Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
File:                     L9OdkqzapRN7zkgavmyN8dzNDvY.mft (raw, json)
Hash identifier:          GE+K+m9TsxYYsVfNgae8Typ+MA59wdVCfi3ZTimUL8E=
Subject key identifier:   1F:DF:88:67:E8:07:E6:34:7A:7B:12:92:9D:77:52:98:24:50:DB:DA
Authority key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
Certificate issuer:       /CN=F367B8D1AF/serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
Certificate serial:       036A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
Manifest number:          0367
Signing time:             Wed 05 Nov 2025 03:48:34 +0000
Manifest this update:     Wed 05 Nov 2025 03:48:33 +0000
Manifest next update:     Fri 07 Nov 2025 03:48:33 +0000
Files and hashes:         1: L9OdkqzapRN7zkgavmyN8dzNDvY.crl (hash: X88CzR1qWP6rFotEjm/xbvjNzJvRWgVflQeEHYrWcVE=)
                          2: 82D2D66E261811EE84FCC57F4AD9E6FC.roa (hash: 8DOR79YopZBDIjmiAAaaEool8LnL3u27308SxIQ3uSY=)
                          3: E1F87CC6261711EE9112117E4AD9E6FC.roa (hash: L/3Ed8SgC2Eem41w8cHehrxxaShVOqXifUiGhdxr7zk=)
                          4: 2BBF61F4261711EEBF1F207C4AD9E6FC.roa (hash: uweMPd3tzGkzK5NAwH3tY1Gjy+sA5uAC5mjmqHriOro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874 (0x36a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AF, serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
        Validity
            Not Before: Nov  5 03:48:33 2025 GMT
            Not After : Nov  7 03:48:33 2025 GMT
        Subject: CN=690ac912-4efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:c0:bf:98:7b:80:f9:da:83:a8:69:40:cf:
                    40:fd:e5:71:62:ef:48:c4:36:33:cc:a1:e6:bf:3a:
                    b9:7c:04:0f:3e:a3:1b:ce:e0:90:0b:88:28:97:6b:
                    c6:41:e0:29:50:f3:41:dc:b5:bb:83:d3:b8:0d:19:
                    86:3f:70:22:b5:0f:39:34:81:d8:87:78:10:e9:28:
                    c1:c7:96:45:4c:69:15:f5:a8:52:18:f7:57:5c:fe:
                    78:7b:2c:c6:04:e7:f6:18:e8:54:eb:ab:26:fc:fd:
                    7b:20:fe:89:5f:f6:99:25:d6:05:df:6e:de:f7:f3:
                    2c:27:8f:27:e3:57:fb:b4:d5:c3:ae:14:44:46:f0:
                    d1:61:18:9b:ee:1e:b3:d9:aa:65:40:84:07:ef:fd:
                    7f:78:78:94:02:2b:8c:b5:dc:a8:6f:49:5d:68:8c:
                    37:84:9d:cb:4d:27:13:8a:a7:aa:86:37:ae:bc:5d:
                    d5:ca:4a:14:af:84:ff:75:b5:e0:3f:6f:92:0c:94:
                    9a:45:61:1d:4b:16:17:73:79:cf:67:ad:96:2d:e7:
                    25:d7:ce:a6:b3:da:c5:02:2c:0b:fc:09:33:9d:a7:
                    ce:79:c6:60:7c:b5:4e:b9:21:2a:72:51:07:31:85:
                    e1:a2:5d:eb:64:de:3d:3c:9e:5b:a5:bf:68:a9:0d:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DF:88:67:E8:07:E6:34:7A:7B:12:92:9D:77:52:98:24:50:DB:DA
            X509v3 Authority Key Identifier:
                keyid:2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:60:0e:de:87:f9:60:94:11:47:5d:b0:73:de:e1:32:23:31:
         18:ca:4b:1e:19:4d:c4:bf:81:53:37:b9:10:4d:e3:d5:ad:8b:
         93:df:ea:58:94:26:bb:34:07:0f:82:1d:c4:a5:b7:56:20:0e:
         51:71:98:06:a0:37:f8:7d:9e:f4:cd:9c:c2:01:91:92:4c:2b:
         b5:40:ed:9f:96:a9:a9:88:82:57:26:a3:25:9f:e7:d6:11:4a:
         8d:74:73:9d:d7:1e:0d:f4:8b:14:85:72:37:d3:7b:86:40:f5:
         58:6b:19:b0:4b:27:dd:cb:2c:89:20:89:36:f1:17:e9:57:c1:
         3b:8a:e4:b5:71:bf:cf:ee:8e:77:62:84:91:e1:8e:bf:c5:47:
         06:b6:77:56:4d:5b:4d:8d:3a:c5:13:c3:12:a9:62:dc:d3:94:
         be:98:40:b9:c3:64:32:b8:c8:89:04:85:be:29:d2:78:ea:68:
         76:23:44:bd:7e:a3:cb:c5:be:31:32:7f:e4:b3:5d:ef:9c:72:
         ac:19:8a:17:11:17:25:44:a7:de:9d:d3:73:b5:c2:b6:39:55:
         76:14:65:36:08:4d:0d:f4:5d:a9:4c:d7:2a:23:28:b6:3f:36:
         4d:82:3b:da:ca:e3:55:a2:b5:e7:5a:12:40:69:72:dc:4d:1d:
         13:a7:b1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:52 2025 by rpki-client