Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
File:                     TiZQ4qujZbOc_hWOyk20jWQs22U.mft (raw, json)
Hash identifier:          h7WdO1nAt01A/a/6J4QmHCq8HeEhjjSU57qw+rOWU0w=
Subject key identifier:   B3:E3:61:1F:F9:EE:08:58:9A:48:77:7A:82:92:A2:72:60:89:A3:07
Authority key identifier: 4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65
Certificate issuer:       /CN=F369942EAF/serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
Certificate serial:       0A14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
Manifest number:          0A13
Signing time:             Tue 04 Nov 2025 01:22:56 +0000
Manifest this update:     Tue 04 Nov 2025 01:22:56 +0000
Manifest next update:     Thu 06 Nov 2025 01:22:56 +0000
Files and hashes:         1: TiZQ4qujZbOc_hWOyk20jWQs22U.crl (hash: 2kc/O4QB5/lGX/SeBGfsBMBofno6+rcamD3u7FlWeq8=)
                          2: 234EC302FF0211E8A910092BF8AEA228.roa (hash: NOa5khrVmkhCUl9lhv8WYW52PgfD6O4eOvTJHt2DcIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2580 (0xa14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369942EAF, serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
        Validity
            Not Before: Nov  4 01:22:56 2025 GMT
            Not After : Nov  6 01:22:56 2025 GMT
        Subject: CN=69095570-47ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:26:27:38:6d:96:69:50:ed:d1:4a:da:33:
                    ee:bc:8c:da:f4:54:93:34:91:37:85:b9:db:9c:f3:
                    2b:e6:58:5d:52:bf:60:6a:51:bf:b5:0d:15:72:68:
                    ff:98:7b:c4:f1:dd:d5:2c:59:e2:da:73:c8:9e:ec:
                    2e:34:77:5a:ce:e0:03:05:4f:ad:9e:ae:59:6a:2f:
                    74:28:e7:9f:10:6a:c8:89:2b:e4:14:a4:e4:68:75:
                    f4:a1:51:77:f5:2e:33:90:04:64:40:d5:4a:1d:f0:
                    0a:14:eb:0e:8b:69:c7:a9:5a:8a:24:c2:e4:51:d5:
                    66:14:44:73:1a:7a:c7:6a:89:4e:f3:44:88:7e:52:
                    42:f7:31:a0:1d:da:f0:84:8d:ac:0b:90:90:46:5a:
                    ca:bf:78:5c:27:9f:8c:ff:a7:96:e0:29:fe:40:d4:
                    77:33:a3:8a:86:99:4c:73:23:5d:f5:67:a9:bb:89:
                    7b:e8:99:fd:5c:02:dd:bc:ec:28:d3:b7:ba:51:d6:
                    e1:c9:54:d8:b6:f6:bc:09:fe:96:9e:00:73:51:c1:
                    59:85:87:ab:04:af:48:7a:c2:5d:25:b6:2d:d9:e0:
                    13:fc:a1:ab:d4:31:a1:62:a4:62:4a:a0:ad:76:2d:
                    40:41:66:5f:32:98:a1:79:62:0a:bc:e0:d7:eb:f0:
                    4e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E3:61:1F:F9:EE:08:58:9A:48:77:7A:82:92:A2:72:60:89:A3:07
            X509v3 Authority Key Identifier:
                keyid:4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:89:ef:d6:c9:2c:24:f2:0a:95:b2:69:63:75:c8:e9:da:33:
         88:65:b4:e1:1e:3a:bb:51:1d:40:16:4c:42:45:f1:1d:dd:47:
         fc:3f:2c:c6:de:11:d7:5a:3a:32:e1:5a:79:4d:86:f8:ae:5f:
         e0:4e:ea:4a:16:85:d3:18:19:e0:0c:ec:73:fd:6e:86:77:7e:
         77:1f:18:bc:06:9f:17:07:0b:60:15:a1:5e:b3:e3:52:17:14:
         bf:d0:8d:55:a0:f2:aa:ea:30:bb:d7:e7:45:80:38:08:38:2c:
         32:08:74:f2:38:dd:e9:54:1d:fd:21:76:a8:1f:25:1b:40:23:
         4f:d9:84:e1:dc:de:c8:03:c0:91:19:56:20:f4:31:e4:e8:05:
         37:99:09:07:a1:60:14:39:22:99:3a:98:d8:66:41:00:50:05:
         da:50:2b:41:15:d5:a4:8c:0f:e8:85:5f:ef:79:be:64:0b:30:
         c7:71:f7:5b:fd:bc:5d:ff:b4:ff:44:4d:c9:75:24:b3:50:7d:
         50:0d:91:1c:fb:44:bc:e3:b2:18:41:08:76:2e:99:24:91:39:
         0e:13:3c:2a:e1:60:ae:e4:7a:ca:04:80:8c:cd:62:44:0f:04:
         40:05:1c:05:48:66:90:49:98:2c:e8:2d:fc:09:4d:0a:d7:85:
         03:d7:fd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:35 2025 by rpki-client