Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
File:                     DoVnb92LLIvqeU6JUNJzTz-JMME.mft (raw, json)
Hash identifier:          p6taRqjw9NvCZB+tG4kQq+CtUy1Ppl57AxwMRW/YV4Q=
Subject key identifier:   B7:98:C3:77:23:21:61:95:47:B7:D6:D4:0F:61:2E:23:98:0D:AA:00
Authority key identifier: 0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
Certificate issuer:       /CN=F3694A3EAF/serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Certificate serial:       017F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
Manifest number:          017D
Signing time:             Tue 04 Nov 2025 06:12:21 +0000
Manifest this update:     Tue 04 Nov 2025 06:12:16 +0000
Manifest next update:     Thu 06 Nov 2025 06:12:16 +0000
Files and hashes:         1: DoVnb92LLIvqeU6JUNJzTz-JMME.crl (hash: HPIturx696KMdyhUaVC5TkAQP6kMOqCIehL0IlvnE6o=)
                          2: 0F329508984711EF85483C4D762E951A.roa (hash: a0BidHbztDQTPkWjYpuerywnpAYxfdwn5c2aRLRiLtE=)
                          3: 551A9F322CCD11F09F73B0B5DAE4EC9C.roa (hash: qDJZJ73fwcMimn2oqNCcTPQF5DF0ccPRcwR3NYTQ2dI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3694A3EAF, serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
        Validity
            Not Before: Nov  4 06:12:16 2025 GMT
            Not After : Nov  6 06:12:16 2025 GMT
        Subject: CN=69099945-9866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:71:21:f1:61:1c:d8:87:37:48:23:98:da:6d:
                    15:47:7f:14:ca:f0:4f:eb:65:57:20:a3:d8:64:95:
                    1f:4c:48:d8:25:72:cc:e0:56:8e:1e:88:9e:e2:38:
                    84:76:a6:bb:ff:d2:af:0d:a9:1c:1c:42:38:73:17:
                    eb:a2:3c:c7:e8:00:77:d6:c6:47:7c:af:9f:18:b9:
                    6a:20:76:36:61:81:73:7b:af:de:39:10:eb:7c:f9:
                    e3:54:30:7f:05:4a:19:94:77:4d:b2:1d:75:ce:18:
                    15:48:bd:41:88:2f:61:b4:7b:20:78:eb:7d:a3:2b:
                    59:d1:55:fc:68:2c:76:1b:bd:04:88:89:6d:ad:02:
                    a0:dc:00:42:4f:47:f8:98:6d:f3:83:de:96:e2:c6:
                    96:48:61:40:ef:92:44:8f:26:0d:38:69:4b:92:f8:
                    71:f5:08:a4:43:ae:c3:37:67:3c:1b:d0:f4:21:92:
                    a6:2e:af:55:bf:4a:ba:70:13:db:94:5c:30:2a:1d:
                    7a:df:54:98:c1:c4:69:1b:cb:b9:7e:9e:54:80:5b:
                    c5:3f:31:8e:df:8c:0c:c4:1c:d5:bf:93:ed:1a:1a:
                    cd:38:50:3b:c4:66:35:7c:37:f8:23:16:da:44:b0:
                    0f:8b:69:92:f3:14:bf:d1:83:7f:ce:1d:e8:12:54:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:98:C3:77:23:21:61:95:47:B7:D6:D4:0F:61:2E:23:98:0D:AA:00
            X509v3 Authority Key Identifier:
                keyid:0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9d:8d:db:3b:c1:1a:68:6a:a1:a5:58:a3:d7:e3:4d:87:51:
         fd:e9:85:d9:3d:53:a1:20:8a:05:45:58:66:19:48:6c:e9:de:
         f9:ab:18:16:f8:33:d5:65:e0:77:24:09:4c:3e:b1:54:68:04:
         e5:03:30:b2:2b:8b:56:f3:9d:f0:ca:30:80:0d:e4:f8:c7:e1:
         88:90:a2:af:23:6c:b7:76:17:00:74:09:b7:34:e5:57:e1:4a:
         d1:8a:57:e0:74:55:8d:56:59:d4:c5:63:b9:e0:d4:6f:f0:55:
         39:97:9b:db:36:54:00:c6:3c:c1:a5:dd:73:0d:86:64:09:30:
         9c:1e:0b:3d:7e:0c:2c:01:18:79:e8:c8:02:78:6b:29:f4:b2:
         fc:29:44:ef:f8:cf:30:29:35:2c:8d:f1:8f:ec:96:06:9f:aa:
         0d:a0:79:c5:7d:85:9a:ca:45:93:da:55:f4:01:0e:f1:15:ac:
         1f:61:3d:7c:1b:7d:06:25:16:73:f9:00:c3:c2:d1:a2:1f:22:
         90:a3:16:01:be:b5:4b:2b:c5:9b:97:54:0f:68:11:11:49:17:
         c7:f2:17:86:5a:1e:13:c3:4b:05:ca:ec:67:44:c3:16:90:eb:
         c0:d0:2a:05:63:46:1c:c0:f7:68:f0:5f:49:15:f1:ba:6d:2d:
         49:29:54:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:24:19 2025 by rpki-client