Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
File:                     X2s0EhZiPYWnTyzopeKbXurPolM.mft (raw, json)
Hash identifier:          j80F9InqwMrPCCYFo34sFFOuXPRD6wxU11QPpN3pIxg=
Subject key identifier:   8A:38:12:97:C7:3A:D2:13:8A:D3:38:0D:4E:E2:FD:21:14:0F:FC:D3
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Certificate issuer:       /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial:       04A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
Manifest number:          04A7
Signing time:             Tue 04 Nov 2025 04:16:40 +0000
Manifest this update:     Tue 04 Nov 2025 04:16:39 +0000
Manifest next update:     Thu 06 Nov 2025 04:16:39 +0000
Files and hashes:         1: X2s0EhZiPYWnTyzopeKbXurPolM.crl (hash: 79sZut+mOncJknLkRdHiYBNYkRoa0nE3kURLGHqBJq0=)
                          2: 55A54EE42E9611EDA379C780F1222468.roa (hash: 92dmko5SHijeHZEqNigi1tIoOa55D1fkpQHQwRV5fc8=)
                          3: 189309602E9611ED8FED3480F1222468.roa (hash: 9thUVnLZZ7EOpFloeIsOWtyUvJheIIw/Jl2bg+WHMIM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193 (0x4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C632AF, serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
        Validity
            Not Before: Nov  4 04:16:39 2025 GMT
            Not After : Nov  6 04:16:39 2025 GMT
        Subject: CN=69097e28-70a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:8a:3b:55:05:5d:5c:9b:e8:2c:e5:2e:76:
                    fc:05:5d:bc:b2:d2:43:c0:f7:5b:ec:9e:96:02:16:
                    73:d1:8e:7f:67:ae:c1:1f:24:cc:ba:93:be:50:e9:
                    40:b8:a2:fb:dd:95:c1:2a:41:fc:b1:82:2d:86:e5:
                    b0:86:6b:59:4c:21:1a:e8:25:76:b1:6d:d5:ad:3a:
                    24:fe:81:58:93:5c:45:b0:b3:84:57:49:00:ef:34:
                    c9:19:d1:fb:b9:17:6c:cd:9e:01:fb:ea:e0:2b:4c:
                    6e:a7:3a:a3:62:03:b1:43:30:43:aa:1a:d7:80:f8:
                    cc:6c:22:e9:44:05:2c:e6:52:56:8d:a0:33:4b:67:
                    dd:8d:a6:b4:bd:1e:a4:cf:d7:44:8b:a1:fc:8d:73:
                    d6:24:4e:37:9f:d4:9e:41:41:49:9e:b6:8e:77:61:
                    d8:c4:91:7e:09:b7:e9:38:88:2f:60:42:dd:38:4a:
                    8e:b6:c1:35:b4:ce:99:df:44:22:9a:14:9b:0b:bc:
                    84:00:3a:fd:b7:9b:8f:3e:26:e7:1b:65:60:c6:3a:
                    21:f2:bf:d8:31:89:ec:91:09:4e:b4:a2:11:d1:63:
                    12:54:43:6c:45:25:a8:16:7a:00:b0:61:a8:1e:e3:
                    56:50:be:81:23:98:41:3d:d1:73:fb:26:c3:99:f9:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:38:12:97:C7:3A:D2:13:8A:D3:38:0D:4E:E2:FD:21:14:0F:FC:D3
            X509v3 Authority Key Identifier:
                keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e2:c3:28:80:7f:29:c5:79:55:be:a9:d7:5d:2b:84:2d:1a:
         5b:59:87:15:82:b5:5d:10:b9:d9:a5:35:92:88:6b:ff:bd:37:
         0a:b0:08:54:4c:fc:ee:22:39:13:a6:ff:0d:2c:49:f9:6e:39:
         b8:1c:7c:57:4e:3e:4a:e9:e0:62:1f:7f:8e:15:5a:f5:a5:01:
         70:eb:09:81:bc:e0:69:97:db:fc:15:a6:dd:d6:08:ec:a3:f2:
         3d:e1:c7:ae:e3:b7:ff:9d:0c:48:d7:b4:dc:6b:c7:95:db:ab:
         13:5a:47:37:3a:cd:d3:f8:1d:21:c5:7f:f1:bc:cd:6b:f4:2f:
         69:ed:9f:d3:5d:61:ca:24:41:a1:d0:34:41:fa:8b:75:6c:32:
         40:79:52:2f:5b:42:c5:3a:5e:db:3e:42:d8:fe:48:20:a6:8b:
         b6:dc:28:6d:e7:d1:e8:37:15:b7:47:e8:1d:d2:0c:6f:26:a0:
         b5:e0:f6:85:c7:5b:f1:1e:1a:09:ae:76:36:34:3c:b8:bb:48:
         ae:c7:69:21:91:c1:e4:6e:8f:1d:e4:d3:1f:bd:af:9c:92:c3:
         b4:7f:ef:59:09:7f:ac:b4:16:89:eb:27:2b:91:bc:2e:f3:e6:
         13:33:7b:52:c2:48:f4:1f:69:a7:0f:45:ba:93:32:d9:f8:03:
         eb:72:91:ab
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUM2MzJBRjExMC8GA1UEBRMoNUY2QjM0MTIxNjYyM0Q4NUE3NEYyQ0U4QTVFMjlC
NUVFQUNGQTI1MzAeFw0yNTExMDQwNDE2MzlaFw0yNTExMDYwNDE2MzlaMBgxFjAU
BgNVBAMTDTY5MDk3ZTI4LTcwYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCU4o7VQVdXJvoLOUudvwFXbyy0kPA91vsnpYCFnPRjn9nrsEfJMy6k75Q
6UC4ovvdlcEqQfyxgi2G5bCGa1lMIRroJXaxbdWtOiT+gViTXEWws4RXSQDvNMkZ
0fu5F2zNngH76uArTG6nOqNiA7FDMEOqGteA+MxsIulEBSzmUlaNoDNLZ92NprS9
HqTP10SLofyNc9YkTjef1J5BQUmeto53YdjEkX4Jt+k4iC9gQt04So62wTW0zpnf
RCKaFJsLvIQAOv23m48+JucbZWDGOiHyv9gxieyRCU60ohHRYxJUQ2xFJagWegCw
Yage41ZQvoEjmEE90XP7JsOZ+VeDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUijgS
l8c60hOK0zgNTuL9IRQP/NMwHwYDVR0jBBgwFoAUX2s0EhZiPYWnTyzopeKbXurP
olMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDNjMyLzM2NEM0RkY4MkU5NTExRURBNjU5QkI3REYxMjIyNDY4L1gyczBF
aFppUFlXblR5em9wZUtiWHVyUG9sTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1gyczBFaFppUFlXblR5em9wZUtiWHVyUG9sTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUM2MzIvMzY0QzRGRjgyRTk1MTFFREE2NTlCQjdERjEy
MjI0NjgvWDJzMEVoWmlQWVduVHl6b3BlS2JYdXJQb2xNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAk4sMogH8pxXlVvqnXXSuELRpbWYcV
grVdELnZpTWSiGv/vTcKsAhUTPzuIjkTpv8NLEn5bjm4HHxXTj5K6eBiH3+OFVr1
pQFw6wmBvOBpl9v8Fabd1gjso/I94ceu47f/nQxI17Tca8eV26sTWkc3Os3T+B0h
xX/xvM1r9C9p7Z/TXWHKJEGh0DRB+ot1bDJAeVIvW0LFOl7bPkLY/kggpou23Cht
59HoNxW3R+gd0gxvJqC14PaFx1vxHhoJrnY2NDy4u0iux2khkcHkbo8d5NMfva+c
ksO0f+9ZCX+stBaJ6ycrkbwu8+YTM3tSwkj0H2mnD0W6kzLZ+APrcpGr
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:13:19 2025 by rpki-client