Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File:                     CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier:          Qas4QvqB6tXyduxtdLIeOWmqCTM4QwVyxIpXOlVY68A=
Subject key identifier:   52:BB:F6:E9:D3:36:7F:1C:7D:6B:80:F3:91:77:4A:17:EC:53:5E:F9
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer:       /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial:       0250
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number:          024A
Signing time:             Tue 04 Nov 2025 05:30:49 +0000
Manifest this update:     Tue 04 Nov 2025 05:30:49 +0000
Manifest next update:     Thu 06 Nov 2025 05:30:49 +0000
Files and hashes:         1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: 5hoJs0T72VkGH4P/q6rHd93yaQgtth9F7zH5N9apZ7s=)
                          2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
                          3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
                          4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
                          5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
        Validity
            Not Before: Nov  4 05:30:49 2025 GMT
            Not After : Nov  6 05:30:49 2025 GMT
        Subject: CN=69098f89-9c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:95:f4:3d:d1:e3:ac:b3:13:29:59:3f:4e:
                    82:87:83:4f:ea:ae:ae:ee:3c:dd:d7:53:a7:9f:9a:
                    d8:b9:fb:5a:12:cb:2e:76:a6:66:9e:02:40:58:cc:
                    26:29:8d:b6:20:0e:73:a0:05:ad:a3:3d:d3:84:ad:
                    e1:63:08:d8:3d:4f:4e:fb:5e:e6:09:51:69:9f:30:
                    07:91:38:ef:19:2a:d3:2b:be:bd:43:3a:04:c2:41:
                    ee:3e:4f:a7:15:3e:c6:b9:ec:55:10:66:d9:d4:61:
                    82:1c:a9:80:a7:df:67:9b:f7:1b:d5:30:e8:ec:f6:
                    9a:71:b0:50:2a:d3:a0:47:eb:d4:53:b8:28:88:89:
                    44:8f:a4:d7:f1:48:d8:1a:65:a5:5b:4f:08:93:6e:
                    f8:4d:74:a7:2e:38:df:23:9b:d1:47:9f:c4:9b:77:
                    f3:8e:a8:e6:1a:2d:cc:f7:c4:34:77:a2:e1:04:c5:
                    98:49:0c:8d:c6:18:47:fa:92:85:87:42:92:aa:70:
                    fd:91:95:38:6d:2d:06:f1:ba:59:bf:59:04:84:51:
                    52:25:96:b5:7c:c5:00:4d:c0:d7:c8:09:da:16:76:
                    77:7a:aa:20:19:49:61:86:fe:03:e5:e7:24:5b:a3:
                    50:68:a0:9d:f7:cb:31:6a:1b:ab:cf:8d:25:b4:5f:
                    14:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BB:F6:E9:D3:36:7F:1C:7D:6B:80:F3:91:77:4A:17:EC:53:5E:F9
            X509v3 Authority Key Identifier:
                keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:2e:4d:ae:d9:e5:a3:ee:f1:84:c0:2f:bd:d4:bc:9b:4e:
         90:2a:95:fb:69:08:56:bb:3f:7d:75:1b:4a:d2:8f:f9:5e:8e:
         bd:2b:52:d6:66:80:21:dd:63:85:c5:2e:f9:1a:61:4a:14:d8:
         2a:ef:58:eb:d7:b3:69:28:68:f2:77:55:ae:c6:ab:be:a0:da:
         4a:87:e2:8d:35:2f:a4:74:b1:eb:9c:99:f1:71:68:47:c5:26:
         b0:3e:71:af:3f:58:fb:17:54:05:a1:d9:cf:07:14:8d:db:ea:
         8d:07:3a:6e:54:48:d6:e5:62:75:8e:c9:a4:4b:33:68:cf:3d:
         86:d1:d4:e8:01:91:74:b1:8e:c2:2b:24:8f:7a:e0:f8:ef:c6:
         8d:e7:4a:3a:10:48:ef:29:28:c0:5f:5d:82:96:8e:9d:53:38:
         df:e9:b3:9d:29:ba:b6:27:da:ba:ad:36:f5:a7:ac:99:97:71:
         30:0c:79:63:f8:b5:c4:d1:ca:eb:f9:dc:ad:11:ae:b8:e0:7f:
         a7:66:ae:56:e2:ad:94:86:0d:c3:f1:09:9c:a3:ed:bd:e2:df:
         03:23:4e:cb:c2:36:f1:69:ba:52:81:10:50:21:b7:d5:3a:0d:
         5a:d1:14:7c:42:21:72:97:f2:12:62:8e:c6:58:d8:22:9b:d9:
         9f:9b:cd:32
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTNBRTBBRjExMC8GA1UEBRMoMDlCMzRFMTMzNjM5RDNCNEVFMzUxNjEzQjhBNjBE
NkIxOTAyQUQ2MzAeFw0yNTExMDQwNTMwNDlaFw0yNTExMDYwNTMwNDlaMBgxFjAU
BgNVBAMTDTY5MDk4Zjg5LTljMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHV5X0PdHjrLMTKVk/ToKHg0/qrq7uPN3XU6efmti5+1oSyy52pmaeAkBY
zCYpjbYgDnOgBa2jPdOEreFjCNg9T077XuYJUWmfMAeROO8ZKtMrvr1DOgTCQe4+
T6cVPsa57FUQZtnUYYIcqYCn32eb9xvVMOjs9ppxsFAq06BH69RTuCiIiUSPpNfx
SNgaZaVbTwiTbvhNdKcuON8jm9FHn8Sbd/OOqOYaLcz3xDR3ouEExZhJDI3GGEf6
koWHQpKqcP2RlThtLQbxulm/WQSEUVIllrV8xQBNwNfICdoWdnd6qiAZSWGG/gPl
5yRbo1BooJ33yzFqG6vPjSW0XxQtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUrv2
6dM2fxx9a4DzkXdKF+xTXvkwHwYDVR0jBBgwFoAUCbNOEzY507TuNRYTuKYNaxkC
rWMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkzQUUwL0JCRTUyRkYyMDBFMTExRUZBRjg0RDYwNzAxNzAwMUIxL0NiTk9F
elk1MDdUdU5SWVR1S1lOYXhrQ3JXTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NiTk9Felk1MDdUdU5SWVR1S1lOYXhrQ3JXTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTNBRTAvQkJFNTJGRjIwMEUxMTFFRkFGODRENjA3MDE3
MDAxQjEvQ2JOT0V6WTUwN1R1TlJZVHVLWU5heGtDcldNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuHS5Nrtnlo+7xhMAvvdS8m06QKpX7
aQhWuz99dRtK0o/5Xo69K1LWZoAh3WOFxS75GmFKFNgq71jr17NpKGjyd1Wuxqu+
oNpKh+KNNS+kdLHrnJnxcWhHxSawPnGvP1j7F1QFodnPBxSN2+qNBzpuVEjW5WJ1
jsmkSzNozz2G0dToAZF0sY7CKySPeuD478aN50o6EEjvKSjAX12Clo6dUzjf6bOd
Kbq2J9q6rTb1p6yZl3EwDHlj+LXE0crr+dytEa644H+nZq5W4q2Uhg3D8Qmco+29
4t8DI07LwjbxabpSgRBQIbfVOg1a0RR8QiFyl/ISYo7GWNgim9mfm80y
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:06:46 2025 by rpki-client