Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File:                     XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier:          BrCuUmcQBPnuThq5+MI0/gPVFUZ+HsxeS0iWWu38/uw=
Subject key identifier:   71:4D:B8:5A:6E:7A:68:A6:4A:67:69:DB:96:10:26:40:EF:FD:68:54
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer:       /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial:       0837
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number:          0832
Signing time:             Wed 05 Nov 2025 01:45:22 +0000
Manifest this update:     Wed 05 Nov 2025 01:45:21 +0000
Manifest next update:     Fri 07 Nov 2025 01:45:21 +0000
Files and hashes:         1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: hHUu8AMXlYd4Gd0y42HgavtyI1+E6w2OUNQuv/gGn2M=)
                          2: 420B22A27D0111F0BA56A0A5DAE4EC9C.roa (hash: FgbgmTnolN1lRJKNhlZr9zZr69rYAV0zr0aJY9PwsCo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103 (0x837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
        Validity
            Not Before: Nov  5 01:45:21 2025 GMT
            Not After : Nov  7 01:45:21 2025 GMT
        Subject: CN=690aac32-5584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:a0:3b:65:6b:7c:8b:58:db:ff:2a:b5:d5:
                    26:8d:dd:0d:c2:99:10:55:84:85:be:f5:04:cf:75:
                    1b:ae:df:4e:52:73:7e:6b:ba:32:55:7e:c6:33:05:
                    ac:ab:2c:ad:ce:5c:d4:70:0f:3f:29:e0:e5:84:74:
                    79:c5:de:d1:44:c1:7a:ab:6b:e4:2c:5d:be:fc:30:
                    45:ef:07:44:32:3a:9f:c9:39:ea:89:4f:cf:39:de:
                    57:1c:9e:77:c3:e3:cf:fb:82:39:03:89:1f:50:b0:
                    37:43:a6:15:eb:3b:d6:72:72:8e:e1:c5:77:09:29:
                    07:82:a1:b7:8f:49:98:6f:ef:5f:f1:2f:04:b0:d1:
                    50:66:18:d2:3c:cc:3e:da:06:30:94:f0:62:88:c9:
                    2f:42:52:5a:57:d9:39:f1:45:59:53:5c:9a:c2:8b:
                    52:4e:bd:22:8d:ab:15:2e:fb:c6:0c:9f:68:05:66:
                    35:c9:8b:ca:56:22:01:e0:04:dd:2f:f7:80:9a:4f:
                    61:a6:bf:1e:80:c5:a0:8a:3a:f4:bc:36:f7:01:a6:
                    7f:f2:84:83:c3:5d:a7:a5:4b:49:28:78:bc:8a:74:
                    2e:92:5c:0f:0b:9a:9e:a4:47:1f:9f:fb:1b:d6:df:
                    e1:de:c8:be:9d:44:40:87:77:ad:db:92:39:3f:9f:
                    43:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4D:B8:5A:6E:7A:68:A6:4A:67:69:DB:96:10:26:40:EF:FD:68:54
            X509v3 Authority Key Identifier:
                keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:90:ca:8d:4f:ea:4b:7a:2e:b2:46:a1:3a:92:88:ab:8a:01:
         08:39:aa:11:9f:5f:c6:6b:18:0b:16:d8:ad:ee:67:b2:a7:29:
         55:c1:b1:41:3f:a9:71:a3:a7:b4:d2:5b:1c:04:9e:97:1d:b8:
         a3:73:a4:47:0c:8d:cf:5c:a1:d6:c2:6f:c5:e9:09:05:0f:7d:
         a3:07:8f:de:e3:be:17:e0:de:1c:5e:cf:1a:fb:a4:18:7e:cf:
         6d:01:2a:f1:9b:a9:46:9f:ec:77:01:66:6f:e4:a9:7b:18:76:
         e4:45:b4:26:3e:6e:c2:72:df:ec:4a:ae:d5:ed:0d:68:d2:e1:
         30:71:3f:eb:14:58:ef:70:ef:37:e1:d0:79:26:4d:0a:03:d5:
         40:a6:9c:98:42:3b:ec:74:47:54:18:c0:57:62:3d:89:43:dd:
         bf:1b:15:d3:84:78:19:1c:0e:27:f7:c0:7b:64:80:37:8f:fb:
         41:e8:76:f8:a9:0f:f2:3e:2a:d7:28:dc:58:e0:d1:9e:e0:9c:
         bb:d5:26:16:fe:97:31:da:62:59:06:ff:d9:0b:94:03:f0:26:
         0a:c5:b8:be:21:52:59:2a:5d:0d:0d:82:cf:24:c8:0d:a8:84:
         f6:cc:f4:ae:a5:62:d2:5a:3f:15:81:96:04:ce:b7:ed:e3:fb:
         98:cb:95:58
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzg5NjdBRjExMC8GA1UEBRMoNUNBQTk4MkMwMzE3OTMyNjMzMkQ2Qjc3MEE1OEU4
Nzk1Q0I4NDU5RjAeFw0yNTExMDUwMTQ1MjFaFw0yNTExMDcwMTQ1MjFaMBgxFjAU
BgNVBAMTDTY5MGFhYzMyLTU1ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDN8qA7ZWt8i1jb/yq11SaN3Q3CmRBVhIW+9QTPdRuu305Sc35rujJVfsYz
BayrLK3OXNRwDz8p4OWEdHnF3tFEwXqra+QsXb78MEXvB0QyOp/JOeqJT8853lcc
nnfD48/7gjkDiR9QsDdDphXrO9Zyco7hxXcJKQeCobePSZhv71/xLwSw0VBmGNI8
zD7aBjCU8GKIyS9CUlpX2TnxRVlTXJrCi1JOvSKNqxUu+8YMn2gFZjXJi8pWIgHg
BN0v94CaT2Gmvx6AxaCKOvS8NvcBpn/yhIPDXaelS0koeLyKdC6SXA8Lmp6kRx+f
+xvW3+HeyL6dRECHd63bkjk/n0ObAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcU24
Wm56aKZKZ2nblhAmQO/9aFQwHwYDVR0jBBgwFoAUXKqYLAMXkyYzLWt3CljoeVy4
RZ8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc4OTY3LzRBQTQ0MkY0NzhEOTExRUE5QTgwOTU1Q0Y4QUVBMjI4L1hLcVlM
QU1Ya3lZekxXdDNDbGpvZVZ5NFJaOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hLcVlMQU1Ya3lZekxXdDNDbGpvZVZ5NFJaOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Nzg5NjcvNEFBNDQyRjQ3OEQ5MTFFQTlBODA5NTVDRjhB
RUEyMjgvWEtxWUxBTVhreVl6TFd0M0Nsam9lVnk0Ulo4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfkMqNT+pLei6yRqE6koirigEIOaoR
n1/GaxgLFtit7meypylVwbFBP6lxo6e00lscBJ6XHbijc6RHDI3PXKHWwm/F6QkF
D32jB4/e474X4N4cXs8a+6QYfs9tASrxm6lGn+x3AWZv5Kl7GHbkRbQmPm7Cct/s
Sq7V7Q1o0uEwcT/rFFjvcO834dB5Jk0KA9VAppyYQjvsdEdUGMBXYj2JQ92/GxXT
hHgZHA4n98B7ZIA3j/tB6Hb4qQ/yPirXKNxY4NGe4Jy71SYW/pcx2mJZBv/ZC5QD
8CYKxbi+IVJZKl0NDYLPJMgNqIT2zPSupWLSWj8VgZYEzrft4/uYy5VY
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:28:12 2025 by rpki-client