Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
File:                     Wo8buWCAiFj8QkqfycBtSBLbpck.mft (raw, json)
Hash identifier:          JYBZyNRM37XWodfHpbzLmvzpfV+GneLGKfMRw0CyJIY=
Subject key identifier:   C1:1A:AE:15:36:1B:1C:97:BF:95:77:D7:D2:6C:15:B1:01:F6:6C:8E
Authority key identifier: 5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9
Certificate issuer:       /CN=F3674376AF/serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
Certificate serial:       27
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
Manifest number:          21
Signing time:             Tue 04 Nov 2025 06:48:55 +0000
Manifest this update:     Tue 04 Nov 2025 06:48:54 +0000
Manifest next update:     Thu 06 Nov 2025 06:48:54 +0000
Files and hashes:         1: Wo8buWCAiFj8QkqfycBtSBLbpck.crl (hash: ztDAJk4NL5bcc8KWKGoaVUnHKK0mP2+mZzqpLf6oC0Y=)
                          2: 6BB0CB74A5A711F088912BE0DAE4EC9C.roa (hash: kB1JbNoc3dBbzjmuhT2h2aENGY9tktmvJCxAT5G6HGQ=)
                          3: C12F71DCA5A611F0BB0100DCDAE4EC9C.roa (hash: w1R/Z75m4LwLFTF/R9uWaQzBzmjS2340Mo7wnJRbDMU=)
                          4: A76D8A26A5A711F0A78F18E4DAE4EC9C.roa (hash: 6CaRM2rDr+QwVYyHhyo41L4CTKodqz58c3JN0Cxc7P4=)
                          5: 8C8563DCA5A711F094950AE4DAE4EC9C.roa (hash: uGJxn0kxFVH+xnXPU0sjbovtNrHfisJTKGGgqWfUSLs=)
                          6: 4C01EE48A5A711F0986AEDDFDAE4EC9C.roa (hash: A7s5OPs1SpF17uQimMrgNTFUslRSjoE44d+zkAoaVyc=)
                          7: 24DDD1C4A5A711F09981CADFDAE4EC9C.roa (hash: VMl5oou874hFWogxEQIYM0u11ETAx2cwP1WKWFliKgk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 06:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674376AF, serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
        Validity
            Not Before: Nov  4 06:48:54 2025 GMT
            Not After : Nov  6 06:48:54 2025 GMT
        Subject: CN=6909a1d7-db43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:41:34:da:c3:83:4c:2d:51:7d:c6:8f:03:
                    00:30:81:f4:f5:bb:49:e2:61:e4:a6:55:c0:4a:46:
                    89:36:4d:ab:35:a8:37:3b:50:5d:37:4e:f0:9a:9f:
                    3a:84:5b:14:85:70:5e:83:c5:c1:8a:49:67:92:00:
                    d7:d5:31:ee:62:4d:64:f4:c0:82:8b:61:c9:24:8d:
                    0a:74:9b:42:a8:fa:c0:62:0a:01:32:c3:1e:5e:d5:
                    2e:bc:2e:4e:92:06:76:52:d6:4f:77:69:31:ea:f6:
                    de:7c:10:1f:fb:e8:86:88:fa:52:cd:0b:e6:8a:e4:
                    8f:1e:85:a7:df:a2:0e:77:94:a7:e1:cd:15:03:e8:
                    82:7a:54:65:e3:3f:d0:9c:89:37:1b:3d:d7:29:6c:
                    ba:f7:17:8f:aa:cb:02:0b:a0:db:13:ca:39:42:01:
                    83:21:41:94:6b:46:1e:2d:5b:d7:85:0e:eb:a4:0d:
                    e8:50:13:01:93:ea:87:7a:51:3f:17:71:9f:20:35:
                    e2:af:65:2d:6a:fa:6b:9f:8b:18:79:d3:6a:6b:da:
                    81:bc:0a:a8:fa:a2:67:b9:e1:bd:b6:27:c1:42:0b:
                    24:a8:41:2f:a6:a8:ee:fe:51:92:cd:26:1b:38:00:
                    cb:7b:2d:2f:49:aa:8c:1a:36:eb:2e:1f:34:24:ff:
                    ba:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1A:AE:15:36:1B:1C:97:BF:95:77:D7:D2:6C:15:B1:01:F6:6C:8E
            X509v3 Authority Key Identifier:
                keyid:5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8c:65:67:da:e7:79:54:5c:e4:f4:aa:88:cb:0e:6b:34:0a:
         0a:79:e1:7c:2d:d8:26:ee:9f:0a:b9:12:0e:4b:01:8f:9c:00:
         da:66:47:36:7b:e0:78:ad:bb:fb:26:5a:19:f8:8d:aa:84:0c:
         ce:02:03:ab:7a:46:4f:42:38:2e:d5:49:cd:6e:c5:60:a6:ed:
         b9:63:05:36:fd:cd:0a:f4:fc:18:03:e0:85:0f:3f:19:6d:73:
         da:a1:a7:99:a0:33:93:9a:0f:bf:18:6c:58:fe:13:9a:5b:36:
         39:b9:dc:1b:3c:9c:ab:29:82:71:33:6b:33:01:b3:54:3b:66:
         4d:d5:5a:ac:d8:a4:c5:0e:23:b0:e5:8b:4b:9e:1c:01:6d:50:
         c2:1e:95:c1:4a:ac:8f:54:de:ab:85:27:50:79:54:ea:42:db:
         7d:5d:9e:bd:f8:8a:33:f4:f6:de:e6:0f:df:9a:37:e7:79:1d:
         eb:e6:25:02:1b:b9:9b:17:c4:ed:1e:7a:e8:38:33:27:fa:e5:
         be:50:41:c3:e9:6d:61:39:8e:71:e9:7f:97:a9:a9:36:05:ea:
         9f:db:bf:08:94:15:3c:4e:d2:b5:31:49:e4:15:9c:b3:7a:09:
         68:c8:e5:3d:d9:53:7b:b3:fe:be:59:7d:52:75:ae:2e:7a:84:
         6a:84:98:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:36:42 2025 by rpki-client