Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
File:                     hHYz30sJnBpSITpyTYxq0rIkb1U.mft (raw, json)
Hash identifier:          ya0pEdhlOxkVy3QdOEOhcC819bwKAUFtdVXPRnk/Vfs=
Subject key identifier:   19:2A:33:BA:CD:BC:1C:E7:6E:3C:EB:14:D0:22:C5:FC:26:92:9E:DD
Authority key identifier: 84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55
Certificate issuer:       /CN=F369A086AF/serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
Certificate serial:       03D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
Manifest number:          03CF
Signing time:             Tue 04 Nov 2025 04:41:43 +0000
Manifest this update:     Tue 04 Nov 2025 04:41:43 +0000
Manifest next update:     Thu 06 Nov 2025 04:41:43 +0000
Files and hashes:         1: hHYz30sJnBpSITpyTYxq0rIkb1U.crl (hash: l5Zfd+5ZjNzSzZMPlDFaoc0KBQ3KaZMuXel2v/IWOsA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 04:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 976 (0x3d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A086AF, serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
        Validity
            Not Before: Nov  4 04:41:43 2025 GMT
            Not After : Nov  6 04:41:43 2025 GMT
        Subject: CN=69098407-c0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:3c:9c:fd:ab:b7:a1:2a:fd:e1:c6:22:90:
                    ee:6f:b4:0c:17:88:27:ee:d5:8c:07:b6:43:c4:b3:
                    57:0c:c0:3b:d1:e1:5f:6d:bb:88:b5:79:45:e3:a8:
                    e9:62:04:3e:51:c6:79:2c:06:51:fc:63:3c:9a:8e:
                    ac:f2:14:47:44:ae:29:18:c2:04:97:5d:5b:43:a5:
                    bd:5c:4a:c6:0f:ca:fd:f7:11:cb:37:7b:36:a9:00:
                    48:49:4c:93:c9:1a:54:0c:42:78:cd:68:cd:7c:31:
                    45:00:40:1e:91:ba:9a:ee:89:44:55:6e:79:44:03:
                    54:50:2e:1a:33:67:e1:04:ea:ba:0c:c3:09:ea:f8:
                    d9:fa:84:ff:5f:bf:ba:c0:6f:1c:30:13:f8:e3:77:
                    c8:34:f7:4d:9c:d9:01:42:1f:67:7b:98:fc:24:0c:
                    af:c6:75:d3:db:3f:d6:d2:53:8f:0e:2e:89:c2:cb:
                    39:40:52:ca:86:90:f7:64:41:2e:f7:d9:80:d0:14:
                    71:e1:cb:22:00:ba:b8:a5:8e:7c:1a:ec:c0:fb:34:
                    fb:23:73:dc:47:a8:c7:71:c5:9e:9c:49:9b:5e:78:
                    37:b1:6a:98:a0:b9:27:58:91:d0:96:6a:80:8e:18:
                    40:9a:2e:d2:c9:a0:1a:12:6f:f6:8e:69:4e:71:98:
                    8f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2A:33:BA:CD:BC:1C:E7:6E:3C:EB:14:D0:22:C5:FC:26:92:9E:DD
            X509v3 Authority Key Identifier:
                keyid:84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:61:03:7a:13:bd:0b:c5:f1:88:63:9e:78:16:a8:84:0a:38:
         6e:35:04:13:f5:6b:df:18:e9:aa:0c:07:c7:f0:de:14:58:ad:
         8e:9e:b6:c7:cd:9c:f4:d5:d6:10:68:22:5a:6e:f9:58:89:a5:
         68:60:66:ad:3d:a2:a3:5d:10:7e:75:57:bd:85:3d:96:0e:af:
         7d:0a:34:d7:5f:ce:a1:d1:41:42:f4:b3:ca:93:46:94:b5:da:
         25:05:32:6b:80:03:07:a5:06:77:a7:08:27:64:63:18:22:5f:
         bd:15:30:22:b3:49:e3:76:aa:ca:37:76:9e:d3:56:f0:37:d7:
         45:40:e5:00:04:78:28:06:84:86:10:79:1f:46:1d:cf:a5:32:
         bc:35:91:d3:27:34:9b:90:6e:b3:b0:36:3a:76:11:fc:93:7a:
         c9:51:eb:5a:c7:8d:88:21:87:23:d4:cf:22:c6:c6:2a:47:74:
         60:be:5e:2a:b9:f7:66:b0:9f:3f:87:71:41:1b:7c:f8:57:e5:
         e8:60:f9:61:4a:a7:0f:b8:14:f1:d3:e5:8b:a1:a3:af:4b:e2:
         7c:61:99:9e:84:4c:02:c4:a1:78:f0:35:53:80:1a:5a:e9:11:
         e4:f1:cb:1a:f7:37:10:f6:63:aa:75:e4:90:52:2a:b7:66:42:
         ff:97:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:57 2025 by rpki-client