Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
File:                     ki0mxmsPTvhSNY472eGm8bVde4c.mft (raw, json)
Hash identifier:          qpO1LZZjzCIiekMPoyiQdzmvoAPqatLbDVe9TMJlwjk=
Subject key identifier:   48:B6:C2:92:41:B2:89:E0:FE:A3:AE:DA:48:8B:77:EB:CF:A0:22:51
Authority key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
Certificate issuer:       /CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Certificate serial:       043D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
Manifest number:          0436
Signing time:             Wed 05 Nov 2025 03:21:58 +0000
Manifest this update:     Wed 05 Nov 2025 03:21:57 +0000
Manifest next update:     Fri 07 Nov 2025 03:21:57 +0000
Files and hashes:         1: ki0mxmsPTvhSNY472eGm8bVde4c.crl (hash: 2LWrMaoXmSshosTr372079bhAMwaCq+18g3K9sgqkPE=)
                          2: 938ED3E8902411ED9A86A0D1F1222468.roa (hash: GgjrB1MRowvieagE2XuEoecTYc9snCOj4iPepN1usqs=)
                          3: B4757670902411EDA810FAD1F1222468.roa (hash: LcXk9bYeZ53prK+LBi8a4OcZBsCqMeTNkhzE/nnjIPs=)
                          4: 6CF9C04E902411EDAA6A30D1F1222468.roa (hash: RCJ3vAgRCxwx9M4Vjn0jNM+D+vokpMLIZ09HERtg3jU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FAF, serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
        Validity
            Not Before: Nov  5 03:21:57 2025 GMT
            Not After : Nov  7 03:21:57 2025 GMT
        Subject: CN=690ac2d6-7196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:bf:ce:8f:44:79:fd:ec:3b:7d:38:f0:75:
                    97:7c:6d:af:c0:5f:f3:f8:a3:42:88:a4:d1:10:80:
                    25:8a:27:6b:9a:54:25:8d:9a:b3:b5:34:1c:5b:a0:
                    ef:b0:77:f0:e1:75:2f:81:6f:19:e8:e7:27:ed:8f:
                    a4:9e:ea:92:dd:c1:cf:5d:ba:b8:94:c5:1b:33:1a:
                    e0:2c:19:61:9f:5f:d2:8a:b6:2a:44:86:cb:9d:8d:
                    f4:49:55:9b:a4:e3:a1:2e:8b:00:49:0a:4b:87:f6:
                    28:9c:76:25:87:83:1a:c5:a4:7b:91:97:70:0c:f5:
                    ea:85:27:5b:dd:a0:2d:97:cb:c1:41:35:54:91:f6:
                    10:c9:be:f9:72:66:1e:43:75:d2:bc:85:a5:47:03:
                    77:b4:60:fb:b7:0d:3a:01:d3:32:a1:51:28:7a:01:
                    c8:28:f8:61:fe:d4:5c:72:a0:29:aa:51:82:13:d5:
                    12:f3:50:73:c8:80:c4:56:d4:56:3f:77:51:ea:85:
                    fd:6e:1f:28:8d:8d:69:b5:a9:94:a2:1f:1d:85:f1:
                    21:03:cd:2d:4c:fc:2e:f7:52:42:de:58:16:23:cf:
                    3d:1e:b4:a0:ad:d3:8f:22:85:1c:ba:57:42:9f:31:
                    e1:26:7e:f8:ee:3c:9b:18:57:df:25:9f:26:5a:68:
                    15:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B6:C2:92:41:B2:89:E0:FE:A3:AE:DA:48:8B:77:EB:CF:A0:22:51
            X509v3 Authority Key Identifier:
                keyid:92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:d1:48:a9:83:3d:bb:e5:db:c3:32:2b:ac:cc:4d:16:fa:d1:
         88:33:e9:83:ff:6a:6b:be:63:8d:77:4c:34:df:ce:eb:2b:97:
         31:31:a3:7b:d3:ba:68:cc:8a:9b:16:f8:00:ad:da:c0:90:f0:
         e6:3a:26:74:be:4f:22:ce:a5:8b:96:00:d7:ea:36:18:d6:61:
         ec:92:00:2b:22:72:9a:6d:78:7f:65:94:f4:83:2d:7d:0d:df:
         27:81:40:2d:b0:16:87:06:d6:6a:c1:cb:f6:3c:dd:34:95:fa:
         99:2f:42:5c:ea:77:db:0a:3c:70:47:bf:a8:15:e3:be:fa:11:
         8c:b3:98:7f:0f:a1:bd:82:75:97:cd:18:94:90:e4:59:ae:58:
         6e:72:5f:c7:3f:16:f3:d1:75:ed:cd:00:98:f4:af:13:d7:f0:
         b2:d6:5b:02:0b:68:2c:82:56:9d:94:4f:20:ac:e8:45:3d:1f:
         91:d7:c0:1c:3d:b2:0d:6c:22:3f:86:a9:1a:fc:b6:41:00:ab:
         28:9f:db:7a:e2:6c:8a:2f:73:e7:88:69:47:16:9c:18:9c:09:
         fa:36:72:8f:90:70:ff:de:e7:ae:6b:2c:6a:ad:6e:ee:21:0d:
         6f:52:71:aa:d9:69:a8:77:d4:d1:f6:68:a2:a5:68:56:ed:a9:
         be:de:01:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:38:07 2025 by rpki-client