Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A2CE/EC1A7F9888A711F0BF3C1BB8DAE4EC9C/1VRf55pVEDGMmBZm8MYoFkSq8ww.mft
File:                     1VRf55pVEDGMmBZm8MYoFkSq8ww.mft (raw, json)
Hash identifier:          VjL0HcrdsHY5DgvAztccM+z9gfvRkMz5kBQWcQ40gVo=
Subject key identifier:   FF:84:C3:E7:86:E8:AD:3C:31:61:70:E4:36:F6:1C:FB:92:D9:D5:0D
Authority key identifier: D5:54:5F:E7:9A:55:10:31:8C:98:16:66:F0:C6:28:16:44:AA:F3:0C
Certificate issuer:       /CN=F369A2CEAF/serialNumber=D5545FE79A5510318C981666F0C6281644AAF30C
Certificate serial:       43
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1VRf55pVEDGMmBZm8MYoFkSq8ww.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A2CE/EC1A7F9888A711F0BF3C1BB8DAE4EC9C/1VRf55pVEDGMmBZm8MYoFkSq8ww.mft
Manifest number:          42
Signing time:             Tue 04 Nov 2025 06:45:48 +0000
Manifest this update:     Tue 04 Nov 2025 06:45:47 +0000
Manifest next update:     Thu 06 Nov 2025 06:45:47 +0000
Files and hashes:         1: 1VRf55pVEDGMmBZm8MYoFkSq8ww.crl (hash: kHj0Erxy/PO1Bx22nFIuQ5eDCMLPdMFcb0QfT8hySk4=)
                          2: 3D7F8D5688A811F0AC3C36BADAE4EC9C.roa (hash: bV9y28x2EANQui1uCk/U7Sa/NSYTHjuoc66V7feJH1M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A2CE/EC1A7F9888A711F0BF3C1BB8DAE4EC9C/1VRf55pVEDGMmBZm8MYoFkSq8ww.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A2CE/EC1A7F9888A711F0BF3C1BB8DAE4EC9C/1VRf55pVEDGMmBZm8MYoFkSq8ww.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1VRf55pVEDGMmBZm8MYoFkSq8ww.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 06:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A2CEAF, serialNumber=D5545FE79A5510318C981666F0C6281644AAF30C
        Validity
            Not Before: Nov  4 06:45:47 2025 GMT
            Not After : Nov  6 06:45:47 2025 GMT
        Subject: CN=6909a11c-9765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:73:7c:7c:52:bb:6d:80:1d:35:9b:06:59:5b:
                    3b:5f:87:4a:e9:4b:af:22:d7:6d:ec:30:bc:cb:24:
                    4b:63:c6:dd:f6:92:ba:02:8f:fa:17:f6:62:67:61:
                    9b:17:be:d8:75:13:fb:ef:aa:46:80:48:30:d4:00:
                    18:68:cb:78:fe:cd:28:13:0b:b0:d0:e2:ad:13:b6:
                    3b:17:5c:14:da:07:8d:70:08:5e:85:7d:a4:54:ab:
                    a0:42:b2:08:2d:21:cd:a5:95:66:cf:46:0f:7b:94:
                    1f:b7:37:d4:07:41:1c:44:1d:16:ba:8d:3c:af:3b:
                    31:66:d1:97:7f:f3:8d:f5:94:1b:b6:03:4d:3b:12:
                    3a:0d:ba:d3:50:68:72:65:d6:ff:4f:6c:64:d1:41:
                    9f:39:8f:c3:0c:a6:06:0a:8d:f7:b6:79:e7:56:d6:
                    5d:51:94:96:49:e2:f8:b8:7f:99:fd:19:00:3d:fd:
                    29:3c:87:d7:4e:24:d0:f0:f8:bf:a0:06:67:08:b3:
                    d2:bc:d3:ac:82:c5:a5:f1:c0:fb:02:21:48:0e:e3:
                    a5:4b:20:c9:38:f5:bc:b7:98:de:fe:d5:fe:18:ab:
                    80:33:6f:fc:31:97:76:4a:50:eb:7b:f7:b7:71:99:
                    d3:95:3d:47:01:15:07:96:38:05:af:19:eb:c3:35:
                    08:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:84:C3:E7:86:E8:AD:3C:31:61:70:E4:36:F6:1C:FB:92:D9:D5:0D
            X509v3 Authority Key Identifier:
                keyid:D5:54:5F:E7:9A:55:10:31:8C:98:16:66:F0:C6:28:16:44:AA:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A2CE/EC1A7F9888A711F0BF3C1BB8DAE4EC9C/1VRf55pVEDGMmBZm8MYoFkSq8ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1VRf55pVEDGMmBZm8MYoFkSq8ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A2CE/EC1A7F9888A711F0BF3C1BB8DAE4EC9C/1VRf55pVEDGMmBZm8MYoFkSq8ww.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5a:65:9b:69:1a:3f:29:fb:b3:5a:d4:7e:20:ce:0f:03:72:
         a1:10:b1:0e:f3:31:87:d0:48:c1:30:29:30:4b:80:c8:a9:67:
         11:66:0c:65:7b:27:73:84:49:8a:49:8c:c8:6c:85:ca:a4:16:
         b6:a6:d1:f8:45:65:77:7e:2c:ea:35:a2:5f:78:ff:bd:df:a9:
         e1:88:79:13:37:10:10:66:c5:3e:0a:40:20:0b:87:3b:2e:81:
         90:e5:33:56:69:6a:bc:82:3d:5b:46:d9:cd:89:74:07:dd:6e:
         ba:05:8f:41:60:02:22:5c:fd:9e:79:77:1b:04:1e:ec:63:13:
         1e:ef:79:7a:10:b3:5e:af:52:db:47:53:b4:ec:87:87:93:c6:
         86:ff:92:7c:26:3f:bc:11:8f:d1:c7:ed:c5:67:25:91:f8:a1:
         2a:34:46:21:19:c4:00:b3:90:e4:49:ac:05:37:86:aa:24:2f:
         3e:cd:cf:4d:ae:29:b6:a6:d1:f8:7b:08:27:74:4e:23:7e:fe:
         7e:ca:db:0f:59:d3:7c:42:70:96:76:0c:46:63:e7:f5:9b:77:
         99:d3:9f:67:fc:57:35:f6:30:91:c9:cd:be:30:98:fa:59:45:
         38:1e:cb:c4:92:99:36:9f:97:6d:6b:48:38:6c:d2:5b:76:f6:
         9f:69:3e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:06:14 2025 by rpki-client