         09:a3:28:aa:26:81:ea:6c:fe:de:90:37:84:ae:15:d0:2f:f6:
         e8:eb:cd:36:55:04:68:32:1e:e0:00:aa:77:7c:cb:98:be:06:
         63:5d:07:56:5a:7f:ca:80:a6:14:2a:50:91:63:f5:fa:a0:a6:
         f5:05:73:45:85:af:fe:72:9c:1b:47:80:89:a3:17:60:b8:66:
         6d:b8:db:d5:8b:23:c9:35:2d:b3:b4:3d:ad:97:29:79:80:c1:
         e5:d8:29:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:23:06 2025 by rpki-client