Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
File:                     KnzueRgruFkbsTXdv7vulMHfQIc.mft (raw, json)
Hash identifier:          kWGT2YYD75u3k+Ba4VXufRwi0bn46C+O3RsOZOUGAjY=
Subject key identifier:   3D:D3:49:45:85:39:CC:EB:1D:7E:C7:AF:F5:E2:85:13:AC:E8:B3:29
Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
Certificate issuer:       /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Certificate serial:       031D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
Manifest number:          0314
Signing time:             Wed 05 Nov 2025 04:00:24 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:24 +0000
Manifest next update:     Fri 07 Nov 2025 04:00:24 +0000
Files and hashes:         1: KnzueRgruFkbsTXdv7vulMHfQIc.crl (hash: xi3eMyXEM8qYOiFpjFQNA0IW9kgdyzXuEYof2+QL9yk=)
                          2: 1A85425E69BB11EEBF5E904C4AD9E6FC.roa (hash: Kx/Y8dEbUYeqoToY5LpNSdsXIlBKib23+2DqdNa43/Y=)
                          3: FD189F0E69BA11EEBE81314C4AD9E6FC.roa (hash: UK6i2dFbIWYL9h4T/dpZ4yF8qA519gysmxncwqhjDNc=)
                          4: E44337C869BA11EE88CB094C4AD9E6FC.roa (hash: 1d8FtYAZsHDPTXDngJ49htpRva8POmc7nirQyWgiDXo=)
                          5: 3BB28D0269BA11EEABA4ED494AD9E6FC.roa (hash: Q1XgZ9ZmDeVtE4gxia+GOYWXfxLUPO9DALH0Nrtl+eg=)
                          6: B8B5DACA69BA11EEBD303C4B4AD9E6FC.roa (hash: uoqftiTs2TQ3rEVnLUYDWPuBL54Tw5Qh6vFz0fe7JV4=)
                          7: 98FDCD4669BA11EE95130C4B4AD9E6FC.roa (hash: V8tXop4xNSLK7NTMuObTNFw9mcHKdpwbwIJqeSi9teo=)
                          8: 6399788A69BA11EE9D71534A4AD9E6FC.roa (hash: kaAHuzndBPzeMjc2nNN3ZcTB7Ew41AHipGqkh1wKLvg=)
                          9: C7D92E1869B911EE953F70484AD9E6FC.roa (hash: SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797 (0x31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366CE6FAF, serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
        Validity
            Not Before: Nov  5 04:00:24 2025 GMT
            Not After : Nov  7 04:00:24 2025 GMT
        Subject: CN=690acbd8-7649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:1a:32:c5:ca:51:9b:05:6f:89:24:e0:aa:
                    78:c8:b6:d7:14:45:dd:99:fe:e0:a8:e6:51:67:49:
                    b8:91:7c:81:3e:76:ea:2a:56:e7:54:27:d0:3f:ec:
                    48:18:97:6b:08:7c:57:34:8b:62:2d:af:1d:ef:fc:
                    aa:09:6a:07:50:e5:de:c9:9b:fb:39:8e:dd:be:06:
                    6b:a9:5b:73:1d:b6:d3:4c:fd:63:cb:25:bd:91:63:
                    f3:ca:8e:9d:11:b2:97:3d:01:89:a7:d8:9d:1e:c7:
                    56:3f:1d:51:e9:87:e4:1d:36:aa:04:7b:f9:4e:76:
                    7f:8c:5c:5a:c5:f0:25:a8:f0:52:cb:48:4b:d5:7e:
                    49:a0:45:9b:59:7b:61:f0:89:1d:5c:1e:69:28:d8:
                    a6:00:2a:5d:d3:7d:1d:31:b2:ed:d2:ed:81:aa:94:
                    13:23:1b:b2:34:f5:14:4e:e5:c0:68:4a:f6:ac:98:
                    d8:46:cf:4b:b0:5b:1c:0a:35:0f:7a:bd:d0:26:0f:
                    50:82:cf:08:c2:1f:7e:a9:35:bb:69:cd:14:d3:94:
                    3d:16:b4:f5:a6:9d:48:03:4b:d4:7e:c0:e4:d2:63:
                    15:fd:67:47:0d:ae:90:12:77:9e:ca:f6:a5:c8:de:
                    74:8d:cd:50:8e:49:bc:cb:35:29:96:db:21:70:bd:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D3:49:45:85:39:CC:EB:1D:7E:C7:AF:F5:E2:85:13:AC:E8:B3:29
            X509v3 Authority Key Identifier:
                keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2e:b6:1f:6b:c4:4b:3b:27:e4:62:c5:54:14:d1:b0:2a:49:
         6d:18:09:c2:0c:0c:7f:13:7e:5b:c2:ca:64:36:3b:2a:42:7a:
         ff:42:ac:67:47:53:b7:5f:95:43:e5:ca:fa:76:a8:09:8b:bb:
         15:2c:ca:e6:91:60:ef:5a:2c:ab:52:ec:4d:40:46:c5:e4:1d:
         7a:51:9e:68:ce:79:e5:13:cc:8e:7b:a0:d3:e9:e2:f6:8d:dd:
         74:0f:90:6d:82:38:f7:71:a7:af:50:71:89:5a:2b:84:4f:57:
         8a:dc:1a:23:c2:1e:28:08:2a:a3:f4:b5:1d:13:fe:64:17:ea:
         bc:ed:4d:29:c9:13:33:6e:8d:0f:21:a6:c2:4c:aa:02:82:15:
         69:46:75:6f:c9:97:d3:e0:98:0d:11:4f:b8:8f:42:91:18:b1:
         dd:d1:42:04:c2:44:00:1c:60:98:95:22:52:56:08:49:2a:cc:
         7e:4d:c8:e9:06:4a:bc:2d:a9:5f:4b:40:1c:ac:39:0b:a2:f2:
         48:d8:f6:54:f8:8d:28:e7:bb:55:43:51:8f:d6:ce:89:6a:75:
         3c:83:44:a7:71:1e:0d:5e:f9:d5:26:f9:07:6a:fb:91:98:49:
         22:4a:e9:6d:01:0a:c5:76:85:7a:e5:7c:e7:cf:7c:2b:e7:e1:
         58:9f:0c:c8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkNFNkZBRjExMC8GA1UEBRMoMkE3Q0VFNzkxODJCQjg1OTFCQjEzNUREQkZCQkVF
OTRDMURGNDA4NzAeFw0yNTExMDUwNDAwMjRaFw0yNTExMDcwNDAwMjRaMBgxFjAU
BgNVBAMTDTY5MGFjYmQ4LTc2NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCExoyxcpRmwVviSTgqnjIttcURd2Z/uCo5lFnSbiRfIE+duoqVudUJ9A/
7EgYl2sIfFc0i2Itrx3v/KoJagdQ5d7Jm/s5jt2+BmupW3MdttNM/WPLJb2RY/PK
jp0Rspc9AYmn2J0ex1Y/HVHph+QdNqoEe/lOdn+MXFrF8CWo8FLLSEvVfkmgRZtZ
e2HwiR1cHmko2KYAKl3TfR0xsu3S7YGqlBMjG7I09RRO5cBoSvasmNhGz0uwWxwK
NQ96vdAmD1CCzwjCH36pNbtpzRTTlD0WtPWmnUgDS9R+wOTSYxX9Z0cNrpASd57K
9qXI3nSNzVCOSbzLNSmW2yFwvdKfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPdNJ
RYU5zOsdfsev9eKFE6zosykwHwYDVR0jBBgwFoAUKnzueRgruFkbsTXdv7vulMHf
QIcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZDRTZGL0Q5QTQ2NzZDNjk5QTExRUVCQ0M1RkI2NzRBRDlFNkZDL0tuenVl
UmdydUZrYnNUWGR2N3Z1bE1IZlFJYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tuenVlUmdydUZrYnNUWGR2N3Z1bE1IZlFJYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkNFNkYvRDlBNDY3NkM2OTlBMTFFRUJDQzVGQjY3NEFE
OUU2RkMvS256dWVSZ3J1Rmtic1RYZHY3dnVsTUhmUUljLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZLrYfa8RLOyfkYsVUFNGwKkltGAnC
DAx/E35bwspkNjsqQnr/QqxnR1O3X5VD5cr6dqgJi7sVLMrmkWDvWiyrUuxNQEbF
5B16UZ5oznnlE8yOe6DT6eL2jd10D5Btgjj3caevUHGJWiuET1eK3Bojwh4oCCqj
9LUdE/5kF+q87U0pyRMzbo0PIabCTKoCghVpRnVvyZfT4JgNEU+4j0KRGLHd0UIE
wkQAHGCYlSJSVghJKsx+TcjpBkq8LalfS0AcrDkLovJI2PZU+I0o57tVQ1GP1s6J
anU8g0SncR4NXvnVJvkHavuRmEkiSultAQrFdoV65Xznz3wr5+FYnwzI
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:20:33 2025 by rpki-client