Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
File:                     Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft (raw, json)
Hash identifier:          QHSHgIzMTj4Z0EA3Z2JrspTUN0gfzkpi6mqWuS+stAs=
Subject key identifier:   DB:97:92:14:C8:AE:D8:D6:E1:80:A2:F3:F5:B4:7F:B2:5F:83:2A:41
Authority key identifier: 2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D
Certificate issuer:       /CN=F369C49AAF/serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
Certificate serial:       0240
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
Manifest number:          023F
Signing time:             Tue 04 Nov 2025 05:31:02 +0000
Manifest this update:     Tue 04 Nov 2025 05:31:01 +0000
Manifest next update:     Thu 06 Nov 2025 05:31:01 +0000
Files and hashes:         1: Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl (hash: iqAuRCXFrOk5WMOaTbK20X7LRfFkQ0JMXrMrxLCxbX0=)
                          2: 3F101946015F11EFB16E3011017001B1.roa (hash: Xh6nt99XUHYlPadPzPRYk3ee0GvJbKhlgYL2g7hGR5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C49AAF, serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
        Validity
            Not Before: Nov  4 05:31:01 2025 GMT
            Not After : Nov  6 05:31:01 2025 GMT
        Subject: CN=69098f96-516f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d7:8c:32:83:67:ef:67:a8:4d:a2:f9:1a:cb:
                    c1:65:8d:b4:82:44:c8:66:94:55:7c:1b:c7:84:af:
                    2e:9e:04:99:c7:4f:98:98:44:3b:9c:32:a9:f4:e1:
                    ad:8c:1d:ec:05:a0:f6:34:19:c4:f5:61:27:2f:d5:
                    35:a1:87:47:ec:2e:4f:24:ed:0b:fe:64:f0:4b:6a:
                    91:bd:c6:e8:cb:cc:38:bf:f3:3a:17:2a:1b:c2:c0:
                    3d:57:80:2e:8c:6b:ba:4d:c1:41:9d:42:63:ac:9e:
                    7c:8c:70:73:c5:57:55:f7:af:74:be:21:4f:63:a4:
                    2b:a9:69:2c:ee:a6:a2:eb:ef:cc:8b:b4:33:e9:20:
                    72:e5:67:9f:0d:09:41:fb:87:97:95:e0:b1:8b:5a:
                    23:b8:9c:7d:2a:68:aa:3e:ad:3c:a2:dd:df:93:18:
                    eb:cc:c9:63:fb:05:d9:2a:a5:e0:ff:97:cb:6c:91:
                    0c:5a:86:1f:f4:0a:c3:c9:40:d4:d7:bf:c3:3c:d1:
                    14:77:4b:a9:96:0c:ad:7c:a8:6b:1e:25:e0:93:11:
                    bb:a9:59:37:fa:85:6f:61:32:b9:a8:e1:37:49:b0:
                    3a:50:d6:01:0d:a3:fe:b7:3e:53:62:ac:33:72:47:
                    ce:2c:10:c3:46:20:9f:8c:ec:37:6b:be:f3:3c:6a:
                    b5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:97:92:14:C8:AE:D8:D6:E1:80:A2:F3:F5:B4:7F:B2:5F:83:2A:41
            X509v3 Authority Key Identifier:
                keyid:2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:02:c3:df:6f:c7:97:65:a5:a7:c1:19:0b:30:40:59:e4:cd:
         71:58:c4:1d:26:23:17:28:bf:17:cf:09:27:5a:0e:b4:fb:ab:
         82:eb:8f:25:57:2a:75:85:dd:86:e2:2c:51:27:ae:93:e4:2e:
         2f:47:fe:82:ca:4c:2a:11:bf:a8:8f:4c:bc:c4:f2:1b:cf:3c:
         14:45:69:24:00:77:07:b7:c6:5f:37:a9:4f:2a:db:97:ee:ca:
         b3:2d:4e:ae:56:06:22:f1:52:7a:fa:df:62:ab:95:64:b1:50:
         37:b8:4e:7e:42:14:a6:79:66:94:45:46:c3:d7:18:73:65:92:
         71:2e:e9:3b:90:59:bb:75:7d:98:42:d9:42:74:37:12:30:80:
         b2:23:60:0a:a9:0c:fc:32:36:16:d8:84:84:35:5c:19:fd:7f:
         16:21:4f:13:d5:09:67:c3:e0:3f:67:18:ab:41:63:bb:52:62:
         28:b1:bf:06:17:a2:51:82:cd:8c:62:c6:cd:b1:95:8e:74:8b:
         4c:75:22:55:7e:ef:6a:01:d2:1c:65:a9:1a:f3:f8:b3:71:ca:
         a9:0d:96:72:7f:3f:20:2a:9d:69:0a:7f:21:05:f0:8f:25:ba:
         f6:94:c5:6d:4c:fa:a3:3e:08:34:05:84:25:c9:07:02:69:f0:
         4a:ae:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:25:48 2025 by rpki-client