Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
File:                     2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft (raw, json)
Hash identifier:          KbehWSP4CseAJ5KkiNdToVMfJd6kUpjNEL9qW2FGOTo=
Subject key identifier:   25:AC:E5:04:3F:9F:F1:79:3F:06:57:C4:94:0E:51:F0:80:80:FC:A2
Authority key identifier: D9:6F:91:F5:02:AE:B5:C2:08:91:E1:7F:10:FF:5E:8C:9F:86:73:A7
Certificate issuer:       /CN=F3695E06AF/serialNumber=D96F91F502AEB5C20891E17F10FF5E8C9F8673A7
Certificate serial:       0688
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
Manifest number:          0685
Signing time:             Tue 04 Nov 2025 03:24:28 +0000
Manifest this update:     Tue 04 Nov 2025 03:24:27 +0000
Manifest next update:     Thu 06 Nov 2025 03:24:27 +0000
Files and hashes:         1: 2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl (hash: gL4lJ2jBfk45SQtz6DMjyZ9bSBYz+zj1LoRc8c2SQic=)
                          2: 6B702572C5B611EB874E825FF8AEA228.roa (hash: TuOEHMyp7ZkGMu80eO/vkZfJHkaFNIwGb2ogLtbprVA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 03:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672 (0x688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695E06AF, serialNumber=D96F91F502AEB5C20891E17F10FF5E8C9F8673A7
        Validity
            Not Before: Nov  4 03:24:27 2025 GMT
            Not After : Nov  6 03:24:27 2025 GMT
        Subject: CN=690971eb-d578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:93:cb:05:52:95:63:a7:cf:3c:de:f8:05:
                    7a:3b:bd:58:83:d4:f6:a2:12:ee:bc:98:c2:cc:23:
                    e2:fa:27:b0:ad:20:e1:eb:4e:22:17:dd:15:c9:ce:
                    e2:85:83:0c:f2:bd:99:a4:12:7d:ab:3a:bb:98:11:
                    4f:7f:cb:0f:a2:fa:34:4f:9d:de:7b:ad:43:c3:c9:
                    fe:51:e3:eb:3b:c9:25:be:3a:92:8b:8a:46:09:61:
                    12:88:32:73:6a:a4:a1:5f:0d:8c:e9:76:6f:0a:ca:
                    8b:ac:a2:3e:3f:13:25:67:ee:8d:fc:00:92:cd:32:
                    1b:76:11:d4:38:56:d3:a2:aa:c2:f5:11:b6:eb:c2:
                    1a:85:b0:c2:2a:66:30:19:de:f2:7f:82:16:21:ac:
                    3e:67:09:70:45:2d:85:ae:74:a4:70:57:08:44:94:
                    e7:0e:5c:b3:2f:48:5c:f8:d0:ae:d7:8e:c1:05:87:
                    96:a0:c8:52:42:89:f7:7b:14:60:c1:3d:6b:67:b2:
                    5c:ca:0f:a2:51:e4:09:ae:dc:70:9d:9c:95:b9:24:
                    93:0d:29:36:d9:ed:30:67:91:8b:5f:69:74:2e:f9:
                    78:06:d8:a7:53:10:5c:a4:78:c8:57:e0:1f:8b:3e:
                    1f:94:c1:f4:8b:ed:f0:61:7c:d0:f7:83:8d:7f:58:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AC:E5:04:3F:9F:F1:79:3F:06:57:C4:94:0E:51:F0:80:80:FC:A2
            X509v3 Authority Key Identifier:
                keyid:D9:6F:91:F5:02:AE:B5:C2:08:91:E1:7F:10:FF:5E:8C:9F:86:73:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a1:70:9a:4d:c8:17:d8:5e:8f:37:18:58:2e:c1:86:60:f0:
         da:2f:9b:a7:8b:9d:07:17:10:d5:46:2d:7b:01:6b:77:1d:9d:
         83:de:01:35:88:f2:9a:1e:2c:6e:d6:c4:71:45:14:69:db:de:
         ee:99:5c:ab:e2:3a:1e:d2:40:99:b5:ce:a7:90:61:71:f7:e3:
         fb:bb:5a:bf:b7:73:b9:85:eb:76:3d:a4:65:50:46:0e:dc:21:
         22:a0:48:6d:02:29:fc:4d:3b:71:3e:6c:2a:e0:ac:79:c4:09:
         39:ab:90:f7:db:b7:13:2f:08:94:d1:60:fc:d4:b5:25:d1:a7:
         f2:df:a8:91:71:68:6a:b4:71:7f:bc:60:24:e7:bf:0b:ec:77:
         43:0d:64:15:7d:36:c9:1b:f9:b0:f9:73:14:14:2a:fa:38:81:
         e5:1f:a6:be:45:d0:37:bb:76:b5:55:f1:0d:25:7a:92:45:e2:
         92:18:ca:5f:b0:eb:7e:59:87:b6:c8:9e:19:02:4f:f4:7e:ef:
         14:b9:1f:27:88:f2:e6:eb:f2:c9:32:5a:3c:bf:6e:80:a7:81:
         57:81:1b:4c:9f:96:d0:5a:b6:a3:c2:82:71:59:3f:63:8d:b7:
         4f:e3:6e:be:50:9d:93:e3:43:f1:1d:87:e5:f9:14:d7:d3:b2:
         06:71:5c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:05:18 2025 by rpki-client