Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
File:                     v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft (raw, json)
Hash identifier:          enjrjy0GAPqFDf7En2zhLooLSILendFPf+2qkWrrCeQ=
Subject key identifier:   F0:0B:F9:25:A5:21:AA:F6:85:AA:47:94:AC:F7:CA:BB:C4:29:01:06
Authority key identifier: BF:B4:DE:18:AF:D8:D3:F8:6F:34:6A:BF:BD:2E:32:37:81:99:66:87
Certificate issuer:       /CN=F3691764AF/serialNumber=BFB4DE18AFD8D3F86F346ABFBD2E323781996687
Certificate serial:       0644
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
Manifest number:          0643
Signing time:             Wed 05 Nov 2025 02:24:57 +0000
Manifest this update:     Wed 05 Nov 2025 02:24:57 +0000
Manifest next update:     Fri 07 Nov 2025 02:24:57 +0000
Files and hashes:         1: v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl (hash: ycbp7etMogM6yKS/+XSE2L2xL4OypBG+IgKhy8b6s4s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1604 (0x644)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691764AF, serialNumber=BFB4DE18AFD8D3F86F346ABFBD2E323781996687
        Validity
            Not Before: Nov  5 02:24:57 2025 GMT
            Not After : Nov  7 02:24:57 2025 GMT
        Subject: CN=690ab579-4045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7a:28:22:a4:ea:0e:29:65:75:8f:10:fa:1a:
                    f9:ca:cb:ab:90:33:95:76:14:cf:5f:c9:2f:eb:cc:
                    03:73:18:56:50:7f:a2:6e:d2:08:6f:0b:3d:7f:31:
                    bf:47:07:76:11:a7:0c:16:6c:65:17:07:4b:cf:2a:
                    c7:96:95:82:02:c9:8b:30:16:99:8c:18:bf:17:e2:
                    1b:f9:13:f7:7b:7e:00:06:15:7a:6c:b7:8c:40:68:
                    07:7e:e2:82:d4:f6:93:a8:84:ca:16:7f:e4:37:4b:
                    fc:b3:e3:2d:e6:be:fb:a6:34:0f:92:28:85:38:f2:
                    c9:a2:32:90:0f:d9:a2:5b:dd:ee:de:8a:bb:62:b1:
                    ca:f8:19:96:13:09:e0:d8:72:6c:8d:28:c9:f6:31:
                    10:c0:19:e8:57:c3:a3:6e:8f:b9:f4:49:e5:f2:78:
                    28:b3:72:4b:ac:90:4a:4f:b2:65:c3:11:0e:61:d0:
                    3c:b0:31:70:41:26:f2:84:8d:31:4c:7f:fc:27:ec:
                    59:e2:1a:24:14:b3:40:d2:33:10:7a:0e:d5:e4:fe:
                    23:61:e1:ad:93:b5:8b:0a:67:b3:fa:67:11:98:d5:
                    a6:4c:89:c0:72:58:dd:ad:54:d1:e7:f8:b2:79:24:
                    a8:57:a5:b5:da:30:ec:c5:0f:ee:1d:a5:ea:a7:70:
                    aa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0B:F9:25:A5:21:AA:F6:85:AA:47:94:AC:F7:CA:BB:C4:29:01:06
            X509v3 Authority Key Identifier:
                keyid:BF:B4:DE:18:AF:D8:D3:F8:6F:34:6A:BF:BD:2E:32:37:81:99:66:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f1:2f:e0:93:a0:5d:b5:a0:e9:9e:20:fe:c5:ac:16:bb:bd:
         53:ab:a9:85:8f:0b:8b:a0:da:5b:31:85:ec:ec:bc:23:3e:7e:
         73:3e:db:7b:f4:59:7c:88:7b:95:51:6b:98:95:49:79:3f:d0:
         8e:a7:a0:59:a3:0b:22:3d:f4:26:b8:4d:a9:53:39:f9:a6:18:
         32:80:80:26:ce:72:4b:39:54:0e:49:6f:31:57:ef:95:13:af:
         65:85:b9:86:4b:e0:f8:16:1d:60:41:05:60:07:98:2b:f2:75:
         f0:7a:6c:62:5e:7b:cf:37:3a:21:b4:4d:a4:cc:f0:87:2f:59:
         f7:d5:5e:fc:81:b4:4a:89:4d:c9:4c:63:f2:11:62:57:49:b9:
         88:f1:3c:e5:c1:fc:fb:5c:2e:da:77:c2:06:35:53:66:93:46:
         61:a1:f1:df:b5:c7:0f:da:08:cc:35:3c:2b:f3:19:56:35:b9:
         a4:35:ef:fb:ee:b4:57:db:a3:85:8f:15:f5:d1:7b:d2:81:cc:
         1c:ad:e0:3d:ae:a3:48:af:ad:81:dd:0a:66:f4:f4:4e:62:79:
         e0:8d:4d:f4:a7:97:9a:de:a7:a2:f4:1a:1b:1f:e6:5e:d9:23:
         0b:34:db:9f:9e:a2:76:f3:75:30:7b:21:f4:58:f1:be:ee:b1:
         ab:64:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:28:09 2025 by rpki-client