Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
File:                     4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft (raw, json)
Hash identifier:          v4fEIPsgu7oarZJwQtKThaXidkTGH93V8PwFtf16JgM=
Subject key identifier:   56:00:B7:46:13:03:AE:62:51:9C:3F:4F:77:E7:B2:3C:CE:81:DE:43
Authority key identifier: E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F
Certificate issuer:       /CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
Certificate serial:       0D4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
Manifest number:          0D4D
Signing time:             Wed 05 Nov 2025 01:05:27 +0000
Manifest this update:     Wed 05 Nov 2025 01:05:17 +0000
Manifest next update:     Fri 07 Nov 2025 01:05:17 +0000
Files and hashes:         1: 4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl (hash: ZO+xhUCts5dH14AXlommrp8RDRP8DetBP27GPjWvDqE=)
                          2: 0DE9F16080D011E6B7882016F8AEA228.roa (hash: lapNENqbec9IiREVadsxyCzDqZnzkWBnbMRTRH0mwYI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3406 (0xd4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAF, serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
        Validity
            Not Before: Nov  5 01:05:17 2025 GMT
            Not After : Nov  7 01:05:17 2025 GMT
        Subject: CN=690aa2cd-a5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:10:fa:1c:7b:cd:9d:cd:93:bc:83:2f:3c:53:
                    4a:7f:c3:3a:82:b0:dc:c7:e8:96:fb:86:70:f8:2b:
                    fd:79:5b:ee:5c:c8:df:80:7c:1c:89:01:d2:df:5f:
                    b5:00:8e:7f:85:fc:78:b3:00:f3:b4:c0:e9:d8:ad:
                    45:4a:d9:25:2f:35:e9:c9:f7:44:c7:ba:a9:65:bb:
                    04:53:d5:b4:d4:4c:f2:46:45:e6:d0:e8:83:d7:80:
                    49:68:ea:33:5f:4f:b1:89:3f:ee:8a:3a:0b:23:39:
                    27:c6:3c:9b:3c:1d:53:35:f2:1c:05:39:b7:09:66:
                    28:d1:1f:dc:4b:21:ae:15:5c:59:4a:16:f0:f8:3e:
                    08:4b:18:a8:58:06:a0:eb:52:b1:cf:46:16:fd:3e:
                    33:eb:9f:3d:c7:52:a4:1e:f4:a0:e7:66:c5:01:f6:
                    ca:4a:a1:39:05:65:56:8a:42:1f:3a:6e:ef:98:63:
                    71:a0:3e:53:b0:c5:30:ff:58:b2:59:a8:a5:4f:c1:
                    57:42:17:db:eb:36:05:0b:db:88:e3:4e:b8:46:18:
                    49:9b:a3:14:11:3a:da:39:2f:0a:2f:e7:b3:d1:45:
                    78:06:84:3b:b0:47:77:f0:8d:93:8e:dc:f8:b0:b1:
                    4f:77:af:54:53:22:b7:1a:0d:b8:85:8b:03:39:d4:
                    27:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:00:B7:46:13:03:AE:62:51:9C:3F:4F:77:E7:B2:3C:CE:81:DE:43
            X509v3 Authority Key Identifier:
                keyid:E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:99:da:a8:b8:37:67:c6:9e:ae:c9:61:5b:1f:70:3f:8c:b9:
         77:50:96:cf:38:2e:4e:53:fe:fb:c4:66:9c:b3:35:b6:d1:cc:
         ca:03:e3:3b:e0:a3:0d:c9:95:ae:02:d0:7a:2c:3d:9e:90:a1:
         44:d8:b4:a1:48:e5:e0:e6:36:ac:5b:86:8f:c9:50:ab:c4:cf:
         41:47:80:63:42:64:45:a3:a5:a2:bf:52:3b:2d:8c:3f:f8:c5:
         fb:34:50:40:6b:cc:da:19:56:a0:82:fb:e4:c4:65:b0:54:89:
         81:4b:95:dc:70:5d:93:b8:86:9d:d6:63:c4:15:c8:4a:cd:62:
         96:3a:4c:4b:7b:72:1d:bb:29:d6:03:01:4a:41:72:fe:25:89:
         d0:17:38:de:a9:7b:88:c1:b8:29:ce:44:c9:13:56:bc:79:43:
         bb:45:a9:b1:be:68:b4:66:cd:a5:89:cb:c3:e5:8a:36:9d:19:
         7c:90:bf:d0:e6:c3:ae:ee:90:b1:cc:5b:85:a2:77:2e:c9:c9:
         67:c4:4e:b1:1d:e1:00:77:ab:89:08:12:6d:31:4f:52:cb:ff:
         0e:03:7e:78:b3:d0:ca:b3:0e:ec:b1:3f:32:e2:03:d6:92:41:
         be:aa:3b:ae:f3:1e:fb:18:5d:83:85:05:a7:6c:ac:32:a3:74:
         3f:9f:ce:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:20:04 2025 by rpki-client