Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
File:                     PQ4DaEavbVRHjAyBh8jXIjOqwco.mft (raw, json)
Hash identifier:          Gu1V+RpfDVQTOjp854JZ5mG261UYbqE/zaYetr7Asnw=
Subject key identifier:   A0:6A:BC:92:EC:9C:30:76:7D:B3:A0:9D:F3:97:DB:9A:09:0D:A9:7E
Authority key identifier: 3D:0E:03:68:46:AF:6D:54:47:8C:0C:81:87:C8:D7:22:33:AA:C1:CA
Certificate issuer:       /CN=F368312FAF/serialNumber=3D0E036846AF6D54478C0C8187C8D72233AAC1CA
Certificate serial:       0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PQ4DaEavbVRHjAyBh8jXIjOqwco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
Manifest number:          08
Signing time:             Wed 05 Nov 2025 05:46:55 +0000
Manifest this update:     Wed 05 Nov 2025 05:46:54 +0000
Manifest next update:     Fri 07 Nov 2025 05:46:54 +0000
Files and hashes:         1: PQ4DaEavbVRHjAyBh8jXIjOqwco.crl (hash: DeZoZhEDqn8QYHhvPz8x2tTPO57cITu2RnyrDoNJkgM=)
                          2: 5ADD0CAEB77711F0B31C3CF2DAE4EC9C.roa (hash: XcjIzmFNzJT5kTJblhnVUYbZcRGqo4ZoGY70idy8eA8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PQ4DaEavbVRHjAyBh8jXIjOqwco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368312FAF, serialNumber=3D0E036846AF6D54478C0C8187C8D72233AAC1CA
        Validity
            Not Before: Nov  5 05:46:54 2025 GMT
            Not After : Nov  7 05:46:54 2025 GMT
        Subject: CN=690ae4cf-90f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:b1:3d:75:4a:0f:a0:2f:67:4b:f3:0d:2b:
                    2d:1f:38:b5:c9:bd:f4:58:ea:17:de:e4:10:e7:a4:
                    0f:3b:91:d6:a7:be:5e:31:a0:fe:a4:89:36:78:a6:
                    e1:e8:6e:73:73:39:5d:77:25:b4:e1:6e:df:73:47:
                    e7:35:07:06:74:1f:03:29:ab:ec:84:af:e1:17:34:
                    d2:4e:ae:4c:1f:60:6e:86:82:42:c1:32:31:06:a2:
                    35:c0:a7:8b:17:0c:20:86:5c:cd:2a:43:41:42:c0:
                    46:45:df:e7:99:79:6a:ca:c0:48:17:a8:db:58:a6:
                    12:65:c8:e8:3e:89:93:dc:12:81:42:44:1c:94:bd:
                    38:cd:2a:27:98:e7:49:69:b1:ef:9d:7c:25:f8:5e:
                    43:94:fb:bb:cf:8f:6c:54:8a:1a:91:79:65:88:05:
                    d0:f0:61:c6:a3:f3:42:e7:cd:0d:a1:ee:c5:e6:67:
                    ea:70:a4:ca:6f:cc:bd:f8:d5:6b:af:1e:b5:99:8b:
                    e5:2c:5c:cd:13:70:82:3f:c0:8a:ac:b4:7c:75:ae:
                    69:36:97:92:9c:18:ff:d4:8d:7c:ea:9e:dd:ca:7c:
                    b1:f2:fb:1a:53:7e:64:59:8d:93:1b:1d:d6:63:ce:
                    c8:86:78:8b:27:5d:91:62:e0:19:62:5c:f1:cd:68:
                    09:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6A:BC:92:EC:9C:30:76:7D:B3:A0:9D:F3:97:DB:9A:09:0D:A9:7E
            X509v3 Authority Key Identifier:
                keyid:3D:0E:03:68:46:AF:6D:54:47:8C:0C:81:87:C8:D7:22:33:AA:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PQ4DaEavbVRHjAyBh8jXIjOqwco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368312F/0BC79D2EB77611F0877ABAE9DAE4EC9C/PQ4DaEavbVRHjAyBh8jXIjOqwco.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2f:7d:fd:93:b0:76:12:5a:2b:c1:e6:42:2c:f0:9d:35:12:
         16:02:c6:91:4a:08:2d:cb:f2:80:9f:c2:b7:f3:b5:f9:50:4a:
         cd:c4:fa:60:0d:fc:9d:23:ef:df:5f:a2:83:47:7f:80:d0:c9:
         60:ec:ad:28:54:3b:22:15:38:78:86:42:a4:5f:55:f9:72:96:
         40:3e:08:83:84:87:52:37:5a:4e:0b:02:3f:ed:b1:70:07:03:
         bb:f5:95:bd:72:73:ad:49:24:10:60:84:44:38:79:5c:6d:a2:
         51:49:7c:5d:4a:a2:3f:3f:4a:79:19:f0:23:b8:10:0e:30:c1:
         fc:31:ec:c3:a5:96:9b:54:ee:3d:ff:1a:d1:32:05:84:c8:67:
         8f:b0:14:a5:c6:c5:fd:57:ed:27:cb:8a:32:45:17:86:ac:3c:
         dd:0b:1c:22:04:85:e1:27:c6:7b:58:d5:11:f8:34:2d:08:4b:
         90:be:04:f4:74:0c:96:dc:50:d9:34:53:26:1b:37:48:eb:62:
         a8:82:b5:8b:1d:3e:5f:69:6d:d5:d7:d7:28:aa:4d:92:47:3d:
         ed:84:97:4d:55:11:4c:7f:f8:26:a1:9a:ef:97:74:ab:19:07:
         63:55:8d:ba:06:35:6f:52:dc:dd:1c:23:62:44:69:18:ad:6d:
         a3:63:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:20:08 2025 by rpki-client