Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
File:                     MQnplyMPK5fGUZojAYDU77BY1Us.mft (raw, json)
Hash identifier:          0UVeTPuf+J0bsVPq3up6fky9HIpwQ4B/utwvZrVuMwU=
Subject key identifier:   C6:2A:37:CA:DD:B8:7A:5C:F9:D3:E5:A7:32:54:E9:D7:BF:A4:DF:99
Authority key identifier: 31:09:E9:97:23:0F:2B:97:C6:51:9A:23:01:80:D4:EF:B0:58:D5:4B
Certificate issuer:       /CN=F36992ECAF/serialNumber=3109E997230F2B97C6519A230180D4EFB058D54B
Certificate serial:       02C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
Manifest number:          02C8
Signing time:             Tue 04 Nov 2025 05:15:37 +0000
Manifest this update:     Tue 04 Nov 2025 05:15:36 +0000
Manifest next update:     Thu 06 Nov 2025 05:15:36 +0000
Files and hashes:         1: MQnplyMPK5fGUZojAYDU77BY1Us.crl (hash: dFKj6NavaPY28Y1GHChMtSzeDdALHixbzkaEZd+msfA=)
                          2: 421E36CC9A8A11EE9A56173AD25BE465.roa (hash: 6btWgtEr5ZNoJrSB9pwHdhVF5zwvZr6M9WePfENj/6Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 05:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36992ECAF, serialNumber=3109E997230F2B97C6519A230180D4EFB058D54B
        Validity
            Not Before: Nov  4 05:15:36 2025 GMT
            Not After : Nov  6 05:15:36 2025 GMT
        Subject: CN=69098bf9-345f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a0:97:4c:a8:3e:ee:3a:b3:98:f8:a5:42:89:
                    f4:1b:75:ba:05:ec:77:e6:4c:78:a7:8b:43:76:67:
                    25:aa:76:97:38:dc:17:56:a2:64:cd:45:86:fc:eb:
                    38:7b:78:ba:25:a9:74:e4:bf:b1:47:86:b0:8e:4a:
                    63:a6:fb:66:a2:7b:67:76:40:da:da:77:45:bc:17:
                    08:08:bc:af:f0:d4:1b:81:84:85:17:df:9c:1c:6e:
                    8b:26:af:7a:65:6a:4d:7c:c5:ec:f0:4c:04:08:71:
                    92:ba:67:d9:3e:ed:92:3b:9d:c5:86:89:5a:29:15:
                    f1:0d:fa:89:21:31:06:70:a1:6e:c0:41:6b:1b:30:
                    f6:18:c8:79:d2:11:03:47:38:02:3f:f0:ea:27:7e:
                    12:39:a6:ec:da:58:dc:0b:24:cb:f4:a2:f1:65:b7:
                    51:9e:c8:d2:f5:57:61:ba:8f:68:a1:2f:65:33:12:
                    6d:77:a5:91:0a:7c:66:cf:a8:30:85:df:d7:dd:84:
                    09:e9:a9:78:35:75:72:91:16:eb:e8:1d:c9:fa:72:
                    ab:c9:96:01:de:e2:2c:71:bb:0b:bf:fb:e2:2c:0c:
                    af:df:a6:5b:b2:12:7b:f2:cd:68:ca:b1:43:15:22:
                    4e:87:d7:d1:18:b9:33:4f:c3:fd:dc:f4:6f:41:6d:
                    4b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2A:37:CA:DD:B8:7A:5C:F9:D3:E5:A7:32:54:E9:D7:BF:A4:DF:99
            X509v3 Authority Key Identifier:
                keyid:31:09:E9:97:23:0F:2B:97:C6:51:9A:23:01:80:D4:EF:B0:58:D5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:45:82:21:6a:ac:b8:4c:74:31:ec:5a:b2:ab:88:99:db:97:
         6b:f2:e6:f4:97:55:e0:e2:89:bb:53:9e:13:be:1f:78:b1:da:
         80:51:66:ce:1b:4f:e3:dc:f1:1f:f9:8f:81:05:95:86:f6:96:
         7d:6f:f1:0c:85:6b:bf:62:05:64:45:28:01:1e:82:82:37:5c:
         9a:91:30:fa:40:db:92:b7:1f:af:ea:38:83:6f:f5:65:82:6b:
         63:4f:84:fc:86:5e:2e:18:a5:97:ae:47:b9:70:ee:f2:b4:88:
         54:f1:0f:a7:4e:cc:8d:1a:e5:ed:fc:02:64:a3:e2:bb:7b:75:
         e7:47:5b:d9:0e:d6:50:7e:38:a4:2c:1b:c4:c1:53:bb:8d:65:
         66:da:ce:a5:2a:8f:23:ca:c9:ca:ee:f3:68:cb:db:f1:6e:37:
         1b:67:2d:f0:67:bf:e7:84:1e:b3:97:17:87:eb:e7:ed:eb:e0:
         75:e4:40:cc:2e:49:05:a6:8c:98:7f:7f:52:31:2c:4e:57:3d:
         11:57:41:51:98:21:a5:7a:5c:fc:37:d6:97:59:14:0a:65:18:
         77:c4:e0:24:f0:ba:d4:c6:6e:b7:9e:97:b9:ca:33:96:46:7a:
         16:fe:60:d1:75:09:84:9a:f8:09:b0:99:8a:ae:5c:94:c0:c2:
         15:db:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:04:24 2025 by rpki-client