Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
File:                     JLXuZ0cVou7uiGTqX17kcyPPdmw.mft (raw, json)
Hash identifier:          C2c4t2YEpMGLqUoubMAhCDbbDZQRcI/isbL2P4OUirM=
Subject key identifier:   BA:52:F2:3E:59:7F:74:E2:39:69:C4:4A:4E:76:BA:A2:C1:3F:97:DF
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       01CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
Manifest number:          01C7
Signing time:             Wed 05 Nov 2025 04:49:56 +0000
Manifest this update:     Wed 05 Nov 2025 04:49:55 +0000
Manifest next update:     Fri 07 Nov 2025 04:49:55 +0000
Files and hashes:         1: JLXuZ0cVou7uiGTqX17kcyPPdmw.crl (hash: LPmtwahcsvhZcmt9x15ekxfXhXCZH1qvFdCo+/BW83k=)
                          2: 74E3E458B4CD11F0AA03ECBADAE4EC9C.roa (hash: AY0QiwrjAafEOuB3cHJtZkwE9/VN10SzQVkJB6bXQ/Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Nov  5 04:49:55 2025 GMT
            Not After : Nov  7 04:49:55 2025 GMT
        Subject: CN=690ad774-4cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:e5:d4:77:f6:26:a6:be:6d:ef:89:1d:75:
                    a0:a6:f8:d9:41:d3:86:43:8d:8c:9e:70:24:dd:66:
                    a6:55:86:df:8c:bf:b9:6d:cb:14:1c:52:d4:84:31:
                    6c:bc:2a:ac:46:66:67:8b:16:5c:cf:bb:f6:ea:41:
                    60:5a:18:f8:b1:17:79:d1:fd:8d:07:0b:5e:32:b5:
                    b4:20:74:eb:15:24:8b:21:15:ae:0e:e3:96:de:60:
                    99:dd:aa:3b:7c:df:6d:ae:97:70:ad:41:5f:9f:5e:
                    07:f5:ef:28:59:32:4f:b1:ff:0f:df:88:ba:fd:e4:
                    01:40:20:f5:85:3b:46:93:f0:de:2d:a9:a7:cd:b4:
                    c9:0e:86:69:4b:c9:f4:7d:0e:ea:2b:e8:03:c3:08:
                    ec:82:77:b6:25:cc:4d:da:c3:6e:75:65:26:16:d0:
                    c3:c1:f9:23:60:c4:f8:1a:57:8c:73:ed:5a:a5:ea:
                    d0:79:38:f3:f2:66:9f:42:0f:a8:5f:0d:2a:0e:9b:
                    b1:0e:09:1a:59:4a:1b:2b:49:82:ba:2c:02:42:97:
                    72:72:d2:04:8b:72:4c:18:77:b4:a4:58:a0:ae:1b:
                    1e:ef:cd:8c:99:84:72:13:d4:62:83:b2:35:13:cd:
                    f2:f7:17:bb:92:2a:a4:49:a6:f1:f1:20:22:a5:cd:
                    67:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:52:F2:3E:59:7F:74:E2:39:69:C4:4A:4E:76:BA:A2:C1:3F:97:DF
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:83:3c:71:2c:ca:ed:55:c3:ac:20:b6:63:d8:d8:86:3e:a8:
         36:8e:7e:e1:8d:e8:29:e3:3f:5e:35:f3:63:eb:cc:31:84:d2:
         6d:fc:d2:fa:df:0a:59:64:58:0e:50:74:cb:2b:6b:cf:02:9b:
         1f:e1:fc:d7:91:cf:2f:bf:e4:08:c9:76:8a:64:54:d5:a0:06:
         ce:96:f2:9c:f7:33:82:9a:0f:fe:50:e8:6d:73:78:98:76:61:
         a2:eb:60:7c:95:98:99:c3:5e:10:38:5f:64:e5:65:4b:7c:7b:
         98:68:c1:25:e2:51:89:0e:80:c7:35:a0:3e:cd:d5:ad:58:ba:
         0e:50:12:41:26:8f:87:4c:ee:26:55:29:eb:d6:03:b5:6d:da:
         e1:2e:f2:2a:2e:e5:85:94:3a:22:0d:cd:1a:b4:fc:af:05:51:
         d0:73:fd:b5:8c:9f:1d:dd:68:5c:d6:bd:c1:b2:ce:25:fc:2f:
         bc:18:aa:24:f1:98:07:15:9d:45:25:c8:a4:2f:59:c7:cc:1a:
         0f:e7:b3:e8:b9:8f:e2:28:bb:13:ab:b3:f4:61:e0:da:8d:3f:
         92:49:9d:8e:17:d9:db:e2:cd:a5:90:7b:4c:96:54:12:a2:38:
         d4:ab:b0:38:dc:9c:b9:d5:e4:08:63:69:a2:85:c6:b2:b6:64:
         be:ed:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:30:48 2025 by rpki-client