Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
File:                     Zc12cqY4S1k4r9xciu-vQzS6KcA.mft (raw, json)
Hash identifier:          6qDi7SEAPMfUlGGofN/fw3ABoJOaRhjxxjL7VP9/Vek=
Subject key identifier:   AD:BD:71:8B:5E:A0:31:CE:D3:46:1F:14:7C:9E:88:E2:EB:5F:90:DF
Authority key identifier: 65:CD:76:72:A6:38:4B:59:38:AF:DC:5C:8A:EF:AF:43:34:BA:29:C0
Certificate issuer:       /CN=F3695A2AAF/serialNumber=65CD7672A6384B5938AFDC5C8AEFAF4334BA29C0
Certificate serial:       0293
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Zc12cqY4S1k4r9xciu-vQzS6KcA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
Manifest number:          0291
Signing time:             Wed 05 Nov 2025 04:20:57 +0000
Manifest this update:     Wed 05 Nov 2025 04:20:56 +0000
Manifest next update:     Fri 07 Nov 2025 04:20:56 +0000
Files and hashes:         1: Zc12cqY4S1k4r9xciu-vQzS6KcA.crl (hash: euTK65qmC4kiEcCix5U9NvUzibEBbEdtnXO/qI2REe0=)
                          2: FABF9778404F11EF82E76870762E951A.roa (hash: LBsqO52AIum2DnzkQ0UyfHJJgoQtKMXAuqtuxKPonQw=)
                          3: CB0BD6A8573811F0B498479FDAE4EC9C.roa (hash: hP8TCFSZ+MtSaLGQDJ2mcF7zKJ8CzUHgiIB+ELSv+Qo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Zc12cqY4S1k4r9xciu-vQzS6KcA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAF, serialNumber=65CD7672A6384B5938AFDC5C8AEFAF4334BA29C0
        Validity
            Not Before: Nov  5 04:20:56 2025 GMT
            Not After : Nov  7 04:20:56 2025 GMT
        Subject: CN=690ad0a8-fd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:db:18:c2:72:92:3e:84:be:df:9d:20:5f:
                    4b:ee:ab:5d:6c:18:bd:c4:66:ac:a1:b9:0f:e0:9b:
                    c3:f3:d8:e9:74:9c:c0:44:92:26:bb:8a:4b:8d:a0:
                    fe:b2:8b:cc:e0:cc:9a:97:5f:ba:f3:68:7c:89:61:
                    ce:a6:a0:8b:f7:9a:de:b9:66:14:7e:02:65:2e:55:
                    bc:e4:0c:03:40:d0:30:61:2f:cd:c9:88:39:3b:ce:
                    3f:60:2b:fb:f9:a7:53:9c:08:00:ca:13:35:20:f9:
                    2e:7b:0b:6f:ac:5f:0e:ea:2c:e7:d2:73:fc:0c:2a:
                    09:5a:11:24:d7:a8:28:97:00:73:42:5d:a2:8c:2b:
                    8c:e6:0e:23:49:e7:24:15:35:d0:a7:f3:77:7d:75:
                    cf:36:4d:ba:e2:a8:6f:d4:7d:23:b7:e9:14:e6:bb:
                    49:54:f9:e0:09:45:98:48:b2:cc:0a:28:49:33:55:
                    4f:24:55:80:b9:06:00:c4:2b:fe:e0:41:45:31:02:
                    95:eb:19:66:85:39:9f:e0:70:28:15:a7:26:08:3b:
                    81:4e:28:e9:88:d0:09:52:b2:a4:59:87:18:98:a2:
                    0a:93:0c:b2:22:26:2e:6c:c5:f8:7b:1b:f9:32:cb:
                    c6:5a:84:c6:4a:54:59:69:68:52:60:68:64:b4:11:
                    c9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BD:71:8B:5E:A0:31:CE:D3:46:1F:14:7C:9E:88:E2:EB:5F:90:DF
            X509v3 Authority Key Identifier:
                keyid:65:CD:76:72:A6:38:4B:59:38:AF:DC:5C:8A:EF:AF:43:34:BA:29:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Zc12cqY4S1k4r9xciu-vQzS6KcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a7:7d:4f:e7:1b:d6:b4:0e:6d:06:dd:a0:26:6d:96:54:59:
         13:91:f8:19:38:db:be:28:23:c9:62:ce:89:a2:c8:8a:5c:c1:
         08:01:fa:42:5e:5e:db:04:48:e4:fa:76:77:db:51:51:fd:8b:
         81:4b:af:23:3e:80:6e:b7:40:df:54:0f:92:73:ae:73:76:eb:
         72:77:27:63:23:03:fe:14:b1:df:1a:4e:b7:31:83:be:f9:32:
         45:1f:b2:9b:0b:db:82:a6:4a:ff:0a:e9:4f:2a:18:ba:08:6d:
         00:e3:b6:20:7b:d4:57:4b:6d:9c:11:65:c8:f9:2a:73:a1:a6:
         84:a6:14:0d:53:6a:4a:8e:ea:9d:c9:2b:d0:3f:84:28:78:09:
         ef:c2:ba:94:d3:ad:85:3a:be:ba:10:c7:b7:0b:9e:ab:bc:ad:
         85:bd:90:d2:8c:eb:57:1f:6b:43:b6:0b:35:6c:46:22:cd:14:
         25:ad:8a:2a:ec:42:7a:3d:01:8f:16:0c:f6:4f:fe:22:68:2d:
         13:36:14:49:c2:ef:81:74:6c:ce:97:5b:f0:a6:c5:ef:40:c2:
         e6:55:3d:98:28:11:0b:f7:2e:66:10:b2:34:55:a8:db:bc:c8:
         10:0d:6b:38:cf:30:e9:67:8d:13:0d:4f:ce:8f:a4:56:d3:bf:
         43:7e:a3:2d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICApMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTVBMkFBRjExMC8GA1UEBRMoNjVDRDc2NzJBNjM4NEI1OTM4QUZEQzVDOEFFRkFG
NDMzNEJBMjlDMDAeFw0yNTExMDUwNDIwNTZaFw0yNTExMDcwNDIwNTZaMBgxFjAU
BgNVBAMTDTY5MGFkMGE4LWZkMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDb6tsYwnKSPoS+350gX0vuq11sGL3EZqyhuQ/gm8Pz2Ol0nMBEkia7ikuN
oP6yi8zgzJqXX7rzaHyJYc6moIv3mt65ZhR+AmUuVbzkDANA0DBhL83JiDk7zj9g
K/v5p1OcCADKEzUg+S57C2+sXw7qLOfSc/wMKglaESTXqCiXAHNCXaKMK4zmDiNJ
5yQVNdCn83d9dc82TbriqG/UfSO36RTmu0lU+eAJRZhIsswKKEkzVU8kVYC5BgDE
K/7gQUUxApXrGWaFOZ/gcCgVpyYIO4FOKOmI0AlSsqRZhxiYogqTDLIiJi5sxfh7
G/kyy8ZahMZKVFlpaFJgaGS0EclFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUrb1x
i16gMc7TRh8UfJ6I4utfkN8wHwYDVR0jBBgwFoAUZc12cqY4S1k4r9xciu+vQzS6
KcAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1QTJBLzdBQTY5QzNDQzQyRTExRUVCNjQ5REE0Rjc3NTQxMkU2L1pjMTJj
cVk0UzFrNHI5eGNpdS12UXpTNktjQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1pjMTJjcVk0UzFrNHI5eGNpdS12UXpTNktjQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTVBMkEvN0FBNjlDM0NDNDJFMTFFRUI2NDlEQTRGNzc1
NDEyRTYvWmMxMmNxWTRTMWs0cjl4Y2l1LXZRelM2S2NBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1p31P5xvWtA5tBt2gJm2WVFkTkfgZ
ONu+KCPJYs6JosiKXMEIAfpCXl7bBEjk+nZ321FR/YuBS68jPoBut0DfVA+Sc65z
dutydydjIwP+FLHfGk63MYO++TJFH7KbC9uCpkr/CulPKhi6CG0A47Yge9RXS22c
EWXI+SpzoaaEphQNU2pKjuqdySvQP4QoeAnvwrqU062FOr66EMe3C56rvK2FvZDS
jOtXH2tDtgs1bEYizRQlrYoq7EJ6PQGPFgz2T/4iaC0TNhRJwu+BdGzOl1vwpsXv
QMLmVT2YKBEL9y5mELI0VajbvMgQDWs4zzDpZ40TDU/Oj6RW079DfqMt
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:13:23 2025 by rpki-client